Privacy policy

Last Updated: August 15, 2025

1. Introduction

GradBrew ("we", "our", or "us") is a sole proprietorship registered in India, offering educational consulting, admissions guidance, and career advisory services to a global clientele. We are committed to maintaining the privacy, confidentiality, and security of the personal data you share with us, while retaining the flexibility necessary to operate efficiently, ethically, and lawfully.

This Privacy Policy outlines our practices with respect to the collection, use, storage, and disclosure of personal and non-personal data obtained through:

• Our website (https://gradbrew.com/),
• Online forms and profile evaluations (via Tally),
• Scheduling tools (via Cal),
• Communication channels including email, WhatsApp Business, and video conferencing,
• Payment processors such as Razorpay and PayPal, and
• Other platforms, vendors, or technologies we reasonably engage with to deliver our services.

This Policy applies to all visitors, users, clients, or individuals who interact with our services in any capacity, whether through browsing, inquiry, consultation, or full engagement.

Please note that by accessing our website or engaging with our services, you are deemed to have read, understood, and agreed to the collection and use of your personal data in accordance with this Privacy Policy and our Terms & Conditions. If you do not accept this Policy, you are advised to discontinue use of our services.

We reserve the right to update, amend, or replace this Privacy Policy at any time, with or without specific notice, in order to remain compliant with applicable laws, technological developments, or business process changes. Continued use of our services following such changes shall constitute your acceptance of the updated terms.

If you have questions or concerns regarding this Policy or our data practices, you may contact us through:
Email: [email protected]
Registered Address: Noida, Uttar Pradesh, India
Jurisdiction: Noida, Uttar Pradesh, India

2. Information We Collect

In the course of delivering our services and maintaining our operations, GradBrew may collect, store, and process the following categories of personal and non-personal information. We collect this data either directly from you, through our digital platforms, or from authorized third-party tools and service providers.

• Information You Provide Directly
  We may collect the following information when you fill out a form, purchase a service, book a consultation, communicate with us, or engage our consultants:

  • Personal Identification Information: Full name, date of birth, gender, nationality, phone number, and email address.
  • Academic & Professional Background: School/college names, GPA, test scores (GMAT, GRE, TOEFL, IELTS, etc.), resume/CV, academic transcripts, and professional experience.
  • Admissions Intent: Degree target (e.g., MiM, MBA, MFin), country/region of interest, post-graduation goals, program preferences, and personal statements or essays.
  • Documents & Application Materials: Drafts, CVs, recommendations, and other application-related submissions.
  • Communication Content: Messages, calls, emails, and other forms of correspondence with GradBrew team members, consultants, or mentors.

• Information Collected Automatically
  When you use our website or tools, certain data may be collected automatically:

  • Device & Usage Information: IP address, browser type, operating system, access times, and referring websites.
  • Cookies & Tracking Technologies: Session activity, interaction with webpages, form usage, and click patterns. See Section 5 for more details.

• Information Received from Third Parties
  We may collect or access information from third-party sources where legally permissible and relevant to the service:

  • Payment Processors (e.g., Razorpay, PayPal): Transaction IDs, partial payment details, billing information, timestamps.
  • Scheduling & Form Tools (e.g., Cal, Tally): Submission metadata, booking times, and form responses.
  • Consultants & Mentors (on contract): Service-related updates or feedback regarding your profile or deliverables.
  • Referrals & Recommendations: Data shared by previous clients or professional contacts (with prior consent where required).

• Optional or Sensitive Data (Voluntary)
  You may voluntarily provide sensitive information such as:

  • Disabilities, health disclosures, or special accommodations.
  • Financial aid needs or family background.
  • Demographic identifiers like caste, ethnicity, or religion (e.g., for scholarship targeting).

  Such data, if collected, will only be used for service relevance and never disclosed or shared without your explicit, informed consent.

  Legal & Operational Note:
  GradBrew collects only what is necessary and proportionate to the services offered. In some cases, withholding or omitting requested information may limit our ability to provide the full scope of services. By submitting data, you confirm you are authorized to share such information and accept responsibility for its accuracy.

3. How We Use Your Information

GradBrew uses the information you provide, along with data collected through third-party tools or automated processes, to deliver and continuously improve the services we offer. All usage is strictly limited to legitimate business purposes, and we implement safeguards to ensure your information is handled responsibly, ethically, and lawfully.

• Primary Purposes of Use
  We use your personal and academic/professional data for the following core purposes:

  • Profile Evaluation & School Shortlisting: To assess your academic background, career goals, and fit for specific programs and regions.
  • Application Strategy & Consulting Services: To craft a personalized admissions roadmap, including but not limited to essay guidance, CV editing, interview prep, and mentor assignment.
  • Client Communication & Scheduling: To send updates, reminders, session details, and other service communications via email, WhatsApp Business, or scheduling platforms.
  • Service Fulfilment & Mentorship Assignments: To match you with relevant alumni or expert consultants who may support your journey (subject to separate confidentiality obligations).
  • Payment Processing: To facilitate secure payment collection and verification through authorized third-party payment processors (e.g., Razorpay, PayPal).
  • AI-Supported Assistance: To assist in drafting or reviewing materials using proprietary or third-party AI models, always supervised and reviewed by a human expert.
  • Customer Support & Issue Resolution: To respond to queries, resolve concerns, and deliver a consistent and transparent experience.

• Secondary & Operational Use Cases
  We may also use your information, either in identifiable or anonymized form, for:

  • Service Improvement & Internal Analytics: To assess operational effectiveness, feature usage, and customer needs, allowing us to optimize tools and offerings.
  • Legal & Regulatory Compliance: To comply with applicable legal obligations, tax or business filings, or requests by courts or authorities, where required.
  • Prevention of Fraud, Misuse, or Harm: To detect and prevent misuse of services, identity fraud, or abuse of platforms (e.g., spam, plagiarism, etc.).
  • Alumni Outcomes & Market Research (Aggregate Only): To conduct surveys or track anonymized success metrics for improving client experience and showcasing outcomes.

Disclaimer:
All data usage falls under the legitimate interests of GradBrew to deliver contracted services and operate efficiently. We retain full discretion to use data in alignment with applicable laws, while ensuring that no use is materially inconsistent with the original reason the data was collected.

Legal Basis for Processing (GDPR Note):
For users located in the European Union or subject to GDPR, the legal bases for processing personal data include:

• Contractual necessity – to provide services you've requested
• Legitimate interests – for internal analytics, fraud prevention, platform improvement
• Consent – for optional features like marketing or third-party referrals
• Legal obligation – to comply with Indian or international law

4. Third-Party Sharing and Disclosure

GradBrew works with selected third-party platforms, consultants, and service providers to help deliver a seamless and high-quality client experience. We limit data sharing to what is necessary, and ensure all third-party engagements are governed by appropriate confidentiality, compliance, and service-level commitments.

We do not sell or rent your personal data to anyone.

• Third Parties We Engage With
  We may share limited user information with the following categories of third parties:

  • Freelance Consultants and Mentors: Contracted individuals who support your admissions journey (e.g., essay reviews, school selection, mock interviews). Data shared is strictly limited to what’s necessary for delivery of services and bound by non-disclosure terms.
  • AI Tools and Writing Assistants: Your data may be processed using proprietary or third-party AI services for content enhancement. Such data is anonymized or pseudonymized where possible, and always reviewed by a human expert before delivery.
  • Payment Gateways (e.g., Razorpay, PayPal): For secure payment collection, your billing details and transaction metadata may be processed through authorized payment processors. We do not store your card details on our servers.
  • Form and Scheduling Tools (e.g., Tally, Cal): For booking consultations and collecting profile information. These platforms process your inputs securely and pass data to our internal systems.
  • Communication Platforms (e.g., WhatsApp Business, Email Hosting Providers): For transactional or advisory communication with you. These providers may process your email or message metadata.
  • Legal or Regulatory Authorities (when required): We may disclose information if legally compelled (e.g., court order, law enforcement) or if reasonably necessary to prevent fraud, harm, or legal liability.

• Third-Party Services You May Opt Into
  In certain cases, you may engage with external service providers we refer (e.g., language courses, visa or loan advisors). These referrals are entirely optional, and:

  • Are subject to their own terms, pricing, and data privacy practices.
  • May involve a separate commercial relationship between you and that provider.
  • Do not involve data sharing by GradBrew unless you explicitly authorize us to do so.

  We are not liable for any direct or indirect outcome of your interaction with such external parties. See our Terms & Conditions for full disclaimers.

• International Data Transfers
  Given our global operations and use of international platforms (e.g., servers hosted outside India), your data may be transferred to and stored in jurisdictions outside your country of residence. We take commercially reasonable steps to ensure such transfers comply with applicable data protection laws, and that your data receives adequate protection.

Internal Controls
We enforce the principle of “need-to-know” internally — meaning only team members directly involved in your case can access your data. We train our staff and contractors in confidentiality, ethical handling of personal data, and responsible use of AI.

