Privacy policy

Moksh EduFX Private Limited (proposed name, incorporation in progress), Connaught Place, New Delhi 110001, decides why and how your personal data is processed and is the Data Fiduciary for the purposes of the DPDP Act.

For any privacy question or request, write to privacy@mokshedufx.com. For complaints, write to our Grievance Officer at grievance@mokshedufx.com. The name of the Grievance Officer will be published on this page once appointed.

We collect only what we need to advise you and to help you apply. Depending on how you use our services, this may include:

• Identity and contact details: name, date of birth, phone number, email address, city and, where needed for applications or visas, passport details.
• Academic information: mark sheets, degree certificates, transcripts, English test scores, CV, statement of purpose and letters of recommendation.
• Preferences: countries, courses, intakes and budget you are interested in.
• Financial information needed for admission or visa files: sponsor details, bank statements, education loan sanction letters and income documents. We never ask for your card PINs, OTPs, net banking passwords or UPI PINs.
• Information about parents or guardians, where they are sponsors or where the student is under 18.
• Records of our conversations with you, including call notes, emails and chat messages.
• Technical data when you visit the website: IP address, device and browser type, pages visited and cookie identifiers. See our cookie policy.

We process your personal data on the basis of the consent you give us when you register, book a session or submit an enquiry, and, where the law allows, for certain legitimate uses such as complying with a legal obligation. Each consent request will be accompanied by a notice that explains the data and the purpose in clear language, in English or, on request, in another language listed in the Eighth Schedule to the Constitution.

• To counsel you and prepare a shortlist of courses and countries.
• To prepare and submit applications to education providers you have chosen.
• To help you with offer acceptance, visa applications, accommodation and pre-departure arrangements.
• To send you information about events, deadlines and services you have asked about. You can opt out of marketing at any time.
• To keep records required by law, resolve disputes and prevent fraud.
• To improve our website and services, using aggregated or de-identified data wherever possible.

We share your data only when it is needed for the purpose you gave it for, or when the law requires it. We do not sell your personal data.

• Universities, colleges and other education providers you choose to apply to, and the application portals they use.
• Test owners, scholarship bodies and accommodation, insurance, banking or loan providers, only when you ask us to connect you with them.
• Service providers who process data on our behalf as Data Processors, such as cloud hosting, CRM, email and messaging providers, under written contracts that require them to protect it.
• Government authorities, courts or regulators when we are legally required to.

Because you are applying to study abroad, your data will necessarily be sent to education providers and systems outside India. Some of our service providers may also store data outside India. We transfer data only to the extent needed for the purpose, and not to any country or territory that the Government of India restricts under section 16 of the DPDP Act.

Many students start planning before they turn 18. Under the DPDP Act, a person under 18 is a child, and we will process a child's personal data only with the verifiable consent of a parent or lawful guardian. We do not track children's behaviour for advertising, and we do not direct targeted advertising at children.

We keep your data for as long as you are using our services and for a reasonable period afterwards to support you through your course and to meet legal, tax and audit requirements. When the purpose is complete and no law requires us to keep it, or when you withdraw consent, we will erase it and ask our Data Processors to do the same. Where the law specifies a minimum retention period, for example for logs, we will follow it.

We use reasonable security safeguards, including encryption in transit, access controls based on role, logging and staff confidentiality obligations. If a personal data breach occurs, we will inform affected individuals and the Data Protection Board of India as the law requires.

Under the DPDP Act you have the right to:

• Obtain a summary of the personal data we process about you, the processing activities, and the identities of others we have shared it with.
• Ask us to correct, complete or update inaccurate or incomplete data.
• Ask us to erase data that is no longer needed for the purpose, unless the law requires us to keep it.
• Withdraw your consent at any time, as easily as you gave it. Withdrawal does not affect processing already done, but it may mean we can no longer help with an application in progress.
• Nominate another person to exercise your rights if you die or become incapable.
• Have your grievances addressed by us, and, if you are not satisfied, complain to the Data Protection Board of India.

Send any complaint about how we handle your data to grievance@mokshedufx.com, with your name, contact details and a description of the issue. We will acknowledge it promptly and respond within the period required under the DPDP Rules, 2025; we aim to resolve most requests well within that time.

You must first raise a grievance with us before approaching the Data Protection Board of India. If you are not satisfied with our response, you may then file a complaint with the Board in the manner it prescribes.

You also have duties under the DPDP Act: to provide accurate information, not to impersonate anyone, and not to file false or frivolous complaints.

We will update this policy when our practices or the law change, including as further provisions of the DPDP Act and Rules come into force. The date at the top shows the latest version. If a change affects how we use data you have already given us, we will notify you and, where needed, ask for fresh consent.