Privacy Policy

Effective Date: August 12, 2026
Last updated: August 12, 2026

This Privacy Policy explains how Pathvera.ai (operated by Expectation Walkers GenAi Research and Services Pvt Ltd) collects, uses, stores, and protects personal information when you use the Pathvera platform.

1. SCOPE OF THIS POLICY

This Privacy Policy applies to personal data processed through Pathvera, including information relating to:
- students;
- prospective students;
- parents and guardians;
- educational counsellors;
- educational agencies;
- agency employees;
- institution representatives; and
- other authorised users.

This Policy should be read together with the Pathvera Terms and Conditions and any additional notices presented when particular information is collected.

2. INFORMATION WE COLLECT

The information collected depends on how you interact with Pathvera.

2.1 Account Information
When you register or use an account, we may collect:
- name;
- email address;
- mobile number;
- date of birth or age information;
- profile information;
- account identifiers;
- account type;
- agency or organisation affiliation; and
- authentication-related information.

We may also process information necessary to authenticate your account and prevent unauthorised access.

3. STUDENT PROFILE INFORMATION

Students may provide information including:
- educational background;
- academic qualifications;
- subjects studied;
- grades or academic performance;
- preferred courses;
- preferred careers;
- preferred institutions;
- study destinations;
- skills;
- interests;
- educational objectives;
- career objectives;
- application information; and
- other information submitted when using Pathvera.

The specific information collected may change as Pathvera introduces or modifies features.

4. SMILE ASSESSMENT DATA

When you use the SMILE Assessment, we may collect and process:
- assessment responses;
- interests;
- career preferences;
- learning preferences;
- personality-related responses;
- RIASEC/Holland Code-related responses;
- intelligence-type related responses;
- learning-style information;
- educational preferences;
- generated assessment results;
- AI-generated analyses;
- career recommendations; and
- career roadmap information.

This information is processed to provide personalised educational and career guidance.

The SMILE Assessment is a career and educational guidance tool and should not be interpreted as a clinical psychological assessment or medical diagnosis.

5. AI INTERACTIONS

Certain Pathvera features use artificial intelligence.

When you use an AI-powered feature, information you provide may be processed to:
- generate assessment questions;
- analyse assessment responses;
- generate career recommendations;
- identify potential career pathways;
- recommend educational programmes;
- recommend institutions or opportunities;
- generate personalised career roadmaps;
- summarise information; and
- provide other AI-assisted functionality.

Information submitted to these features may be transmitted to third-party AI infrastructure used by Pathvera.

Users should avoid entering unnecessary confidential or sensitive personal information into free-text AI fields.

6. APPLICATION INFORMATION

Where Pathvera provides education-application management, we may process information relating to:
- institution applications;
- courses applied for;
- application status;
- admission requirements;
- deadlines;
- counsellor notes;
- document-verification status;
- application history;
- follow-up information; and
- communications associated with an application.

7. DOCUMENTS

Depending upon the Services used, students, agencies or authorised users may upload documents such as:
- academic certificates;
- mark sheets;
- resumes or CVs;
- application documents;
- supporting documents;
- identification documents; and
- other documents required for education-related services.

We process these documents only for purposes associated with providing the applicable Services, complying with legal requirements, preventing fraud, maintaining security or other purposes disclosed when the information is collected.

Users and agencies must ensure that they are authorised to provide documents containing another person's personal data.

8. AGENCY AND COUNSELLOR DATA

Pathvera provides CRM functionality to authorised educational agencies and counsellors.

We may therefore process:
- agency details;
- counsellor information;
- employee information;
- leads;
- prospective student information;
- student-agency relationships;
- follow-up records;
- application records;
- counselling information;
- institution information;
- course information;
- CRM activity;
- notes; and
- related operational information.

Agency users are responsible for ensuring that they have appropriate authority to enter and process personal data through Pathvera.

