PRIVACY POLICY

Promise: Your data/documents are very secure and safe.

1. Introduction

Welcome to CAS Manager ("CAS Manager", "we", "us", or "our").

CAS Manager is a digital platform designed to assist scientists, academicians, researchers, faculty members and other professionals in maintaining their professional profiles, academic achievements, Academic Performance Indicator (API) records and supporting documentation for the Career Advancement Scheme (CAS) and related professional requirements.

We respect your privacy and are committed to protecting the personal information and documents entrusted to us.

This Privacy Policy explains:

What information we collect
How we collect and use that information
How we store and protect your information
When information may be shared
How long we retain information
Your rights regarding your personal data

How you can contact us regarding privacy-related matters.

By using CAS Manager, you acknowledge that you have read and understood this Privacy Policy.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal information collected through:

The CAS Manager website
The CAS Manager web application
User registration and login
Professional profile creation and updating
API record management
Document and certificate uploads
Communications with CAS Manager

Other services or features provided through CAS Manager.

This policy applies to registered users including scientists, researchers, academicians, faculty members and other authorized users of the platform.

3. Information We Collect

Depending on how you use CAS Manager, we may collect the following categories of information.

3.1 Personal and Identification Information

This may include:

Full name
Title/designation
Gender, where voluntarily provided
Date of birth, where required
Photograph/Profile picture
Employee or staff identification number
Department
Institution/Organization
Office address
Contact address
Email address
Mobile/telephone number

3.2 Professional and Academic Information

We may collect information relating to your professional career, including:

Designation and position
Department and institution
Educational qualifications
Academic degrees
Employment history
Research experience
Teaching experience
Extension activities
Training and professional development
Publications
Research projects
Patents
Awards and recognitions
Conferences, seminars and workshops
Memberships and professional activities
Other academic and professional achievements relevant to API/CAS assessment

3.3 API and CAS Information

We may collect and process information relating to your Academic Performance Indicator (API) and Career Advancement Scheme (CAS) records, including:

API scores and calculations
Activity-wise academic/professional records
Supporting information for API claims
CAS-related application information
Assessment-related information
Career advancement records
Documents supporting API/CAS claims
Verification or assessment information, where applicable

3.4 Uploaded Documents

Users may upload documents supporting their academic and professional records.

These may include:

Educational certificates
Degree certificates
Experience certificates
Appointment and promotion documents
Research/publication documents
Publication certificates
Training certificates
Conference certificates
Awards and recognition certificates
Project-related documents
Patent documents
Professional membership documents
API/CAS supporting documents
Other documents voluntarily uploaded by the user

Users should upload only documents that are relevant and necessary for the intended purpose.

3.5 Account and Technical Information

When you use CAS Manager, certain technical information may also be collected automatically, such as:

Username
Login and authentication information
IP address
Browser type
Device information
Operating system
Date and time of access
Login/logout information
Security and activity logs
Error and diagnostic information

Passwords are intended to be stored and processed using appropriate security mechanisms and should not be stored in plain text.

4. How We Collect Information

We may collect information:

Directly from you when you register
When you create or update your professional profile
When you enter API/CAS information
When you upload documents
When you communicate with us
Automatically through your use of the application and

From an authorized institution or administrator where such collection is permitted and necessary for providing CAS Manager services.

5. Purpose of Processing Personal Data

We use personal information for legitimate and specified purposes, including:

Creating and maintaining your CAS Manager account
Authenticating users
Maintaining professional profiles
Maintaining API records
Assisting with CAS documentation
Organizing academic and professional achievements
Storing supporting documents
Facilitating document retrieval and management
Providing platform functionality
Improving the security and reliability of the platform
Preventing unauthorized access, misuse or fraud
Providing technical support
Communicating important service-related information
Maintaining system records and audit logs
Complying with applicable legal and regulatory requirements and

Performing other purposes that are clearly communicated to you at or before collection.

We will not use personal information for unrelated purposes without an appropriate legal basis or notice, where required by applicable law.

6. User Responsibility for Uploaded Information

CAS Manager is a professional record-management platform. Users are responsible for ensuring that information and documents uploaded to their accounts are:

Accurate
Complete
Current
Relevant to the intended purpose; and

Lawfully provided.

Users should not upload another person's personal information or confidential documents unless they have the appropriate authority or permission to do so.

Users should also avoid uploading information that is unnecessary for API/CAS documentation.

7. Legal Basis for Processing

We process personal data in accordance with applicable data protection and privacy laws.

Where applicable, processing may be based on:

Consent provided by the user
Provision of services requested by the user
Compliance with applicable legal obligations
Legitimate and lawful purposes permitted under applicable law; or

Other lawful grounds recognized under applicable data protection legislation.

India's Digital Personal Data Protection Act, 2023 establishes a framework governing the processing of digital personal data and recognizes individuals' rights relating to protection of their personal data.

8. Data Sharing and Disclosure

We do not sell or commercially trade users' personal information.

Personal information may be accessed, processed or disclosed only where reasonably necessary for the operation of CAS Manager or where legally permitted or required.

Information may be shared with:

8.1 Authorized Administrators

Authorized institutional or system administrators may access information necessary for administration, verification, assessment or management of the CAS Manager platform.

8.2 Service Providers

We may use trusted third-party service providers for services such as:

Hosting
Cloud infrastructure
Database management
Document storage
Email delivery
Security
Backups
Technical maintenance; and

Application support.

Such providers should process information only for authorized purposes and subject to appropriate contractual and security safeguards.