5. Cookies & Tracking Technologies

GradBrew uses cookies and similar tracking technologies to enhance user experience, analyze site traffic, and improve service delivery. By continuing to use our website, you consent to our use of cookies in accordance with this policy.

• What Are Cookies?
  Cookies are small text files stored on your device (computer, tablet, or mobile) when you visit a website. They help recognize your device, remember your preferences, and streamline your interaction with our site.

• Types of Cookies We Use
  We may use the following types of cookies:

  • Essential Cookies: Necessary for basic functionality, such as page navigation, session control, and secure logins.
  • Performance & Analytics Cookies: These collect anonymized data about user behavior (e.g., page visits, bounce rate) using tools like Google Analytics. This helps us understand how users engage with our site.
  • Functionality Cookies: These remember your preferences and choices (e.g., form inputs, region selection) to improve usability.
  • Third-Party Cookies: Cookies from service providers such as Cal (for scheduling), Tally (for form submission), and payment gateways like Razorpay may be embedded to deliver specific functions.

• Managing Cookies
  You can control or disable cookies through your browser settings. Most browsers allow you to block or delete cookies entirely or on a site-by-site basis. However, disabling cookies may limit some functionalities and result in a degraded experience.

  To learn how to manage cookies in your browser:
  Google Chrome
  Mozilla Firefox
  Safari
  Microsoft Edge

• Consent and Notice
  By using our website, you consent to our use of cookies unless you have disabled them in your browser. A cookie consent banner may appear on your first visit to inform you of this usage.

6. Data Security & Retention

We take the privacy and security of your information seriously. GradBrew implements a combination of technical, administrative, and organizational safeguards to protect personal and sensitive data from unauthorized access, misuse, disclosure, or destruction.

• Data Security Measures
  We apply industry-standard security practices to protect your information, including:

  • Encryption: Secure Socket Layer (SSL) encryption is used for all form submissions and website interactions.
  • Access Controls: Internal access to data is restricted to authorized personnel and consultants on a strict need-to-know basis.
  • Third-Party Due Diligence: We work only with reputable vendors (e.g., Razorpay, Tally, Cal) who maintain appropriate security and data protection standards.
  • Training & Awareness: All team members, including freelance consultants, are briefed on confidentiality and secure data handling practices.

  While we strive to protect your personal data, no method of transmission over the internet or method of storage can be guaranteed to be 100% secure. You agree that you understand and accept these inherent risks.

• Data Retention
  We retain your data only for as long as necessary to fulfill the purposes for which it was collected, including:

  • Service Fulfilment: Until your application cycle and deliverables are fully completed.
  • Legal & Accounting Purposes: For periods required under Indian tax, business, and legal regulations.
  • Internal Analysis & Improvements: Aggregated or anonymized data may be retained indefinitely for benchmarking or product development, without identifying you.
  • Future Engagements: If you request, we may retain your information to facilitate re-engagements (e.g., for Master’s after Bachelor’s, MBA after MiM).

• Request for Deletion
  You may request deletion of your personal data at any time by emailing us at [email protected]. However, we may retain certain records to:

  • Comply with legal or regulatory obligations
  • Protect against potential legal claims
  • Complete outstanding transactions or obligations
  • Retain anonymized or aggregate data not linked to your identity

7. Your Data Rights

We believe in giving users clear control over their personal data. Depending on your location and applicable laws, you may be entitled to exercise one or more of the following rights regarding your personal information held by GradBrew:

• Right to Access
  You may request a copy of the personal data we hold about you, including the purposes for which it is being processed, the categories of data, and who it may be shared with.

• Right to Rectification
  If any of your data is incorrect, incomplete, or outdated, you may request that we correct or update it promptly.

• Right to Erasure (Right to Be Forgotten)
  You may request the deletion of your personal data from our systems, provided:

  • The data is no longer necessary for the purpose for which it was collected
  • There are no overriding legal, regulatory, or contractual obligations requiring its retention
  • There is no active or pending service engagement or dispute involving you

• Right to Restrict Processing
  You may request that we temporarily suspend processing of your data under certain circumstances (e.g., while a correction is pending).

• Right to Object to Processing
  You can object to the use of your data for direct marketing or certain types of profiling and analytics.

• Right to Withdraw Consent
  If we rely on your consent for any processing activity (e.g., newsletter signup, third-party referrals), you may withdraw that consent at any time.

• Right to Data Portability
  Where technically feasible and applicable, you may request to receive your personal data in a structured, machine-readable format.

