Privacy Policy

1. Who we are

Acadex is operated by Shagore Neel Private Limited. This Privacy Policy explains how we collect, use, store and share personal information when you use acadex.biz, contact us or receive Acadex services.

2. Information we may collect

Depending on how you interact with us, we may collect:

• your name, email address, phone or WhatsApp number and country;
• academic level, subject, deadline and the type of support you request;
• messages, enquiry details and communications with Acadex;
• documents, drafts, assignment briefs, notes, research material or other files you choose to send us;
• quote, service and payment-related records;
• limited technical information such as IP address, browser/device information, server logs and security records; and
• information you voluntarily provide when requesting a diagnostic review or other service.

Please avoid sending personal information that is not necessary for the support you are requesting.

For website enquiries, these details can include the form selections and message, the names, types and sizes of uploaded documents, the date and time of submission, an enquiry reference, and limited session, IP-address and security information used to detect misuse. Please avoid including unnecessary personal information, especially about other people.

3. How we use your information

We may use personal information to:

• respond to enquiries and provide quotes;
• assess and deliver academic guidance, review and research-support services;
• communicate about deadlines, materials, revisions, payments and service administration;
• process or reconcile payments through third-party payment providers;
• maintain business, accounting and legal records;
• protect the website, our clients and our business from misuse, fraud or security threats; and
• comply with applicable legal or regulatory obligations.

We do not sell personal information to advertisers.

We also send a receipt acknowledgement to the submitted email address, notify authorised Acadex administrators of an enquiry, and maintain an internal register to follow up, manage and audit enquiries.

4. Basis for processing

Depending on the context, we process information because it is necessary to take steps at your request before entering into a service arrangement, to perform an agreed service, to comply with legal obligations, or for legitimate business interests such as security, record-keeping and service improvement. Where consent is the appropriate basis, you may withdraw it subject to applicable law.

5. Academic Documents & Client Materials

Your drafts, briefs, research notes and other files may contain personal or sensitive information. We use them only as needed to provide our services. Please remove unnecessary personal information about others and make sure you have permission to share any documents or research you send us.

Contact-form uploads are restricted to PDF, DOC, DOCX, XLS, XLSX, TXT and RTF, with up to three files, no more than 5 MiB per file and 10 MiB in total. Uploaded files are temporarily stored in restricted private hosting storage, not copied to Google Drive by the Contact form. Administrator notification emails and student acknowledgement emails do not attach submitted documents; they list uploaded filenames instead. Uploaded documents are accessible only to authorised administrators through the protected administration interface during the applicable retention period. Email copies of enquiry details and filenames may remain in mailboxes according to the applicable retention and deletion processes.

6. When Information May Be Shared

We may share necessary information with trusted service providers, such as hosting, email, payments and communications providers, to operate Acadex. We may also share information when required by law or to protect our legal rights. If you use services such as WhatsApp or external links, their own privacy policies will apply.

Our enquiry workflow uses hosting infrastructure and an internal SQLite database, email service providers for administrator notifications and acknowledgements, and Google Sheets for an administrative register containing enquiry information and upload metadata. Submitted documents are not stored in that Google Sheets register. Relevant providers may process information on our behalf, including across borders, subject to applicable legal requirements and safeguards. We do not sell enquiry data or uploaded documents.

7. Payments

Payments may be processed by an external payment provider, so Acadex does not need to store your full card or banking details.

We may keep basic payment records, such as transaction details, amounts and dates, for accounting, refunds and service administration.

8. How Long We Keep Information

Adaptive anti-spam records: Message-pattern signatures are ordinarily deleted after 24 hours. Adaptive moderation records, including risk scores, reason codes, keyed identifiers and administrator decisions, are ordinarily deleted after 30 days. Temporary email-based restrictions normally expire after 15 minutes, after which expired entries are removed by scheduled cleanup. These periods apply to the adaptive moderation store and do not automatically delete separately held enquiry records, emails, other security logs, or administrator-managed blacklist and audit records, which are reviewed under their respective policies. Scheduled cleanup is configured to run daily; actual deletion depends on successful execution.

We keep your information only for as long as reasonably needed to provide our services, maintain records and meet legal requirements.

When it is no longer needed, we take reasonable steps to delete, anonymise or securely dispose of it.

Contact-form uploads: Our standard operational policy is to remove uploaded documents from private hosting storage after seven days, or earlier following an eligible deletion request. Automated scheduled cleanup must be operational before this period is represented as a guaranteed deletion deadline. Email copies are separate and are not erased by deletion of hosted uploads.

