Privacy Policy

Cultus Education Technology and Services Pvt. Ltd. (“Cultus”, “we”, “us”, or “our”) operates the Cultus Career Ready platform at cultuscareerready.com (the “Platform”). We are committed to protecting the privacy of our learners, visitors, and users (“you” or “your”). This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you access or use our Platform and services.

By registering on or using the Platform, you consent to the data practices described in this Privacy Policy.

1. Introduction

This Privacy Policy applies to all personal information processed by Cultus in connection with the Cultus Career Ready Platform and related services.

2. Information We Collect

2.1 Information you provide directly

When you register, enrol, or interact with our Platform, we may collect:

• Full name and contact details (email address, phone number, city, and state)
• Academic and professional background information
• Resume and LinkedIn profile details submitted through the Career Centre
• Aptitude test responses, module assessments, and project submissions
• Communication preferences and feedback submitted to support@cultusedu.com
• Payment information processed through our third-party payment gateway

2.2 Information collected automatically

When you visit or use the Platform, we may automatically collect:

• Device information (browser type, operating system, hardware specifications)
• IP address, approximate location (city / country level), and time zone
• Usage data including pages visited, modules accessed, and time spent
• AI interview session data (audio / video recordings where applicable)
• Assessment performance data, readiness scores, and star ratings
• Log data and cookies as described in Section 8 below

2.3 Information from third parties

We may receive information about you from:

• Partner companies and employers participating in our Career Gateway career-guidance system
• Colleges and institutions that refer students to our Platform
• Payment processors and fraud-detection services

3. How We Use Your Information

We use the personal information we collect for the following purposes:

• To create and manage your learner account and provide access to course content
• To generate your personalised Readiness Score and course roadmap
• To administer assessments, track progress, and issue completion certificates
• To provide career guidance and coaching through the Career Gateway programme
• To match your profile with suitable career opportunities, roles, and industries within Career Gateway
• To share your resume and career profile with Career Gateway partners (with your consent)
• To communicate programme updates, account notifications, and promotional offers
• To respond to support queries submitted via support@cultusedu.com
• To improve the Platform through analytics, research, and product development
• To comply with legal obligations under applicable Indian law

4. Legal Basis for Processing

We process your personal data on the following legal bases under applicable data protection laws:

• Contractual necessity — to deliver the services you have purchased or enrolled in
• Legitimate interests — to improve our Platform and services, prevent fraud, and maintain security
• Consent — for marketing communications and sharing your profile with Career Gateway partners
• Legal obligation — to comply with tax, regulatory, and law-enforcement requirements

5. Sharing of Your Information

5.1 With Career Gateway partners

If you are eligible for the Career Gateway career-guidance programme (by achieving a 5-star score), your career profile, resume, and readiness data may be shared with our network of 5,000+ employer partners across 13 countries — India, Sri Lanka, and all ASEAN member states — for career-opportunity matching. Sharing is never automatic: before any profile is activated, you will receive an in-app prompt and an email asking you to confirm through a clear, affirmative action (an explicit “opt in”). Your consent is free, specific, informed, and revocable — you may withdraw it at any time from Settings › Career Profile › Sharing Preferences or by emailing support@cultusedu.com, and we will stop sharing your profile going forward.

5.2 With service providers

We may share your data with trusted third-party vendors who assist us in operating the Platform, including payment processors, cloud hosting providers, analytics services, and communication platforms. These vendors are contractually bound to handle your data securely and only for the purposes we specify.

5.3 With educational institutions

Where you were referred to us by a college or institution, we may share aggregate progress and career-outcomes data with that institution. We will not share individual assessment scores without your consent.

5.4 Legal disclosures

We may disclose your information if required to do so by law, court order, or governmental authority, or to protect the rights, property, or safety of Cultus, our users, or the public.

5.5 Business transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Specifically:

• Account and profile data — retained for the duration of your active enrolment and for 3 years thereafter
• Assessment and performance data — retained for 5 years to support career-outcomes verification
• Payment records — retained for 7 years as required under Indian tax regulations
• Support correspondence — retained for 2 years from the date of resolution

You may request deletion of your personal data at any time by writing to support@cultusedu.com. Deletion may be subject to legal retention obligations.

7. Data Security

7.1 Security measures

We implement industry-standard technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encrypted data transmission (TLS / SSL) for all Platform communications
• Secure cloud infrastructure with access controls and audit logging
• Regular security assessments and vulnerability testing
• Restricted employee access to personal data on a need-to-know basis

While we take all reasonable precautions, no method of transmission over the internet or electronic storage is completely secure. We encourage you to use strong, unique passwords and to keep your login credentials confidential.

7.2 Data Breach Notification

As a Data Fiduciary under the Digital Personal Data Protection (DPDP) Act, 2023, in the event of a personal data breach affecting your information — including assessment data, AI interview recordings, or payment information — Cultus will notify the Data Protection Board of India and each affected user in the manner and within the timeframes prescribed by the DPDP Act, 2023 and any rules made under it. Our notification will describe, to the extent known, the nature and extent of the breach, the likely consequences, and the measures we have taken or propose to take to mitigate it.

8. Cookies and Tracking Technologies

Our Platform uses cookies and similar tracking technologies to enhance your experience. We use:

• Essential cookies — required for the Platform to function correctly (e.g. session management, anti-cheating measures for assessments)
• Analytics cookies — to understand how users interact with the Platform and to improve content
• Preference cookies — to remember your settings and customisation choices

You may manage cookie preferences through your browser settings. Disabling essential cookies may affect Platform functionality.

9. Your Rights

Subject to applicable law, you have the following rights regarding your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right of rectification — to request correction of inaccurate or incomplete data
• Right of erasure — to request deletion of your data, subject to legal retention obligations
• Right to restrict processing — to request that we limit how we use your data
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting prior processing

To exercise any of these rights, please write to us at support@cultusedu.com. We will respond within 30 days.

10. Children’s Privacy

The Platform is intended for students and professionals aged 16 and above. We do not knowingly collect personal data from children under the age of 16. If you believe we have inadvertently collected such data, please contact us immediately at support@cultusedu.com and we will take steps to delete it.

Where a user is between 16 and 18 years of age, registration and any processing of their personal data is carried out with the consent of a parent or legal guardian, consistent with our Terms & Conditions and applicable law.

11. International Data Transfers

Cultus operates across 13 countries — India, Sri Lanka, and all ASEAN member states. If your data is transferred outside India, we ensure that adequate safeguards are in place in accordance with applicable data protection laws.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will notify you by email or by posting a notice on the Platform. The revised Policy will be effective from the date stated at the top of this document. Your continued use of the Platform after that date constitutes your acceptance of the revised Policy.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact us at: