Privacy Policy

Who we are.

HallTicket is a product operated by HallTicket Technologies Private Limited, a company incorporated under the laws of India ("HallTicket", "we", "us", or "our"). Our platform is available at hallticket.in and app.hallticket.in.

We built HallTicket to help engineering aspirants and their families navigate India's complex admissions process — from shortlisting colleges to tracking exam deadlines and managing documents.

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the rights you have over it. It applies to all users of our website and application.

Data we collect.

We collect only the data that is necessary to deliver our service. Here is a clear breakdown of what we hold, where it comes from, and when:

How we use your data.

We use your data for the following purposes — and nothing else:

• To create and maintain your HallTicket account.
• To provide ResultReview — matching your score against college cutoffs.
• To power College Search & Shortlisting, personalised to your exam and preferences.
• To generate Document Dockets, packaging your uploaded documents per exam requirements.
• To send deadline reminders and exam-day instructions via email and WhatsApp.
• To improve our platform through aggregated, anonymised usage analytics.
• To communicate product updates, new features, and beta-access information.
• To comply with our legal obligations under Indian law.

We do not use your data for advertising, profiling for commercial purposes unrelated to admissions, or automated decision-making that has legal or significant effects on you.

Sharing & third parties.

We share your data only where necessary, and only with the following categories of processors:

We do not sell your personal data. We do not share your name, contact details, academic scores, or uploaded documents with any college, exam board, or educational institution without your explicit consent.

Storage & security.

Your data is stored on secure servers hosted in India (or within AWS / Google Cloud regions with equivalent data-protection standards). We implement the following measures:

• All data is encrypted in transit using TLS 1.2 or higher.
• Uploaded documents are encrypted at rest.
• Access to personal data is restricted to authorised team members on a need-to-know basis.
• We use secure authentication and session management for user accounts.
• We conduct periodic security reviews of our systems.

No system is 100% secure. In the event of a data breach that is likely to cause harm to you, we will notify you and the relevant authorities as required by the Digital Personal Data Protection Act, 2023 (DPDPA).

Your rights under DPDPA 2023.

As a Data Principal under India's Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to access — request a summary of the personal data we hold about you and how it is being processed.
• Right to correction — ask us to correct inaccurate or incomplete personal data.
• Right to erasure — request deletion of your personal data, subject to legal retention obligations.
• Right to grievance redressal — file a complaint with us if you believe your data rights have been violated.
• Right to withdraw consent — withdraw consent for any processing based on consent, including WhatsApp notifications.
• Right to nominate — nominate another individual to exercise your rights in the event of your death or incapacity.

To exercise any of these rights, email us at privacy@hallticket.in. We will respond within 30 days.

Data retention.

We retain your personal data for as long as your account is active or as needed to provide our services:

• Account and contact data is retained for the duration of your account plus 1 year after deletion.
• Uploaded documents are retained until you delete them, or until 6 months after account deletion — whichever comes first.
• Academic score data used in ResultReview is retained for the duration of your account.
• Anonymised usage / analytics data may be retained indefinitely.

You may request deletion of your data at any time by emailing privacy@hallticket.in or using the account-deletion option in your settings.

Children's privacy.

HallTicket is designed for use by students aged 16 and above, and by their parents or guardians. We recognise that many of our users are students who may be under 18 years of age.

In compliance with the DPDPA 2023, where a user is under 18, we require verifiable consent from a parent or guardian before processing their personal data. If you are a parent registering on behalf of your child, your consent covers your child's data.

If we become aware that we have collected personal data from a child under 18 without verifiable parental consent, we will delete that data promptly. Please contact us at privacy@hallticket.in if you have concerns.

Cookies & analytics.

We use cookies and similar technologies to operate our platform and understand how users interact with it.

• Essential cookies — required for login sessions and core platform functionality. Cannot be disabled.
• Analytics cookies — used by Google Analytics to collect anonymised data on page views, session duration, and feature usage. You can opt out via your browser settings or by using the Google Analytics opt-out browser add-on.

We do not use advertising or tracking cookies. We do not build advertising profiles based on your usage of HallTicket.

Changes to this policy.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and by displaying a notice on our platform at least 14 days before the changes take effect.

Your continued use of HallTicket after any changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.

The "effective date" at the top of this page indicates when this version was last updated.

Contact us.

If you have any questions about this Privacy Policy, your data rights, or how we handle your information, reach out:

• Email — privacy@hallticket.in
• Website — hallticket.in
• Grievance Officer — as required under DPDPA 2023, our designated Grievance Officer can be reached at the email above. We aim to acknowledge your grievance within 48 hours and resolve it within 30 days.