Data Processing Policy

Last updated: 24 August 2026

This page explains, for institutions, how WorkSathi handles the personal data an institution places on the platform.

Roles

Where an institution uploads its students' data and directs us to process applications, the institution determines the purpose of that processing and WorkSathi processes on its instructions. Where a student signs up directly, we determine the purpose for the service that student requested.

What we process, and why

We process student identity, contact, academic, financial and document data solely to deliver the application processing service described in our Terms of Service. We do not process it for any other purpose.

Our commitments to institutions

• We process personal data only on your documented instructions, which for most purposes are the configuration choices you make in the platform.
• Our staff who can access your data are bound by confidentiality obligations.
• We apply the technical and organisational measures set out in our Security Policy.
• We will not engage a new sub-processor for your data without notice.
• We will assist you in responding to a student's request to access, correct or delete their data.
• We will notify you without undue delay if we become aware of a breach affecting your data.
• On termination, we will return or delete your data at your choice, except where retention is required by law.

Sub-processors

We use third parties for cloud infrastructure and storage, transactional email, SMS delivery and payment processing. Each receives only the minimum data its function requires. A current list is available on request.

International transfers

Where a sub-processor operates outside India, we take steps to ensure the data receives an equivalent level of protection.

Retention

Retention periods are set out in our Privacy Policy. An institution may request earlier deletion of records it controls, subject to our need to retain audit and tax records.

Contact

Institutions with a data protection question should write to our support address, marking the message for the attention of the data protection contact.