LEGAL

Privacy Policy

Last updated: 1 June 2026

1. What we collect

When you create an account or use Digital Skill Academy of Bharat (DSAB), we collect: (a) profile data — name, email, phone, date of birth, gender, college, course, branch, year, skills, resume URL, LinkedIn, portfolio; (b) usage data — pages viewed, time spent, attendance check-ins; (c) device data — IP, browser, OS; (d) cookies & local storage for authentication.

2. Why we collect it

We use your data to: provide internship matching, issue verified certificates, track attendance and performance, send transactional emails (via Resend), generate offer letters, run the referral program, and improve the Platform. We do NOT sell your personal data to third parties.

3. Who we share it with

Limited sharing only with: (a) your assigned HR mentor and Super Admin for internship management; (b) email delivery provider (Resend) to send transactional emails; (c) infrastructure providers that host the Platform; (d) legal authorities if required by law.

4. Cookies & local storage

We use localStorage to keep you signed in (JWT access token). We use analytics (PostHog) to understand aggregate usage. You can clear local storage or disable cookies in your browser, but core features may break.

5. Your rights

You have the right to: access, correct, or delete your personal data; download your data; opt out of non-essential communications; close your account at any time. Email info@dsab.in to exercise any of these rights — we respond within 7 working days.

6. Data retention

We retain your account data while it is active. Certificates and verification records are retained permanently for verification purposes (these are public by design via the /verify/{code} URL). On account deletion, we anonymise personal data but retain certificate verification records.

7. Security

Passwords are hashed using bcrypt. JWT tokens are signed with a server-only secret. All traffic uses HTTPS. Sensitive operations require re-authentication. We do not store payment card data — payments (if any) are processed by Razorpay/Stripe directly.

8. Children

DSAB is intended for users aged 16 and above. We do not knowingly collect data from children under 16. If you believe a child has registered, contact info@dsab.in and we will delete the account.

9. International users

Our servers are located in India. By using DSAB you consent to the transfer and processing of your data in India in accordance with Indian data-protection law.

10. Updates to this policy

We will notify you of material changes via email or an in-app banner. Continued use after updates constitutes acceptance of the revised policy.

Data protection enquiries

Write to info@dsab.in with subject "Data Privacy".
Office: SGK, Saket Nagar, SBI Bank Road, Kanpur – 208014, Uttar Pradesh, India