• How to Exercise Your Rights
  To exercise any of these rights, please email us at [email protected] with the subject line: “Data Rights Request”. We may require you to verify your identity before fulfilling any request. We aim to respond to all valid requests within 30 days. Complex requests or those involving third-party systems may take longer, in which case we will notify you of the delay and the reason.

8. Children’s Privacy

GradBrew’s services are intended for individuals aged 18 years or older. We do not knowingly collect, process, or store personal data from individuals under the age of 18 without verifiable parental or legal guardian consent.

• Minimum Age for Use
  By accessing our website or using our services, you represent and warrant that:

  • You are at least 18 years old, or
  • You are the parent or legal guardian providing express consent on behalf of a minor user.

  If you do not meet these requirements, you must not use our services or submit any personal data.

• Parental or Guardian Consent
  For users under 18 who wish to access undergraduate admissions consulting or other applicable services:

  • Written parental or guardian consent will be required before engagement.
  • We reserve the right to request documentation, such as government ID, to verify consent and relationship.

• Data Handling for Minors (with Consent)
  When we receive valid guardian consent:

  • The minor’s data will be treated with heightened security and confidentiality.
  • It will only be used to provide the requested services and not shared with any third parties unless essential to those services.
  • The parent or guardian retains the right to access, modify, or request deletion of the minor’s data at any time.

• Unintentional Collection
  If we become aware that we have collected personal data from an individual under 18 without proper consent:

  • We will immediately delete the information and
  • Take corrective measures in accordance with our compliance procedures.

For questions or concerns regarding children’s data or this policy, please contact: [email protected]

9. Marketing & Communication Preferences

We may contact you to share relevant updates, service offerings, and resources designed to help you in your education and career journey. You control how and when we communicate with you.

• Types of Communications
  You may receive communications from GradBrew via email, WhatsApp Business, or other approved channels in the following forms:

  • Service-related messages (onboarding updates, form submissions, consultant interactions)
  • Marketing messages (new offerings, webinars, tips, events, promotions)
  • Transactional updates (payment confirmations, scheduling links, Tally forms, Cal invites)

  We will never share your contact information with third parties for marketing purposes without your explicit consent.

• Your Communication Choices
  You can control your preferences at any time:

  • Unsubscribe from marketing emails using the link in the footer of our emails
  • Reply ‘STOP’ or use an opt-out request on WhatsApp Business to limit outreach
  • Contact us at [email protected] to update or restrict specific preferences

  Note: Some essential service updates (such as billing notices or legal communications) may still be sent, even if you opt out of promotional content.

• WhatsApp & Messaging Services
  If you interact with us via WhatsApp Business or any messaging platform:

  • You acknowledge that these channels may not be fully encrypted and secure.
  • You may request to restrict messaging to email-only if preferred.

• Consent for Promotional Outreach
  By submitting forms or expressing interest in our services (including through Tally or Cal), you:

  • Consent to receive relevant communication tailored to your interest
  • Acknowledge that communications may include AI-assisted drafting or automation, under human review

You may revoke consent at any time by contacting us, and we will update your preferences accordingly.

10. International Data Transfers

As a digital-first business serving a global client base, GradBrew may process and store your data across multiple jurisdictions, including but not limited to India, the European Union (EU), Canada, and the United States. By using our services, you acknowledge and consent to the transfer, storage, and processing of your data in locations outside your country of residence.

• Where Your Data May Be Transferred
  We may transfer data to:

  • Our servers and systems in India, where GradBrew is registered and headquartered
  • Cloud service providers (e.g. Google Cloud, AWS, Notion, Tally, Cal, WhatsApp Business) that may operate globally
  • Consultants or contractors located in other countries, solely for the purpose of delivering services you’ve opted into

• How We Protect Your Data Across Borders
  We ensure that any international transfer of personal data is governed by appropriate safeguards, including:

  • Contractual obligations with service providers and consultants
  • Standard contractual clauses (where applicable under EU or UK law)
  • Access controls and encryption standards consistent with industry best practices

  We take reasonable steps to ensure your data receives a comparable level of protection as required under your local laws.

• User Acknowledgment and Consent
  By interacting with our platform and submitting your personal data, you:

  • Acknowledge that your data may be processed in jurisdictions that may not offer the same level of protection as your home country
  • Consent to such transfers where legally required

If you have concerns about cross-border data transfers, you may contact us at [email protected] to request additional information or limitations (where feasible).

11. Data Retention & Security

We take the privacy and protection of your data seriously. This section explains how long we retain your personal data and the measures we implement to keep it secure.

• Data Retention
  We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

  • Providing admissions or career-related services
  • Complying with legal, tax, regulatory, or contractual obligations
  • Resolving disputes or enforcing agreements

  Typical retention durations may vary based on the nature of the engagement but will generally not exceed 7 years, unless legally required or reasonably necessary for business continuity.

  You may request deletion of your personal data at any time by contacting us at [email protected], subject to applicable legal or operational exceptions.

• Security Measures
  We implement reasonable administrative, technical, and physical safeguards to protect your information from:

  • Unauthorized access, alteration, disclosure, or destruction
  • Misuse, loss, or breaches (including by freelancers, consultants, or partners)

  These safeguards include, but are not limited to:

  • Secure server infrastructure (GoDaddy)
  • End-to-end SSL encryption
  • Controlled access to data and backend platforms
  • Regular audits and platform-level security offered by partners (e.g., Tally, Cal, WhatsApp Business)

• AI, Automation & Human Oversight
  While certain processes such as CV or essay drafts may involve AI-assisted tools:

  • All content is human-reviewed for accuracy, ethics, and client alignment
  • AI tools used may not store your identifiable data beyond the scope of processing

  You may opt out of such tools by writing to [email protected]

• Breach Notification Protocol
  In the unlikely event of a data breach:

  • We will assess the situation promptly
  • Affected users will be informed without undue delay, in line with legal requirements
  • Corrective measures will be taken to minimize risk and recurrence

12. Your Rights and Choices

As a user of GradBrew’s services, you have the right to access and control your personal data, subject to reasonable limitations and applicable laws. We are committed to honoring your privacy rights while ensuring the continuity and integrity of our services.

• Right to Access
  You have the right to request:

  • A summary of the personal data we hold about you
  • The purposes for which your data has been used
  • The categories of third parties with whom we may have shared it (if any)

• Right to Correction
  If you believe that any data we hold is incorrect or incomplete, you may request a correction by contacting [email protected]. We will verify and update the data as necessary, unless restricted by legal or technical constraints.

• Right to Withdraw Consent
  You may withdraw consent for non-essential data processing at any time, such as:

  • Marketing emails
  • AI-assisted tools
  • Third-party referrals (e.g. for visas, language courses, loans)

  However, withdrawing certain consents may impact the quality or availability of our services.

• Right to Deletion ("Right to be Forgotten")
  You may request the deletion of your personal data at any time. However:

  • We may retain data where legally required (e.g. accounting, taxation, regulatory compliance)
  • Data used for service completion may be archived for quality assurance or legal defense
  • Deletion may result in termination of ongoing services, with no refund where work has begun

• Right to Restrict or Object to Processing
  In certain cases, you may:

  • Request that we limit processing of your data to only essential functions
  • Object to specific uses (e.g., direct marketing, automated profiling)

  We will evaluate each request on a case-by-case basis and respond in accordance with applicable laws.

• Right to Portability (Where Applicable)
  If legally applicable and technically feasible, you may request a machine-readable copy of the personal data you provided to us.

• How to Exercise Your Rights
  All rights requests should be sent to [email protected] with:

  • Your full name and contact email
  • A clear explanation of the right you wish to exercise
  • Any documentation required for identity verification

We typically respond within 7 business days, but complex requests may require up to 30 days.

13. Contact Information

If you have any questions, requests, or concerns regarding this Privacy Policy or the way your data is handled, you may contact us using the following details:

• Business Name: GradBrew
• Business Structure: Sole Proprietorship
• Registered Country: India
• Email for Privacy Matters: [email protected]
• General Enquiries: [email protected]
• Official Website: https://gradbrew.com/

We are committed to resolving privacy-related issues in a respectful, transparent, and timely manner. If you are unsatisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

GradBrew is not currently required to appoint a Data Protection Officer under the GDPR. However, we maintain an internal privacy and compliance contact point at: [email protected]

14. Updates to Privacy Policy

We may update or modify this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements, or business practices.

• Notification of Changes
  Significant changes to this policy will be posted on our website with a clearly visible notice.
  Where legally required or where the changes materially impact your rights, we will notify you directly by email (if available) or prompt you to review the updated version upon your next interaction with our services.

• Effective Date
  The date at the top of this Privacy Policy reflects the most recent revision. We encourage you to review this page periodically to stay informed about how we protect your information.

• Continued Use Deemed Acceptance
  Your continued use of our website or services after any modifications to this Privacy Policy constitutes your acceptance of those changes. If you do not agree to the updated terms, you should discontinue use of the services and may request deletion of your data.