9. INFORMATION COLLECTED AUTOMATICALLY

When you access Pathvera, certain technical information may be collected automatically, including:
- device type;
- operating system;
- application version;
- IP address;
- device identifiers where permitted;
- login timestamps;
- session information;
- crash information;
- performance information;
- feature usage;
- interactions with the Platform; and
- security-related logs.

We may use this information to maintain, secure, analyse and improve the Platform.

10. HOW WE USE PERSONAL DATA

We may process personal data for purposes including:

Providing Pathvera
To:
- create and manage accounts;
- authenticate users;
- provide student profiles;
- operate agency accounts;
- provide educational information;
- manage applications;
- facilitate counselling;
- provide CRM functionality; and
- deliver requested Services.

Providing AI Features
To:
- conduct SMILE Assessments;
- generate assessment questions;
- analyse assessment responses;
- generate career roadmaps;
- provide personalised recommendations;
- match students with educational opportunities; and
- improve the relevance of Pathvera recommendations.

Communication
To:
- send account notifications;
- provide application updates;
- communicate assessment results;
- provide service notifications;
- respond to support requests;
- send security alerts; and
- communicate important Platform changes.

Security
To:
- authenticate users;
- detect unauthorised access;
- prevent fraud;
- investigate suspicious activity;
- enforce access controls; and
- protect users and the Platform.

Compliance
To:
- comply with applicable laws;
- respond to lawful requests;
- maintain legally required records;
- resolve complaints; and
- establish, exercise or defend legal claims.

11. PERSONALISATION AND PROFILING

Pathvera may use information supplied by students to create personalised educational and career recommendations.

For example, assessment responses may be analysed to identify possible:
- interests;
- career pathways;
- learning preferences;
- suitable courses;
- suitable educational programmes; and
- educational opportunities.

Such recommendations may involve automated processing and artificial intelligence.

AI-generated recommendations are advisory and should not be treated as guaranteed predictions or as the sole basis for significant educational, financial or career decisions.

12. HUMAN REVIEW

Pathvera is designed to assist students, counsellors and agencies rather than automatically replace human decision-making.

Where appropriate, AI-generated recommendations should be reviewed by the student, parent, counsellor, educational institution or another qualified person before consequential decisions are made.

Pathvera does not guarantee that automated recommendations will be appropriate for every individual.

13. HOW WE SHARE INFORMATION

We do not sell personal data.

We may disclose personal data only where necessary for the operation of Pathvera, where you have authorised the disclosure, or where otherwise permitted or required by applicable law.

Information may be shared with the following categories of recipients.

14. EDUCATIONAL AGENCIES AND COUNSELLORS

Where a student is connected to an educational agency or counsellor through Pathvera, relevant information may be available to authorised personnel of that agency.

This may include information necessary for:
- counselling;
- follow-ups;
- application management;
- document processing;
- institution selection; and
- related educational services.

Agency personnel should only access information necessary for their authorised responsibilities.

15. EDUCATIONAL INSTITUTIONS

Where requested or authorised as part of an application process, information may be disclosed to:
- universities;
- colleges;
- training institutions;
- educational providers; and
- other organisations involved in the relevant application.

Only information reasonably necessary for the applicable purpose should be disclosed.

16. SERVICE PROVIDERS

Pathvera uses third-party technology providers to operate the Platform.

These may include providers of:
- cloud infrastructure;
- databases;
- authentication;
- artificial intelligence;
- analytics;
- notifications;
- communications;
- application hosting;
- crash monitoring;
- payment processing; and
- security services.

These providers may process personal data only to the extent necessary to perform the relevant services, subject to applicable contractual and legal requirements.

17. ARTIFICIAL INTELLIGENCE PROVIDERS

Pathvera may use third-party AI services, including the OpenAI API, to provide AI-powered functionality.

Depending upon the feature being used, information submitted through Pathvera may be transmitted to the AI provider for processing.

This may include relevant:
- assessment responses;
- educational information;
- preferences;
- prompts;
- contextual information; and
- other information required to generate the requested result.

Pathvera should configure and use its AI services in accordance with applicable contractual, security and privacy requirements.

We do not intentionally send information to AI providers that is unnecessary for the requested AI functionality.

18. AUTHENTICATION

Pathvera may use third-party authentication infrastructure to securely manage account registration, login and authentication.

Authentication providers may process information necessary to:
- establish user identity;
- authenticate sessions;
- issue authentication tokens;
- prevent unauthorised access; and
- maintain account security.

19. DATA STORAGE AND DATABASE SERVICES

Pathvera uses cloud-based database and infrastructure providers.

Personal data may therefore be stored or processed using third-party infrastructure.

We use reasonable technical and organisational controls designed to restrict access to authorised users and services.

20. ACCESS CONTROL

Pathvera uses role and account-based access controls.

Students should only be able to access information associated with their authorised account.

Agency personnel should only be able to access students, leads, applications and other records associated with the agency or organisation they are authorised to represent.

Users must not attempt to circumvent these restrictions.

21. SECURITY

Pathvera uses reasonable technical and organisational security measures designed to protect personal data.

Depending upon the relevant system, these measures may include:
- authenticated access;
- role-based permissions;
- database-level access controls;
- secure API architecture;
- encryption in transit;
- restricted administrative access;
- secure management of API credentials and secrets;
- security logging;
- environment-based secret management; and
- monitoring for suspicious activity.

No online service can guarantee absolute security. Users should maintain the confidentiality of their account credentials and immediately report suspected unauthorised access.

22. CHILDREN'S PERSONAL DATA

Because Pathvera provides educational and career-guidance services, some users may be children.

Where the processing of a child's personal data requires parental or guardian consent under applicable law, Pathvera will take reasonable steps to obtain and verify the required consent before processing such information.

Parents or lawful guardians may be required to provide information necessary to verify that they are authorised to provide consent.

Pathvera will not knowingly process children's personal data contrary to applicable legal requirements.

Where an educational institution or agency provides children's personal data to Pathvera, that organisation must ensure that it has the necessary authority, notices and consents required for the processing.

23. PARENT AND GUARDIAN REQUESTS

Where applicable under law, a parent or lawful guardian may contact Pathvera regarding personal data processed about their child.

Pathvera may require appropriate verification before granting access to, modifying or deleting information to prevent unauthorised disclosure.

24. CONSENT

Where we rely upon consent for processing personal data, consent will be requested through an appropriate notice or consent mechanism.

Users may withdraw consent through available Platform controls or by contacting Pathvera where applicable.

Withdrawal of consent does not affect processing that was lawful before withdrawal.

Certain Services may no longer be available where the information is necessary to provide the requested Service.

25. DATA RETENTION

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected or as otherwise required or permitted by law.

Retention periods may depend upon:
- whether the account remains active;
- application status;
- agency relationships;
- contractual obligations;
- legal requirements;
- fraud-prevention requirements;
- dispute-resolution requirements;
- security requirements; and
- user deletion requests.

When personal data is no longer required, we may delete, anonymise or securely dispose of it in accordance with our retention procedures.

26. ACCOUNT DELETION

Users may request deletion of their Pathvera account through available account controls or by contacting:

pathvera@expectationwalkers.tech

Following a valid deletion request, Pathvera will delete or anonymise applicable personal data unless retention is necessary or permitted for purposes such as:
- legal compliance;
- financial records;
- fraud prevention;
- dispute resolution;
- security investigations;
- legal claims; or
- other lawful obligations.

Deletion from active systems may not result in immediate deletion from backups where technically impracticable. Backup information will remain subject to appropriate safeguards and applicable retention schedules.

27. YOUR PRIVACY RIGHTS

Subject to applicable law, users may have rights relating to their personal data.

These may include rights to:
- obtain information about the processing of their personal data;
- request access to applicable personal data;
- request correction of inaccurate or incomplete information;
- request erasure of eligible personal data;
- withdraw consent where processing is based on consent;
- raise a grievance regarding the processing of personal data; and
- exercise other rights available under applicable data-protection legislation.

Requests may be subject to identity verification and applicable legal limitations.

