Privacy Policy

neetcompanion.com is owned and operated by Ammar Digital Services, a sole proprietorship, under the brand name NEET Companion. In this document, “we”, “us” and “our” refer to Ammar Digital Services, and “you” refers to the person using the site.

For the purposes of India's Digital Personal Data Protection Act, 2023 (“DPDP Act”), Ammar Digital Services is the Data Fiduciary for the personal data described in this policy, and you are the Data Principal. This policy applies to neetcompanion.com and every page on it.

We also operate neetugcollegepredictor.com, a separate site that links to this one. Our analytics are configured to recognise a visit that moves between the two domains as a single visit rather than two unrelated ones. We mention this because it is your data, and you should know it is joined across those two sites.

The detail follows, but here is the honest summary:

• The predictors need no account and store nothing about you. You can use the rank predictor, the marks converter, the college directory and the state explorer without giving us your name, email or phone number, and without creating a login.
• If you fill in one of our forms, we keep what you typed. Four forms collect personal data, and they are the only places we ask for it.
• We use Google Analytics and Google Ads. They set cookies and receive data about your visit.
• We do not sell your data, and we do not share it with anyone for their own marketing.
• You can ask us to show you your data or delete it, at any time, by emailing hello@neetcompanion.com.

We collect personal data only when you choose to type it into one of these four forms. Each row below is a real form on this site, and the fields listed are exactly what we store — nothing more.

An important detail people often are not told: every one of these submissions is also sent by email to our administrator so that a human actually reads and answers it. That means your message exists both in our database and in an email mailbox. When we delete your data, we delete both copies.

• Your IP address. Read on requests to our API to enforce a rate limit of 30 requests per minute, which is how we stop automated abuse. It is held in memory only, for about 60 seconds, and is never written to our database.
• Your browser's user-agent string, the page you are on, and the page that referred you. We use this to understand which pages are useful and to identify automated crawlers.
• Standard server and network logs kept by our hosting provider and our content delivery network as part of running and securing the service.

So that there is no ambiguity, we do not ask for and do not store:

• Any account or password — there are no user accounts on this site.
• Your NEET roll number, application number or login credentials for any official portal.
• Aadhaar, PAN or any other government identity number.
• Uploaded documents — no marksheets, certificates, or scans of any kind.
• Card numbers, UPI IDs or bank details. Nothing is charged on this site today; when payments do launch, they will be handled entirely by a regulated payment provider and those details will never reach our servers.

This section matters more than most, so we are being precise about it.

When you use a predictor, your rank or marks, category and quota are used to calculate a result and are not stored against your identity — we do not keep a record that links a prediction to a person, because we do not know who you are.

We process the personal data you submit on the basis of your consent under section 6 of the DPDP Act, given when you knowingly fill in and submit a form. We process it only for the purpose you gave it for:

• a counselling help request — to reply to you about your counselling questions;
• a report, suggestion or support request — to reply and to act on what you told us;
• a volunteer submission — to contact you about the data you offered to contribute;
• a “notify me” signup — to tell you when the thing you asked about is ready;
• IP addresses and user-agents — to prevent abuse and keep the service available.

We apply purpose limitation strictly. If you give us your email to report a bug, we will not add it to a mailing list. If you ask to be notified about a feature, we will not use your phone number to call you about something else.

We set no cookies of our own. The cookies on this site are set by Google Analytics and Google Ads (see section 9). They are configured with SameSite=None; Secure, which permits them to be read in a third-party context.

We do use your browser's local storage for preferences. This data stays on your device and is never transmitted to us:

Clearing your browser's site data removes all of it. We also register a service worker so the site can be installed as an app on your device.

We use the following measurement and advertising services:

• Google Analytics 4 and Google Tag Manager — to understand which pages are used and how people move through the site.
• Google Ads conversion tracking — to measure whether our advertising works.
• Cloudflare Web Analytics (Insights) — page-performance measurement.
• A server-side analytics event that records when an AI crawler visits a page. This records the crawler, not you, and is expressly marked as non-personalised.

You can opt out of Google Analytics entirely using Google's browser add-on, and control ad personalisation in your Google Ads settings.

• Using the free tools is fine. The predictors, directory and state explorer collect no personal data from anyone, of any age.
• If you are under 18, please do not submit our forms without a parent or guardian. The DPDP Act requires us to obtain verifiable consent from your parent or lawful guardian before we process your personal data. Ask them to send the request, or to be present when you do.
• We do not knowingly profile children or target advertising at them. Section 9(3) of the DPDP Act prohibits tracking, behavioural monitoring and targeted advertising directed at children, and no amount of consent makes that permissible.
• Parents and guardians can contact us directly. Write to hello@neetcompanion.com to see, correct or delete any data relating to a child in your care. We will act on that request without asking the child to authorise it.

We rely on the following service providers. They process data on our instructions, for the purposes shown, and for no purpose of their own beyond providing the service to us:

When payments launch, a regulated Indian payment aggregator will be added to this list and named here before it begins processing anything.

We do not sell your personal data, and we do not disclose it to third parties for their own marketing. We may disclose it where the law requires us to, or where it is necessary to establish or defend a legal claim.

Several of the providers above process data on servers outside India. Section 16 of the DPDP Act permits transfers outside India except to territories the Central Government restricts by notification; none of the territories involved is currently restricted. If that changes, we will change providers or stop the transfer.

The per-form retention periods are in the table in section 3. In addition:

• Copies held in our administrator's mailbox are deleted on the same schedule as the database record.
• Rate-limiting records containing IP addresses are discarded after about 60 seconds and never stored.
• Analytics data is retained for the period configured in Google Analytics.
• We may keep an anonymised or aggregated version of information after the periods above. Once anonymised it can no longer identify you, and is no longer personal data.

The measures actually in place on this site are:

• All traffic is served over HTTPS, with HTTP Strict Transport Security enabled.
• A strict Content Security Policy, and framing of the site by others is blocked outright.
• Google reCAPTCHA and hidden honeypot fields on every form, to block automated abuse.
• Server-side validation of every submitted field, with strict length limits.
• Rate limiting on our API.
• A managed PostgreSQL database with access restricted to the application.

We are a small operation and we would rather be accurate than impressive: we hold no formal security certification, and we do not claim one. No method of transmission or storage is perfectly secure.

Under the DPDP Act you have the right to:

• Access — obtain a summary of the personal data we hold about you, how we are processing it, and who we have shared it with (section 11).
• Correction and erasure — have inaccurate data corrected, incomplete data completed, and data deleted where we no longer need it (section 12).
• Grievance redressal — complain to us and get a response (section 13), and escalate to the Data Protection Board of India if you are not satisfied.
• Nomination — nominate someone to exercise these rights on your behalf in the event of your death or incapacity (section 14).

To exercise any of them, email hello@neetcompanion.com. Please write from the email address you originally submitted — that is how we verify it is really you, and it means we do not have to ask you for identity documents. We will respond within the timelines in section 18.

You can withdraw your consent at any time, and the DPDP Act requires that doing so be as easy as giving it. Email hello@neetcompanion.com with the word “withdraw” and we will stop processing your data and delete it, unless we are required by law to keep it. Any notification email we send will also carry an unsubscribe link.

Withdrawing consent does not make our earlier processing unlawful, and it may mean we cannot continue helping you with a request you already made.

If a personal data breach occurs, we will notify the Data Protection Board of India and every affected person as required by section 8(6) of the DPDP Act, as soon as we become aware of it. We will tell you what happened, what data was involved, and what you should do.

If you have a question, a complaint, or a request about your personal data, write to us and we will deal with it. You do not need to use any particular form of words.

We will acknowledge your message within 24 hours and aim to resolve it within 15 days, and in any event within 30 days of receiving it.

Section 6(7) of the DPDP Act allows consent to be given, managed and withdrawn through a Consent Manager registered with the Data Protection Board. We are not currently integrated with any Consent Manager. If we adopt one, we will name it here before it starts operating.

No payment is collected on this site today. When the paid Pro Choice-Filling Assistant launches, card, UPI and bank details will be collected and processed entirely by a PCI-DSS-compliant payment aggregator. Those details will never reach our servers. We will retain only a payment reference, the amount, the date and your resulting credit balance. See our Refund Policy for the commercial terms.

We may update this policy as the service changes or the law develops. The effective date and version at the top of this page always tell you which version you are reading. If a change materially affects how we handle your data, we will say so prominently on the site.

This policy is published in English, and the English text governs. Sections 5(3) and 6(9) of the DPDP Act entitle you to receive this notice in English or in any language listed in the Eighth Schedule to the Constitution of India — email us and we will provide it.