Privacy Policy

Placera is a Software as a Service (SaaS) platform for Training and Placement Officers (TPOs) at Indian colleges. Placera is operated by Issac Johny, based in Tiruchirappalli, Tamil Nadu, India.

For the purposes of the Digital Personal Data Protection Act 2023, Placera acts as a Data Fiduciary — we determine the purposes and means of processing personal data. Colleges that use Placera act as Data Principals in relation to their own institutional data, and their students and contacts are also Data Principals whose rights we are committed to protecting.

Contact: johnydurai@gmail.com | placera.in

We collect only the data necessary to provide our placement management service. This includes:

College and institutional data:

User account data (for directors, officers, and principals):

Student data (uploaded by colleges):

HR contact data (uploaded by colleges):

We do not collect:

We collect and process personal data for the following specific purposes only:

We do not use your data for advertising, profiling, or any purpose beyond what is described above. We will never sell your data to third parties.

Under the Digital Personal Data Protection Act 2023, we process personal data on the following legal bases:

Consent: When a college signs up for Placera, the director provides explicit consent on behalf of the institution for data processing as described in this policy.

Legitimate interest: Processing data that is necessary to deliver the placement management service that colleges have signed up for.

Contractual necessity: Processing required to fulfil our service agreement with colleges.

By signing up for Placera, colleges confirm they have obtained appropriate consent from their students and staff to have their data stored and processed on this platform for placement management purposes.

All data is stored on Supabase — an enterprise-grade database platform hosted on Amazon Web Services in the Singapore region (ap-southeast-1).

Security measures we have implemented:

We do not store passwords in plain text. All passwords are hashed using industry-standard bcrypt encryption.

We retain personal data for as long as a college maintains an active account with Placera.

Upon account cancellation or request for deletion:

We may retain anonymised, aggregated statistical data — such as total placement rates across our platform — indefinitely for product improvement purposes. This data cannot be linked back to any individual person or college.

Under the Digital Personal Data Protection Act 2023, you have the following rights:

Right to access: You can request a copy of all personal data we hold about you.

Right to correction: You can request correction of inaccurate or incomplete personal data.

Right to erasure: You can request deletion of your personal data. We will process this within 30 days.

Right to grievance redressal: You can raise a complaint about how we handle your data.

Right to nominate: You can nominate another person to exercise your rights on your behalf.

To exercise any of these rights, email us at johnydurai@gmail.com with the subject line "Data Rights Request". We will respond within 30 days.

For students: If you are a student whose data has been uploaded to Placera by your college, you may contact us directly to access, correct, or request deletion of your data. We will coordinate with your college to process the request.

We do not sell, rent, or trade personal data to any third party under any circumstances.

We share data only with the following service providers who process data on our behalf as Data Processors:

Supabase (database and authentication): supabase.com — Privacy policy at supabase.com/privacy

Vercel (web hosting): vercel.com — Privacy policy at vercel.com/legal/privacy-policy

Resend (transactional email): resend.com — Privacy policy at resend.com/privacy

Each of these providers is contractually bound to process data only as instructed by us and to maintain appropriate security standards.

We will disclose personal data to government or law enforcement authorities only if required by law or a valid court order.

Placera uses minimal cookies strictly necessary for the service to function:

We do not use Google Analytics, Facebook Pixel, or any other behavioural tracking technology.

Some college students may be under 18 years of age. Under the DPDPA 2023, processing data of children requires verifiable parental consent.

Colleges using Placera are responsible for ensuring they have obtained appropriate consent from students or their parents or guardians before uploading student data to the platform.

Placera does not knowingly collect data from children without appropriate consent being in place at the institutional level.

In the event of a personal data breach that is likely to result in harm to Data Principals, we will:

We have implemented technical and organisational measures to prevent data breaches, including access controls, encryption, and security monitoring.

We may update this Privacy Policy from time to time as our service evolves or as legal requirements change.

When we make material changes we will:

Your continued use of Placera after the effective date of changes constitutes acceptance of the updated policy.

For any privacy-related questions, requests, or complaints:

Issac Johny

Founder, Placera

Email: johnydurai@gmail.com

Website: placera.in

Location: Tiruchirappalli, Tamil Nadu, India

We aim to respond to all privacy enquiries within 30 days. If you are not satisfied with our response you have the right to approach the Data Protection Board of India once it is established.