8.3 Legal or Regulatory Authorities

We may disclose information where required by applicable law, regulation, court order, government authority or lawful governmental request.

8.4 Institutional or Assessment Purposes

Where CAS Manager is used by an institution or organization and user apply for specific promotion, information may be made available to authorized persons for legitimate academic, administrative, verification or CAS assessment purposes, in accordance with applicable authorization and privacy requirements.

9. Data Security

We take reasonable and appropriate technical and organizational measures to protect personal information against:

Unauthorized access
Unauthorized disclosure
Alteration
Misuse
Accidental loss
Destruction; and

Other security threats.

Security measures may include, as appropriate:

Secure authentication
Password protection
Access controls
Encryption or secure transmission
Server and database security
Activity and access logging
Regular backups
Security monitoring; and

Restricted administrative access.

However, no internet-based service can guarantee absolute security. Users should therefore maintain the confidentiality of their login credentials and immediately notify CAS Manager if they suspect unauthorized access to their account.

10. Password and Account Security

Users are responsible for maintaining the confidentiality of their usernames, passwords and other authentication credentials.

You should:

Use a strong and unique password
Not share your password with others
Log out after using shared devices
Avoid storing passwords in publicly accessible locations and

Immediately report suspected unauthorized access.

CAS Manager or any Personnel should not normally request your password so do not share your password.

11. Document Security

Because CAS Manager may contain academic certificates, professional records and other important documents, we treat uploaded documents as confidential information.

Access to uploaded documents should be restricted through appropriate authentication and authorization controls.

Users should upload only documents necessary for their professional/API/CAS records and should review documents before uploading them.

12. Data Retention

We retain personal information for as long as reasonably necessary to:

Provide CAS Manager services
Maintain professional and API/CAS records
Comply with applicable legal or institutional requirements
Resolve disputes
Maintain security and audit records and

Fulfill legitimate operational purposes.

When personal information is no longer required for the purposes for which it was collected, it will be deleted, anonymized or otherwise disposed of in accordance with applicable law and our data-retention practices.

Specific retention periods: up to renewal (Data will be deleted 15 days after expiry of renewal)

13. User Rights

Subject to applicable law and the manner in which CAS Manager processes your information, users may have rights relating to their personal data, including rights to:

Obtain information about processing of their personal data
Request access to personal information
Request correction of inaccurate or incomplete information
Request deletion of personal information where legally applicable
Withdraw consent where processing is based on consent
Raise a grievance regarding processing of personal data; and

Exercise other rights available under applicable data protection law.

Requests may be submitted using the contact details provided in the Contact Us / Grievance Redressal section of this Privacy Policy.

The Digital Personal Data Protection Rules, 2025 contemplate clear notices describing the personal data collected, purposes of processing, and mechanisms for withdrawal of consent and exercise of rights.

14. Correction and Updating of Information

Users should keep their professional profiles and API/CAS records accurate and up to date.

Where the platform provides an editing facility, users may update their information directly.

If information cannot be corrected through the platform, users may contact CAS Manager using the details provided below.

15. Withdrawal of Consent

Where processing is based on consent, users may withdraw consent in accordance with applicable law.

Withdrawal of consent may affect our ability to provide certain CAS Manager features or services where the relevant information is necessary for providing those services.

Requests for withdrawal should be submitted through the mechanism provided by CAS Manager or by contacting the designated privacy/grievance contact.

16. Cookies and Similar Technologies

CAS Manager may use cookies or similar technologies necessary for:

Maintaining login sessions
Authentication
Security
Remembering user preferences
Improving application functionality and

Understanding application performance.

Where non-essential cookies or similar technologies are used, appropriate notice and consent mechanisms will be provided where required by applicable law.

17. Third-Party Websites and Services

CAS Manager may contain links to third-party websites, services or resources.

We are not responsible for the privacy practices, security or content of third-party websites.

Users are encouraged to review the privacy policies of third-party services before providing personal information to them.

18. Children's Privacy

CAS Manager is intended primarily for adult professionals, scientists, researchers, academicians and other authorized users.

We do not knowingly seek to collect personal information from children for purposes unrelated to the services provided by CAS Manager.

19. Data Breach and Security Incidents

In the event of a personal data breach, CAS Manager will take appropriate steps to investigate, contain and mitigate the incident and make notifications to affected users and/or relevant authorities where required by applicable law.

20. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect:

Changes in our services
Changes in technology
Changes in applicable law or regulations; or

Improvements to our privacy and security practices.

The updated Privacy Policy will be published on this page with a revised "Last Updated" date.

Users are encouraged to review this Privacy Policy periodically.

21. Contact and Grievance Redressal

If you have any questions, concerns, requests or complaints regarding this Privacy Policy or the processing of your personal information, please contact us.

CAS Manager

Data/Privacy Contact: [Name / Designation]

Email: []

Grievance Officer: [Name / Designation]

Email: []

Address:[Full Registered/Office Address]

Phone: [Contact Number]

We will review and respond to privacy-related requests in accordance with applicable law and our internal procedures.

22. Consent and Acknowledgement

By registering for and using CAS Manager, you acknowledge that you have read this Privacy Policy and understand how your personal information may be collected, used, stored and processed for the purposes described above.

Where consent is required under applicable law, CAS Manager will obtain such consent through an appropriate mechanism.

23. Governing Law

This Privacy Policy shall be governed by the applicable laws of India.

Any disputes relating to privacy or use of CAS Manager shall be subject to the applicable jurisdiction and dispute-resolution mechanisms under Indian law.

CAS ManagerCareer Advancement Scheme & Academic Performance Indicator Management System