28. CORRECTION OF INFORMATION

Users may update certain information through their Pathvera account.

Where information cannot be changed directly, users may contact Pathvera to request correction.

Pathvera may require verification before making changes to information associated with an account.

29. WITHDRAWAL OF CONSENT

Where personal data is processed based on consent, users may withdraw that consent in accordance with applicable law.

Withdrawal may result in the loss of functionality where processing is necessary to provide a requested Service.

For example, withdrawing consent for processing assessment responses may prevent Pathvera from generating personalised assessment results.

30. GRIEVANCE REDRESSAL

Users may raise concerns regarding the processing of their personal data.

Email: expectationwalkers.tech@gmail.com

Contact Number: 7306111070

Pathvera will review grievances and respond in accordance with applicable legal requirements.

31. DATA BREACHES AND SECURITY INCIDENTS

If Pathvera becomes aware of a personal-data breach, we will investigate and take reasonable steps to:
- contain the incident;
- assess its impact;
- mitigate further risk;
- restore security; and
- provide notifications to affected individuals and competent authorities where required by applicable law.

32. INTERNATIONAL DATA PROCESSING

Some service providers used by Pathvera may process or store information outside India.

Where personal data is transferred or processed internationally, Pathvera will take measures required under applicable law and applicable contractual arrangements.

Where Indian law restricts transfer of particular categories of data to specified jurisdictions, Pathvera will comply with such restrictions.

33. ANALYTICS

Pathvera may use analytics to understand how users interact with the Platform.

Analytics may be used to:
- identify frequently used features;
- measure Platform performance;
- detect technical problems;
- improve user experience;
- understand usage patterns; and
- improve Platform functionality.

Where required, appropriate consent mechanisms will be provided.

34. COOKIES AND SIMILAR TECHNOLOGIES

The Pathvera website or web-based Services may use cookies, local storage or similar technologies for purposes such as:
- authentication;
- session management;
- security;
- user preferences;
- analytics; and
- Platform functionality.

Where legally required, users will be provided appropriate information and choices regarding non-essential technologies.

35. MARKETING COMMUNICATIONS

Where permitted, Pathvera may send information regarding:
- educational opportunities;
- new features;
- programmes;
- events;
- offers; and
- other relevant Services.

Where consent is legally required, marketing communications will only be sent after obtaining appropriate consent.

Users may unsubscribe from marketing communications using available opt-out mechanisms.

Operational communications, such as security alerts or application updates, may continue where necessary to provide the Service.

36. DATA PROVIDED BY AGENCIES

An agency may enter information about students or prospective students into Pathvera.

In these situations, the agency is responsible for ensuring it has appropriate authority and complies with applicable data-protection requirements when collecting and providing that information.

Depending upon the circumstances and applicable agreements, Pathvera may process such information on behalf of the agency or for purposes separately described to the user.

The respective responsibilities of Pathvera and enterprise or agency customers may also be governed by separate contractual agreements.

37. THIRD-PARTY LINKS

Pathvera may contain links to universities, colleges, institutions, scholarship providers, internship platforms, government portals, payment providers and other third-party websites or services.

These links are provided for convenience and informational purposes only.

Pathvera does not control third-party websites and is not responsible for their content, privacy practices, or terms of use.

Users should review the privacy policy and terms of any third-party website they visit through a link on Pathvera before providing any personal information.

The presence of a link on Pathvera does not constitute an endorsement, partnership, or recommendation of that third party.

38. CONTACT US

If you have any questions, concerns or requests regarding this Privacy Policy or the processing of your personal data, please contact:

Pathvera.ai
Operated by: Expectation Walkers GenAi Research and Services Pvt Ltd
Registered Address: First Floor, Thachappily Complex, Thelappily Junction, Irinjalakkuda, Thrissur, Kerala, India
Email: pathvera@expectationwalkers.tech
Support: expectationwalkers.tech@gmail.com
Phone: 7306111070

We will respond to your request in accordance with applicable data protection law.