Administrative records: We retain relevant enquiry details, email correspondence, records in SQLite and Google Sheets, and necessary transaction or service records for legitimate administration, follow-up, dispute handling, security, accounting and compliance. We periodically review whether these records are still necessary; we do not treat them as permanently exempt from deletion. Where an eligible deletion request is received, we will erase data that is no longer necessary and retain only information needed for a valid lawful purpose, including applicable legal obligations, establishing or defending legal claims, and other grounds recognised by applicable law. Any retained material will be limited to what is necessary and reviewed as appropriate.

9. Security

Adaptive Contact-form protection: To identify repeated or coordinated spam, Acadex may evaluate submission frequency, limited technical and security signals, and similarity between messages. Our adaptive security database retains keyed, non-reversible fingerprints of email identifiers and message patterns, together with risk scores, reason codes, time stamps and administrator review decisions. It does not store the original message text or recoverable email addresses in that adaptive database. These fingerprints may still be personal data when they can be linked to an individual or other records.

Automated decisions and reviews: High-risk requests may be rejected or subjected to a temporary email-based restriction before any enquiry is delivered, uploaded files are retained or an administrative register entry is created. A flagged attempt may be recorded for administrator review, but its original message and attachments are not preserved in the adaptive review queue. A later decision that the flag was mistaken cannot automatically recover or deliver that original enquiry. A sender may contact Acadex through the other contact details on this website if a legitimate enquiry is affected. The rules are intended for abuse prevention, not marketing profiling; they can occasionally misclassify legitimate requests.

Automated abuse prevention: The Contact form uses Cloudflare Turnstile to assess whether a request appears automated. Cloudflare may process device, browser and network signals, including IP-address information, under its own applicable privacy terms. Acadex also applies security checks, temporary token fingerprints, limited rate-limit records and administrator-managed email/domain blocking. Temporary token fingerprints are retained for up to ten minutes; security rejection events are recorded as aggregate categories without message content and are subject to a 30-day deletion policy. Blacklist entries and their administrative audit records are kept for security administration and reviewed for ongoing necessity. These measures are used for abuse prevention, not advertising. When Invisible Turnstile is enabled, verification may run without displaying an on-page challenge. For further details, see Cloudflare’s Turnstile Privacy Addendum.

We use reasonable technical and organisational measures to protect the information we hold. However, no online service can guarantee complete security.

Please take care when sending sensitive information and keep copies of your own important documents.

Contact-form uploads are kept outside the public website directory, and access to retained files is restricted through an authenticated administrator interface. We apply controls such as secure connections, session and request validation, upload limits and access restrictions. No security measure or electronic communication channel can eliminate all risks.

10. Your choices and rights

Subject to applicable law, you may ask us to access, correct or update personal information we hold about you, or request deletion where we are not required to keep the information. You may also raise a concern about how your information is being used.

To make a privacy request, contact info@acadex.biz. We may need to verify your identity before acting on a request.

Depending on the applicable law, including the EU General Data Protection Regulation (GDPR) and India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and its applicable implementing provisions, you may have rights to obtain information or access, request correction or completion, request erasure, withdraw consent where processing relies on consent, and raise a grievance or complaint with the appropriate authority. EU/EEA individuals may also have relevant rights to restriction, objection and portability under the GDPR. These rights are subject to legal conditions and exceptions and may not require deletion of records we must or are lawfully entitled to retain.

Send requests to info@acadex.biz with sufficient information to locate the relevant enquiry. We may verify your identity, assess whether continued retention is lawful and necessary, and communicate our decision or any applicable exception. Where appropriate, requests will cover private uploaded files, enquiry records, Google Sheets entries and email copies held under our control. Applicable complaint and appeal routes remain available.

11. International users and service providers

Acadex serves students in multiple countries. Depending on where you are and which service providers are used, information may be processed or stored in a country different from your own. Where required, we take reasonable steps to use appropriate contractual or legal safeguards.

Where GDPR applies, any transfer of personal data outside the European Economic Area will be subject to an applicable lawful transfer mechanism or other recognised safeguard, where required. For individuals in India, processing and cross-border transfers will be handled under the DPDP Act and the rules and restrictions in force at the relevant time.

12. Cookies and similar technologies

Information about cookies and similar technologies used on the website is set out in our Cookies Policy.

13. Changes to this policy

We may update this Privacy Policy when the website, our services or applicable requirements change. The effective date shown at the top of this page indicates the current version.

14. Privacy contact

For privacy questions or requests, contact: