Privacy
Privacy notice
This notice explains, in plain words, what this website collects, why, where it goes and what you can do about it.
Last updated
Draft, pending legal review. This notice describes how the website works today. It has not yet been reviewed by lawyers, and the final version may change.
Who we are
This website is run by Disha Stars by Amar Ujala, C-21, Sector-59, Noida, UP. For any privacy question or request, email supports@dishastars.com.
Callback and counselling requests
When you ask for a call back or book counselling, the form sends:
- your name and mobile number, and whether you, a parent or a student for a parent filled the form;
- the options you chose: your stage (for example Class 12), the help you want and any courses;
- the college, city or topic you were looking at, the page address and the site language;
- your consent choice and the version of the consent wording you saw.
The form goes to our server, which checks it and adds it as one row to the Disha Stars leads Google Sheet. Our team uses it to call or WhatsApp you about that request, which is what the consent box on the form says. A student under 18 can give a parent’s or guardian’s number instead.
To stop repeated or automated sending, the server briefly keeps a count of requests per network address and per mobile number in its memory (for up to 10 minutes). This count is not added to the Sheet.
Disha Edge profiles
You can use the Disha Edge tools without a profile. When you save your work, the profile form asks for your first name, mobile number, class and date of birth.
If you are under 18, your profile and progress stay in this browser on this device. Nothing is sent to our servers until a parent verification step is available. If you add a parent’s name and number, they are also kept only on the device.
If you are 18 or over and tick the box that lets Disha keep your progress, your profile is stored in our database, when cloud saving is available, so you can return to it on another device. It holds:
- your name, class, date of birth and language, plus stream, board, state and stage if you give them;
- your mobile number as a one-way code (a keyed hash) used to find your profile, an encrypted copy (AES-256-GCM) used only to contact you if you asked, and its last four digits;
- your consent choices, with the time and the version of the wording;
- your saved progress, plans, reflections, help requests and any corrections you report.
Adults who choose WhatsApp or SMS updates are also added to the leads Google Sheet with their name, mobile number, class, language and that choice. Phone verification by one-time code is not available yet.
The site can pass a contact request to a customer relationship system. It does so only for adults whose phone number is verified and who agreed to be contacted.
Usage analytics
Usage events (for example a tool opened, a step completed or an item saved, with the page and the referring page) are stored only for adults who tick the analytics box. If you turn analytics off, the events stored for your profile are deleted. The site code does not include advertising trackers or third-party analytics scripts.
Other services that see some data
- Google, which hosts the leads Sheet.
- The web server that hosts this website. Like any web host, it processes technical request data such as your IP address and browser type to serve pages.
- Our database provider, for adult Disha Edge profiles.
- OpenStreetMap, which supplies the map images on college pages and the college search map.
- YouTube, on college pages with a video: the preview image loads from YouTube, and the video plays from youtube-nocookie.com only when you press play.
These services receive your IP address when they send content to your browser.
Your choices
- See and download your Disha Edge data on My data, and delete it on the delete page.
- Change your analytics, WhatsApp and SMS choices at any time. They start switched off.
- To correct or delete a callback request, email supports@dishastars.com with the mobile number you used.
India's data protection law
India’s Digital Personal Data Protection Act, 2023 gives you rights over your personal data, including asking for a summary of it, correcting it and having it erased, and raising a grievance. It treats anyone under 18 as a child and requires verifiable consent from a parent before a child’s data is processed. That is why under-18 Disha Edge profiles stay on the device for now.
How long we keep data
Sign-in sessions end after 30 days without a visit, and one-time codes expire after 10 minutes. Fixed retention periods for callback requests and adult profiles have not been set yet; they will be stated here after legal review. Until then, you can ask us to delete your data at any time.
Changes to this notice
When this notice changes, the date at the top changes too. Questions: supports@dishastars.com.