Privacy Policy
Sachho is operated in Nepal by Samir Kaliraj as an unregistered individual project. For privacy requests, email hello@sachho.com.
In short: Sachho does not publish student names, emails, IP information, evidence files, or moderator notes. Public reports are moderated and de-identified.
What students submit
The experience form asks for consultancy name, branch/location, destination country, course level, year applied, fee range, reported visa outcome, processing time, whether costs were explained, communication, unexpected charges, post-arrival support, pressure, whether the student would recommend or use the consultancy again, free-text explanations, optional email, consent to publish, and optional private evidence such as PDF or image files.
What Sachho collects automatically
Sachho stores timestamps, a one-way hash of IP address, and browser user-agent for abuse prevention, duplicate checks, moderation, and security.
Third parties
Vercel (United States) hosts the site and runs the backend. Supabase stores all data (EU, Frankfurt). Resend (United States) sends account emails when configured. Google Fonts and Fontshare serve the site's typefaces directly to visitors' browsers. Sachho does not run any analytics or tracking service -- an earlier broken analytics integration has been removed.
What is public
Approved reports may show de-identified student-reported facts, moderated excerpts, aggregate metrics, sample counts, and a safe Experience verified flag.
What stays private
Emails, IP hashes, evidence files, storage paths, moderator notes, reviewer information, dispute and contact-attempt records, and rejected submissions are not exposed publicly or to consultancies.
Retention
Published reports are kept indefinitely unless withdrawn. Rejected submissions and unreviewed queue items are kept up to 12 months, then deleted. Dispute records are kept for at least 24 months after resolution. This is a manually-enforced commitment, not yet an automated deletion system.
Amending or withdrawing a report
Email hello@sachho.com from the address used in the submission, or with enough detail to identify it -- submissions can be anonymous, so identity is matched manually. Unpublishing removes a report from every public page and public statistic immediately; the record is kept privately, not deleted, per Retention above. Sachho aims to respond within 7 working days.
Legal basis and rights
Sachho processes a submission because the submitter chose to share it and consented to publication, and processes abuse-prevention data because Sachho has a legitimate interest in keeping the site free of spam and fraudulent reports. You can ask what Sachho holds about you, ask for a correction, or ask for deletion, by emailing hello@sachho.com.
Security
All traffic is encrypted in transit (HTTPS). Private evidence files and IP addresses are never returned by any public endpoint. IP addresses are hashed one-way before storage. Admin and consultancy-representative sessions use signed, time-limited, HttpOnly cookies, and passwords are hashed, never stored in plain text.
Last updated
24 August 2026. Material changes to this policy will be announced on this page rather than made silently.
Contact
Email hello@sachho.com to ask what Sachho holds about you, request a correction, or request deletion.