Legal
Privacy Policy
Nikshala AI (Nikshala Pvt Ltd)
Last updated: 19 September 2026
This policy explains what personal data Nikshala AI collects, why, and what rights you have. It covers nikshala.com, the Nikshala AI platform, and the Nikshala AI Autofill browser extension.
1. Who we are
Nikshala Pvt Ltd operates Nikshala AI, a platform that helps students apply to universities in Germany.
For the purposes of the EU General Data Protection Regulation, Nikshala Pvt Ltd is the data controller.
Contact for any privacy question or request: nd@nikshala.com
2. Who the data is about
Two different groups:
Applicants. Students who use Nikshala AI, or whose applications are filed by Nikshala AI staff on their behalf with their consent.
Staff users. Nikshala AI employees who operate the platform and the browser extension.
3. What we collect
From applicants
To prepare and file a university application we hold the information a German university or uni-assist requires:
- Name, date of birth, place and country of birth, gender, marital status, nationality
- Passport number
- Postal address, email address, telephone number
- Secondary school details, certificates and dates
- University details, subject, degree, grades, credits and dates
- Language test results and other entrance examination results
- Documents you provide, such as transcripts, certificates, CV, motivation letter, portfolio and proof of practical experience
We collect this directly from the applicant, or from documents the applicant supplies.
From staff users of the browser extension
- The backend address and an access token, used to connect the extension to your Nikshala AI account
- Field mappings the operator creates while using the extension
4. The Nikshala AI Autofill browser extension
This section describes the extension specifically.
What it does. It fills application forms on German university and uni-assist portals using applicant details already saved in Nikshala AI, so the same information is not retyped for every course.
What it stores on your device. Only three things, in your browser's local extension storage: the backend address, the access token, and the field mappings you create. Nothing else is stored locally.
What it sends. It requests applicant data from the Nikshala AI backend so it can fill the form in front of you. It sends nothing to any other destination.
What it does not do.
- It does not read, collect or transmit your browsing history
- It does not track which sites you visit
- It does not run on a page unless you click the extension button
- It does not submit any application. A person reviews every value and submits manually
- It does not attach or upload files
- It contains no analytics, no advertising and no third-party tracking code
- It contains no remote code. All executable code is inside the extension package
Why it requests access to websites. German university applications are filed on portals run by hundreds of separate institutions, each on its own domain. The extension needs permission to read the field labels on the page you are viewing so it can match them. It only does this when you click the button.
5. Why we process this data, and on what legal basis
We do not use personal data for advertising, profiling or automated decision-making.
| Purpose | Legal basis under GDPR |
|---|---|
| Preparing and filing a university application on your behalf | Performance of a contract, Article 6(1)(b) |
| Operating and securing the platform and extension | Legitimate interests, Article 6(1)(f) |
| Meeting legal and accounting obligations | Legal obligation, Article 6(1)(c) |
| Anything else we ask you about separately | Consent, Article 6(1)(a) |
6. Who we share it with
Universities and uni-assist, only where you have asked us to file an application, and only the information that application requires.
Service providers who host our infrastructure and are bound by contract to process data only on our instructions.
Authorities, where the law requires it.
We do not sell personal data. We do not transfer it to third parties for their own purposes. We do not use it to assess creditworthiness or for lending.
7. International transfers
Applicant data may be transferred between India and Germany, and to universities in Germany, because that is inherent to the service. Where data leaves the European Economic Area we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses.
8. How long we keep it
We keep applicant data for as long as needed to provide the service and to meet legal or accounting retention periods, after which it is deleted or anonymised.
You can ask us to delete your data at any time using the contact address above. Extension storage on a device is removed when the extension is uninstalled.
9. Your rights
Under GDPR you may request access to your data, correction of it, deletion of it, restriction of processing, a portable copy, or object to processing based on legitimate interests. Where processing rests on consent, you may withdraw it at any time.
Write to nd@nikshala.com and we will respond within one month.
You also have the right to complain to a supervisory authority. In Germany this is the data protection authority of the relevant federal state.
10. Security
Access to applicant data requires an authenticated Nikshala AI account. Extension access uses a token that can be revoked at any time from the admin panel. Data in transit is encrypted using TLS.
11. Children
Our services are intended for applicants to higher education. We do not knowingly collect data from children under 16 without the consent of a parent or guardian.
12. Changes
We will update this page when our practices change, and revise the date at the top.
Questions: nd@nikshala.com