Privacy Policy — Bidesh App

1) Overview

We help students discover programs, prepare applications, manage documents, secure scholarships, coordinate tuition payments, and onboard with universities globally. We also offer immigration & visa support (form preparation guidance, document checklists, interview readiness). This Policy applies to our websites, apps, chat (including AI adviser), and related services (“Services”).

2) Data We Collect

• Identifiers: Name, email, phone, date of birth, nationality, passport details.
• Academic / Application Data: Transcripts, test scores, resume/CV, essays, recommendations, portfolios, intended majors.
• Financial & Payment Data: Scholarship info, fee/payment confirmations (processed by gateways; we do not store full card numbers).
• Immigration Data (if you use immigration services): Visa history, prior refusals (if any), travel history, funding proofs, sponsorship/affidavits, CAS/I-20/LOA, SEVIS/DS-160/UKVI/IRCC/immigration form details, appointment records, interview prep notes. We do not collect biometrics directly; where embassies collect biometrics, processing occurs by those authorities or their vendors.
• AI Interaction Data: Chat inputs, preferences, counseling notes, usage telemetry to personalize guidance.
• Technical Data: IP, device/browser data, cookies, analytics events, log files.
• Communications: Emails, calls, SMS, in-app messages and your responses.

3) How We Use Data

• Process applications, verify documents, submit to institutions you select/authorize.
• Provide AI-powered suggestions (program fit, scholarships, timelines, immigration checklists).
• Operate, secure, and improve the Services; perform analytics, QA, and training (with de-identified/aggregated data where feasible).
• Communicate status updates, deadlines, visa appointments, and compliance reminders.
• Meet legal/immigration obligations; detect, prevent, and investigate fraud or misuse.

4) Legal Bases for Processing

Depending on jurisdiction, we rely on one or more of: (a) your consent; (b) performance of a contract or pre-contractual steps (applications, immigration preparation); (c) compliance with legal obligations (KYC/AML, record-keeping); (d) legitimate interests (platform security, service improvement) balanced against your rights.

5) Sharing & Disclosure

• Universities / Colleges: Application data and documents you authorize us to send.
• Immigration Ecosystem (when you use immigration services): Embassy/consular portals, visa centers (e.g., VFS, TLS), government immigration bodies (e.g., USCIS/IRCC/UKVI/Schengen authorities), and—if you choose—authorized representatives such as licensed immigration counsel/consultants. We share only what is necessary to prepare, submit, or support your case.
• Service Providers: Hosting, analytics, communications, document verification, payment gateways—bound by confidentiality and data-protection obligations.
• Legal / Compliance: Where required by law, regulation, court order, or to protect rights, safety, and security.
• Business Transfers: In connection with mergers/acquisitions, with safeguards and notice where required.
• With Your Consent: Any additional sharing you explicitly request or approve.

6) Immigration & Visa Services — Special Notice

• Scope: If you opt into immigration support, we process immigration-related data listed in Section 2 to generate checklists, populate forms where you direct, organize submissions, and track milestones (appointments, biometrics, decisions).
• Sensitive Data: Some immigration data may be sensitive (e.g., refusals, financial capacity). We handle it under heightened access controls and share only on a need-to-know basis to fulfill your request or comply with law.
• Biometrics: We do not collect or store biometrics. Where embassies/visa centers capture biometrics, they serve as independent controllers/processors.
• No Legal Advice: Our guidance is informational. Where legal advice is needed, we will, at your direction, connect or coordinate with licensed counsel, and share data accordingly.
• Lawful Bases: Consent and/or contract for requested services; legal obligation for compliance checks; legitimate interests for platform security/fraud prevention.
• Retention: Immigration files are retained only as long as necessary for your case and legal record-keeping. See Section 8.

7) International Data Transfers

Your data may be transferred to countries outside Nepal to reach partner institutions, immigration authorities, or service providers and for hosting. We apply appropriate safeguards consistent with global privacy standards and require recipients to protect your data.

8) Data Retention

We retain information only as long as necessary to provide Services, support admissions/immigration processes, enforce agreements, and meet legal obligations (including AML/KYC and statutory record-keeping). When no longer needed, data are securely deleted or anonymized. You may request deletion, subject to legal/institutional requirements.

9) Cookies & Similar Technologies

We use cookies/local storage to remember preferences, keep sessions, measure usage, and personalize content. You can control cookies in your browser; some features may not function if disabled.

10) Security

We implement administrative, technical, and physical safeguards (role-based access, encryption in transit where applicable, monitoring, staff training). No system is perfectly secure; we continuously improve protections and welcome responsible security reports.

11) Your Rights & Choices

• Access your personal data and request a copy.
• Rectify inaccuracies or update information.
• Request deletion, restriction, or objection to certain processing.
• Data portability where applicable.
• Withdraw consent at any time where processing relies on consent (does not affect prior lawful processing).

To exercise rights, contact us (Section 14). We may verify identity and coordinate with universities or authorities that hold your records.

12) Children’s Privacy

Our Services are for individuals who can lawfully apply for higher education. If under the age of majority in your jurisdiction, use requires verified parental/guardian consent. If we learn of collection without consent, we will delete it.

13) Changes to This Policy

We may revise this Policy for legal, technical, or business reasons. Material changes will be notified where required. The “Effective Date” indicates the latest version.

14) Contact Us

Questions, requests, or complaints regarding your privacy:

Bidesh App Private Limited
Pokhara-18, Gandaki 33700, Nepal
Email: info@bidesh.com.np
Phone: +977 9856075552