Privacy Policy

1. Introduction

Evoastra Ventures (OPC) Private Limited ("we", "us", "our", or "Evoastra") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, disclose, and protect data when you access or use our website, platform, internship programs, training services, and related digital offerings (collectively, the "Services").

By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, please discontinue use of our Services immediately.

2. Information We Collect

2.1 Information You Provide Directly

When you register, apply, enroll, or interact with our platform, we may collect:

• Identity Data: Full name, date of birth, gender, photograph, academic qualifications, and professional details.
• Contact Data: Email address, phone number, postal address, and emergency contact information.
• Account Data: Username, password (stored in hashed form), security questions, and account preferences.
• Financial Data: Payment information processed securely through our third-party payment gateway partners (Razorpay, Cashfree, or others). We do not store complete credit/debit card numbers on our servers.
• Application Data: Resume, cover letter, academic transcripts, internship preferences, and responses to application forms.
• Communication Data: Messages sent through our chat system, support tickets, emails, and feedback submitted through contact forms or lead generation forms.

2.2 Information Collected Automatically

When you access our platform, we automatically collect:

• Device Data: IP address, browser type and version, operating system, device identifiers, screen resolution, and language preferences.
• Usage Data: Pages visited, time spent on pages, click patterns, navigation paths, search queries, and interaction with platform features (Kanban boards, certificate builders, dashboards).
• Location Data: Approximate geographic location derived from your IP address.
• Log Data: Server logs including access timestamps, error logs, and API request metadata.

2.3 Information from Third Parties

We may receive information about you from:

• Payment gateway providers (transaction status, payment confirmations).
• Social media platforms when you interact with our ads or social pages.
• Analytics and advertising partners (Meta/Facebook, Google Analytics).
• Referral partners or recruitment agencies.

3. How We Use Your Information

We process your personal information for the following purposes:

4. Cookies & Tracking Technologies

We use cookies, pixels, and similar tracking technologies to enhance your experience, analyze usage, and deliver targeted advertising. For comprehensive details, please refer to our Cookie Policy.

Key tracking technologies we employ include:

• Meta (Facebook) Pixel & Conversions API: To measure ad performance, optimize campaigns, and track conversion events (page views, enrollment initiations, purchases). Both browser-side and server-side tracking are active.
• Essential Cookies: Session management, authentication tokens, CSRF protection, and user preferences.
• Analytics Cookies: Platform usage analysis and performance monitoring.

5. Data Sharing & Disclosure

We do not sell your personal data. We may share your information with:

• Payment Processors: Razorpay, Cashfree, or similar gateways — solely for processing transactions.
• Cloud Infrastructure: Hosting providers for secure data storage and platform delivery.
• Email & SMS Services: For transactional and marketing communications (with your consent for marketing).
• Advertising Partners: Meta/Facebook for conversion tracking and ad optimization through the Meta Pixel and Conversions API.
• Corporate Clients: If you intern through a company-hosted program on our platform, relevant performance data may be shared with that company as part of the internship arrangement.
• Legal Authorities: When required by law, court order, or government regulation under Indian law.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, typically:

• Account data: For the duration of your account plus 3 years after account closure or last activity.
• Financial records: 7 years as required under Indian tax and accounting regulations.
• Certificate records: Indefinitely, as certificates are designed to be permanently verifiable.
• Communication logs: Up to 2 years from the date of communication.
• Analytics data: Aggregated and anonymized data may be retained indefinitely.

7. Your Rights

Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian laws, you have the right to:

• Access: Request a summary of personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data, subject to legal retention requirements.
• Grievance Redressal: Lodge complaints regarding data processing practices.
• Withdraw Consent: Withdraw previously given consent for marketing communications at any time.
• Nominate: Nominate another individual to exercise your data rights in the event of your death or incapacity.

To exercise any of these rights, contact us at support@evoastra.com. We will respond within 30 days.

8. Data Security

We implement reasonable security practices and procedures as mandated under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, including:

• Encryption of data in transit (TLS/SSL) and at rest.
• Secure password hashing using industry-standard algorithms.
• Role-based access controls limiting data access to authorized personnel.
• Regular security audits and vulnerability assessments.
• Automated backup systems with encrypted storage.
• JWT-based authentication for API access and real-time communication channels.

While we employ commercially reasonable measures, no system is completely secure. We cannot guarantee absolute security of your data.

9. Email & SMS Communications

By registering on our platform or submitting your information through our forms, you consent to receiving communications regarding:

• Internship updates, onboarding instructions, and program changes.
• OTP verification, password resets, and security alerts.
• Certificate issuance notifications and recommendation letter updates.
• Support responses and administrative notices.
• Marketing and promotional communications (where you have opted in).

You may opt out of marketing communications at any time by clicking the "Unsubscribe" link in any marketing email or contacting us directly. Transactional and operational communications related to your active services cannot be opted out of.

10. Children's Privacy

Our Services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you believe a child under 16 has provided us with personal information, please contact us immediately and we will take steps to delete such information.

For users between the ages of 16 and 18, we recommend that a parent or legal guardian review and consent to the use of our Services.

11. Third-Party Links & Services

Our platform may contain links to third-party websites, services, or applications. We are not responsible for the privacy practices, content, or security of these external services. We encourage you to review the privacy policies of any third-party service before providing your information.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. Material changes will be communicated through a prominent notice on our platform or via email to registered users.

Continued use of our Services after any modifications constitutes acceptance of the updated policy.

13. Governing Law

This Privacy Policy is governed by the laws of India, including but not limited to:

• Information Technology Act, 2000
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• Digital Personal Data Protection Act (DPDP Act), 2023

Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts in India.

14. Contact Us