This Privacy Policy explains how NeoNeev AI Private Limited (“NeoNeev AI”, “we”, “us”) collects, uses, shares, and protects personal data when you use our platform and services. It is published in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000, and the IT (Reasonable Security Practices and Sensitive Personal Data or Information) Rules, 2011.
1. Who we are and scope
NeoNeev AI Private Limited is the Data Fiduciary for personal data on the platform (Policy version PP-v1.0, effective 10 June 2026). We process data under the Digital Personal Data Protection Act, 2023. Institutional customers receive services under our Data Processing Addendum; they must ensure lawful basis and consent before uploading student data.
2. Data we collect — itemised notice (DPDP Act)
In compliance with the DPDP Act, the following table provides an itemised notice of personal data collected and the specific purpose for each category:
| Category of Personal Data | Specific Data Elements | Purpose of Processing |
|---|---|---|
| Account & Profile | Name, email, phone, role, institution, designation | Provision account, authenticate logins, send service communications |
| Student Profile | Academic details, resume, marksheets, skills, assessment results | Match profile with employer roles; generate placement analytics |
| Usage Data | Device info, IP address, log data, pages/features used | Secure platform, prevent fraud, monitor technical performance |
| Payment Data | Billing details, transaction references (not full card numbers) | Process subscription payments via certified payment gateways |
| Communications | Support requests, messages, emails to NeoNeev AI | Respond to queries, resolve grievances, improve support |
3. How we use your data
We use personal data to:
- Provide, operate, and secure the Services;
- Create and match student–employer–college connections;
- Generate AI-assisted scores, recommendations, and communications;
- Process payments and provide billing support;
- Respond to support requests and resolve grievances;
- Send service and transactional communications;
- Comply with legal obligations; and
- Improve and develop the Services.
4. Legal basis, granular consent, and ease of withdrawal
We do not sell personal data. Non-essential cookies and analytics load only after your cookie preference choice.
We collect separate, purpose-specific consents recorded in an immutable consent ledger with timestamp, policy version, and source. Categories include: (1) core platform services — required for account operation; (2) AI skill scoring — resume/marksheet/assessment analysis via external LLMs; (3) employer visibility — talent-pool discovery (anonymous by default; full details only per employer approval); (4) anonymised model training — opt-in only, default off.
You may withdraw optional consents at any time with the same ease as granting them — via Student Dashboard → “Privacy & Consent” toggles or by emailing contact@neoneevai.com. Withdrawal stops the related processing immediately. Core platform consent cannot be withdrawn without deleting your account.
Where students are minors, all optional processing remains blocked until verifiable parental consent is on record. We do not undertake behavioural advertising or cross-site tracking directed at children.
5. Who we share data with
Within the platform:
- Students see only their own profile;
- A college’s placement office sees its own registered students;
- Employers see only students who opt in to their specific role; and
- Enterprise/analytics partners receive only anonymised, aggregated insights — never individual student records.
6. Service providers and legal sharing
Service providers (sub-processors): hosting, database, email, payment, and AI providers who process data on our behalf under strict contractual safeguards and data processing agreements. We require processors to maintain appropriate security and process data only on our documented instructions.
Legal and safety: we may share data where required by law, court order, or to protect rights, safety, and the integrity of the Services.
7. AI processing
Some features use AI models to analyse profiles and generate recommendations, summaries, and draft communications. Inputs may be processed by trusted AI providers under contractual confidentiality and security terms. AI outputs are informational only and may contain errors; they do not constitute a guarantee of any outcome.
8. Data retention
We retain personal data for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. When data is no longer required, we delete or anonymise it. On account deletion, Customer Data is deleted or returned per our Terms and the Data Processing Addendum, unless retention is legally required.
9. How we protect your data
We implement reasonable security practices and procedures as required under the IT Act and SPDI Rules, 2011, including:
- Encryption in transit (TLS) and at rest for sensitive data;
- Role-based access controls and least-privilege permissions;
- Security monitoring and audit logging; and
- Regular security assessments.
10. Your rights under the DPDP Act
You have the following rights as a Data Principal. Exercise of these rights is subject to your duty to provide verifiably authentic information and not to register false or frivolous grievances.
| Your Right | What It Means | How to Exercise It |
|---|---|---|
| Right to Access | Obtain a summary of your personal data we hold | Account Settings → ‘Download my data’ or email contact@neoneevai.com |
| Right to Correction | Correct or update inaccurate personal data | Account Settings → ‘Edit Profile’ or email contact@neoneevai.com |
| Right to Erasure | Request deletion of your personal data across all systems | Privacy & Consent → Delete account, or email contact@neoneevai.com — confirmed within 72 hours |
| Right to Withdraw Consent | Withdraw consent at any time (as easy as giving it) | Account Settings → ‘Privacy & Consent’ or email contact@neoneevai.com |
| Right to Nominate | Nominate another person to exercise rights in case of death or incapacity | Account Settings → ‘Nomination’ or contact support@neoneevai.com |
| Right to Grieve | Lodge a complaint with NeoNeev AI or the Data Protection Board | Email grievance@neoneevai.com — acknowledged within 48 hours |
| Consent Manager | Route consent actions through a registered Consent Manager | NeoNeev AI will honour all valid requests from verified Consent Managers |
11. Cookies
We use strictly necessary and functional cookies to keep you signed in and to remember preferences. We do not use advertising or cross-site tracking cookies. You can control cookies through your browser settings; disabling essential cookies may affect functionality.
12. Cross-border transfers
Your data is primarily processed in India. Where a sub-processor processes data outside India, we do so in accordance with the DPDP Act and applicable transfer restrictions, with appropriate contractual safeguards in place.
13. Grievance Officer and Data Protection contact
Grievance Officer — Privacy Matters
Email: grievance@neoneevai.com
Acknowledgement: Within 48 hours
Resolution: Within timelines prescribed by applicable law
General privacy enquiries: contact@neoneevai.com
14. Changes to this Policy
We may update this Policy from time to time. For material changes we will notify you (by email or in-product) before they take effect. The “Effective Date” above indicates when this version became effective.
15. Contact
For any privacy questions, contact us at contact@neoneevai.com.