Privacy Policy

1. Introduction

Welcome to Perfect Scholar CRM ("we," "our," "us"). We are committed to protecting the personal data of our users (educational consultants, counsellors, administrators) and the prospective students ("Leads" or "Candidates") whose profiles are managed inside our CRM ecosystem.

This Privacy Policy explains how we collect, store, use, and protect information when you utilize the Perfect Scholar CRM web application and our companion native mobile applications distributed via the Apple App Store and Google Play Store.

2. Information We Collect

To provide our lead management and visa-processing services, we collect several categories of information:

• Account Credentials: Name, professional email address, mobile phone number, administrative role, and cryptographically hashed passwords when you register as a counsellor or manager.
• Candidate/Student Lead Profiles: Student names, contact details, academic interests, country preferences, current processing stages, and internal progress files uploaded by assigned counsellors.
• Communication Records: Text notes, scheduled follow-up tasks, and logs of communication templates (WhatsApp campaigns/SMS logs) utilized to interact with prospective students.
• System & Device Tokens: Expo Push Tokens or Exponent Push Tokens dynamically generated by the user's mobile device to enable real-time notifications for newly assigned leads and upcoming tasks.

3. How We Use Your Information

We use the collected information for the following specific purposes:

• To authenticate system users and assign role-based database access permissions (Admin, Manager, Counsellor).
• To allocate prospective student leads to specific counsellors for study-abroad counseling and visa application tracking.
• To schedule and deliver push notification reminders for pending tasks, customer callback schedules, and lead status updates.
• To optimize and analyze lead capture sources (e.g., website forms, social media campaigns) and counselor performance analytics.

4. Third-Party Services & Subprocessors

We do not sell or trade your personal data. We utilize trusted cloud subprocessors strictly to host infrastructure and deliver notifications:

5. Data Protection and Security

We enforce strict security practices to keep your data safe:

• All data transfer is encrypted using transport layer security (HTTPS/SSL).
• Database tables enforce Supabase Row-Level Security (RLS), restricting lead viewing to authorized owners and admins only.
• Authentication relies on JSON Web Token (JWT) standards to prevent unauthorized session hijacks.

6. Data Retention & Account Deletion Rights

We retain personal data only as long as necessary to provide administrative services. Administrative users and prospective candidates can request the complete deletion of their account records and candidate details from the database at any time.

To learn more about requesting data deletion or to submit a request, please visit our dedicated page: Account & Data Deletion Instructions.

7. Contact Us

If you have any questions or feedback regarding this Privacy Policy or our data management procedures, please contact us at: