Legal Document
Privacy Policy
Last updated: June 1, 2025
csabcounselling.in
asnstudios.app@gmail.com
Short version: We collect only what we need to run the service. We don't sell your data. We don't show ads. Your prediction data stays private to your account only.
1. Who We Are
CSAB Counselling ("we", "our", "us") operates the website csabcounselling.in — an online tool that helps JEE Mains students predict their college admission chances during CSAB 2025 counselling. We are an independent service and are not affiliated with, endorsed by, or connected to CSAB, NTA, JoSAA, or any government body.
By using our website, you agree to this Privacy Policy. If you do not agree, please do not use the service.
2. Data We Collect
We collect the minimum data necessary to provide and improve the service.
Account Information
- Your name and email address when you sign up
- Google account name and email if you use Google Sign-In
- Account creation date and last login time
Payment Information
- Razorpay payment ID (a reference number only — we never see your card or bank details)
- Amount paid and transaction timestamp
- Whether a coupon code was used
Note: All payment processing is handled by Razorpay. We never see, store, or have access to your card number, UPI ID, bank account, or any payment credentials.
Usage Data
- Your JEE rank, category, quota, and seat type when you run a prediction (stored for your history)
- Colleges you save to your wishlist
- Your ranked choice fill list
- Number of predictions run
Technical Data
- Browser type and version (collected by Firebase automatically)
- General device type (mobile or desktop)
- Pages visited and time spent (anonymous, via Firebase Analytics if enabled)
What We Do NOT Collect
- Your actual JEE application number or roll number
- Your home address or phone number
- Any biometric or sensitive personal data
- Location data beyond what your browser optionally shares
3. How We Use Your Data
- To create and manage your account
- To verify your Season Pass purchase and grant access to premium features
- To save and sync your wishlist, choice fill list, and prediction history across devices
- To send you a payment receipt or transaction confirmation email via Razorpay
- To respond to your support queries sent via Telegram or email
- To detect and prevent fraudulent payments or abuse of the coupon system
- To improve the prediction algorithm by analysing anonymised usage patterns
We do not use your data to serve you targeted advertisements. We do not build profiles for third-party advertising. We do not sell, rent, or trade your personal data to any third party.
4. Where Data Is Stored
Your account and usage data is stored in Google Firebase Firestore, a cloud database operated by Google LLC. Firebase servers are located in the United States and may be subject to US law. By using our service, you consent to your data being processed in these locations.
All data in transit between your browser and Firebase is encrypted using HTTPS/TLS. Firebase Firestore data is encrypted at rest by default.
Cached CSAB cutoff data (college names, closing ranks) is stored in your browser's localStorage for performance. This data is not personal — it is the same public CSAB cutoff data shown to all users.
5. Data Sharing
We share your data only in these limited circumstances:
- Razorpay — receives your name, email, and payment amount to process your Season Pass purchase. Their privacy policy applies to payment data: razorpay.com/privacy
- Google Firebase — stores your account and usage data as described above. Google's privacy policy applies: policies.google.com/privacy
- Legal requirement — we may disclose data if required by Indian law, court order, or regulatory authority
- Business transfer — if CSAB Counselling is ever acquired or merged, your data may be transferred to the new entity under the same privacy terms
We share no data with any advertising networks, data brokers, analytics companies, or other third parties beyond what is listed above.
6. Cookies & Local Storage
We use minimal browser storage:
- Firebase Auth session cookie — keeps you logged in between visits. Cleared when you log out.
- localStorage (CSAB data cache) — stores cached cutoff JSON data to make the predictor load faster on repeat visits. This is not personal data and is cleared when you clear your browser data or when we push a data update.
We do not use third-party tracking cookies, advertising cookies, or analytics cookies beyond Firebase's built-in anonymous analytics.
7. Your Rights
You have the following rights regarding your personal data:
- Access — you can view all your stored data on the My Account page
- Correction — you can update your display name on the My Account page at any time
- Deletion — you can request full account deletion by emailing asnstudios.app@gmail.com. We will delete your account and all associated data (wishlist, choices, history) within 7 business days.
- Data export — you can request a copy of your stored data by emailing us
- Withdrawal of consent — you can stop using the service at any time. Your data will be retained for 12 months after your last login, then deleted automatically.
Note on deletion: Deleting your account does not entitle you to a refund of the Season Pass fee. Please review our
Refund Policy before requesting deletion.
8. Children's Privacy
Our service is intended for JEE Mains students who are typically 17 years of age or older. We do not knowingly collect personal data from children under the age of 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at asnstudios.app@gmail.com and we will delete the information promptly.
9. Security
We take reasonable measures to protect your data:
- All connections are encrypted via HTTPS (enforced by Netlify)
- Firebase Firestore rules ensure each user can only access their own data — no user can read another user's data
- Payments are processed via Razorpay using industry-standard PCI-DSS compliant infrastructure
- Firebase Auth protects accounts with built-in brute-force protection
No method of internet transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach that affects your personal data, we will notify you by email within 72 hours of discovery.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify you by email or by placing a notice on the website. Your continued use of the service after any changes constitutes acceptance of the updated policy.