Privacy at NeoNeev AI

NeoNeev AI Private Limited is the Data Fiduciary for personal data on the platform (Policy version PP-v1.0, effective 10 June 2026). We process data under the Digital Personal Data Protection Act, 2023. Institutional customers receive services under our Data Processing Addendum; they must ensure lawful basis and consent before uploading student data.

In compliance with the DPDP Act, the following table provides an itemised notice of personal data collected and the specific purpose for each category:

We use personal data to:

• Provide, operate, and secure the Services;
• Create and match student–employer–college connections;
• Generate AI-assisted scores, recommendations, and communications;
• Process payments and provide billing support;
• Respond to support requests and resolve grievances;
• Send service and transactional communications;
• Comply with legal obligations; and
• Improve and develop the Services.

We do not sell personal data. Non-essential cookies and analytics load only after your cookie preference choice.

We collect separate, purpose-specific consents recorded in an immutable consent ledger with timestamp, policy version, and source. Categories include: (1) core platform services — required for account operation; (2) AI skill scoring — resume/marksheet/assessment analysis via external LLMs; (3) employer visibility — talent-pool discovery (anonymous by default; full details only per employer approval); (4) anonymised model training — opt-in only, default off.

You may withdraw optional consents at any time with the same ease as granting them — via Student Dashboard → “Privacy & Consent” toggles or by emailing contact@neoneevai.com. Withdrawal stops the related processing immediately. Core platform consent cannot be withdrawn without deleting your account.

Where students are minors, all optional processing remains blocked until verifiable parental consent is on record. We do not undertake behavioural advertising or cross-site tracking directed at children.

Within the platform:

• Students see only their own profile;
• A college’s placement office sees its own registered students;
• Employers see only students who opt in to their specific role; and
• Enterprise/analytics partners receive only anonymised, aggregated insights — never individual student records.

Service providers (sub-processors): hosting, database, email, payment, and AI providers who process data on our behalf under strict contractual safeguards and data processing agreements. We require processors to maintain appropriate security and process data only on our documented instructions.

Legal and safety: we may share data where required by law, court order, or to protect rights, safety, and the integrity of the Services.

Some features use AI models to analyse profiles and generate recommendations, summaries, and draft communications. Inputs may be processed by trusted AI providers under contractual confidentiality and security terms. AI outputs are informational only and may contain errors; they do not constitute a guarantee of any outcome.

We retain personal data for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. When data is no longer required, we delete or anonymise it. On account deletion, Customer Data is deleted or returned per our Terms and the Data Processing Addendum, unless retention is legally required.

We implement reasonable security practices and procedures as required under the IT Act and SPDI Rules, 2011, including:

• Encryption in transit (TLS) and at rest for sensitive data;
• Role-based access controls and least-privilege permissions;
• Security monitoring and audit logging; and
• Regular security assessments.

You have the following rights as a Data Principal. Exercise of these rights is subject to your duty to provide verifiably authentic information and not to register false or frivolous grievances.

We use strictly necessary and functional cookies to keep you signed in and to remember preferences. We do not use advertising or cross-site tracking cookies. You can control cookies through your browser settings; disabling essential cookies may affect functionality.

Your data is primarily processed in India. Where a sub-processor processes data outside India, we do so in accordance with the DPDP Act and applicable transfer restrictions, with appropriate contractual safeguards in place.

Grievance Officer — Privacy Matters

Email: grievance@neoneevai.com

Acknowledgement: Within 48 hours

Resolution: Within timelines prescribed by applicable law

General privacy enquiries: contact@neoneevai.com

We may update this Policy from time to time. For material changes we will notify you (by email or in-product) before they take effect. The “Effective Date” above indicates when this version became effective.

For any privacy questions, contact us at contact@neoneevai.com.