# Privacy Policy *Last Updated: July 28, 2026* **DevTrack Academy** ("we," "our," "us," or the "Platform") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, store, and share your personal data when you visit our website, enroll in our courses, workshops, or interact with our Services. This Privacy Policy is designed to comply with the **Digital Personal Data Protection Act, 2023 (DPDP Act)**, the **Information Technology Act, 2000**, and other applicable laws of **India**. --- ## 1. Governing Law & Jurisdiction This Privacy Policy and all matters relating to your data privacy shall be governed by the laws of **India**. Any disputes arising out of this policy shall be subject to the exclusive jurisdiction of the courts in **Hyderabad, Telangana, India**. --- ## 2. Personal Data We Collect Under the DPDP Act 2023, we collect your personal data only for specified, lawful purposes and with your consent. The categories of personal data we collect include: 1. **Identity & Registration Data:** Full name, email address, username, password, profile picture, and link to GitHub or LinkedIn profiles. 2. **Contact & Billing Data:** Phone number, billing address, country, and GST number (if applicable for businesses). 3. **Payment Information:** Credit/debit card numbers, bank account numbers, or UPI details are collected and processed directly by our RBI-licensed secure payment gateway partners. We do NOT store your raw financial credentials on our servers. 4. **Technical & Usage Data:** IP address, browser type, device information, operating system, page views, session logs, and tracking parameters collected via cookies. 5. **Educational & Career Data:** Course progress, code submissions, quiz results, workshop attendance, projects built, resume details, and feedback submitted during the learning journey. --- ## 3. Purpose of Processing Personal Data We process your personal data for the following specific and limited purposes: - **Service Delivery:** To register your account, manage course enrollments, provide access to learning materials, track your progress, and grade assignments. - **Billing & Administration:** To issue GST-compliant invoices, process secure transactions, and manage refunds. - **Promotional Communications & Newsletters:** To send you educational newsletters, platform updates, community announcements, and promotional offers. You may opt out of promotional communications at any time using the "Unsubscribe" link in any email or by contacting `support@devtrackacademy.com`. - **Hiring Partner Sharing & Placement Assistance (Consent-Based):** With your prior explicit consent (such as when you opt into our job placement assistance program, submit your resume for referral, or make your profile searchable for employers), we may share your student profile, project portfolio, assessment scores, resume, and contact details with partner companies, recruiters, and prospective employers for hiring opportunities. - **Platform Improvement:** To analyze usage trends, diagnose technical issues, optimize site performance, and improve our course content. - **Legal Compliance:** To comply with tax laws, regulatory audit requests, and other statutory requirements. --- ## 4. Consent and Your Rights (Data Principal Rights) Under the DPDP Act 2023, you are the **Data Principal** and we are the **Data Fiduciary**. You have the following rights regarding your personal data: 1. **Right to Information:** You have the right to receive a summary of the personal data being processed by us and the list of third-party processors with whom your data has been shared. 2. **Right to Correction & Erasure:** You have the right to correct, complete, or update any inaccurate or misleading data. You may also request the deletion of your personal data when it is no longer necessary for the purpose it was collected. 3. **Right to Withdraw Consent:** You can withdraw your consent to data processing (including marketing communications or hiring partner sharing) at any time by contacting us at `support@devtrackacademy.com`. Note that withdrawing consent for service-critical data may limit our ability to provide you access to certain Services. 4. **Right of Grievance Redressal:** You have the right to register a grievance with us regarding the processing of your data, which we will address within the timelines mandated by law. 5. **Right to Nominate:** You have the right to nominate another individual to exercise your rights in the event of death or incapacity. --- ## 5. Data Retention & Erasure We will retain your personal data only as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by applicable tax, accounting, or legal regulations in India. Once the processing purpose is completed or when you withdraw your consent, we will securely delete, anonymize, or destroy your personal data within a reasonable timeframe, unless retention is mandated under Indian law. --- ## 6. Data Security and Safeguards We implement appropriate technical, physical, and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, loss, or destruction. These include secure database access controls, HTTPS encryption on all pages, secure session management, and restricted staff access to sensitive user data. In the event of a personal data breach, we will notify the **Data Protection Board of India (DPBI)** and affected users in compliance with the DPDP Act rules. --- ## 7. Data Sharing and Third-Party Processors We do not sell your personal data to third-party data brokers. We only share your data under the following circumstances: - **Hiring Partners & Prospective Employers (Opt-In / Consent Only):** If you explicitly opt into our placement assistance program or career network, we share your verified portfolio, resume, and contact information with hiring companies and recruitment partners for career opportunities. - **Hosting & Infrastructure:** Cloud hosting and database providers (such as Supabase, AWS, or Google Cloud). - **Payment Gateways:** Secure payment processors (e.g., Razorpay, Stripe) to process transaction details. - **Email & Newsletter Delivery:** Email service providers (such as Resend, Sendgrid, or Nodemailer services) to send transactional updates and promotional newsletters. - **Analytics:** Tools (like Google Analytics) to help us analyze platform usage. All third-party processors are bound by contract to maintain data confidentiality and comply with the security standards required under the DPDP Act 2023. --- ## 8. Grievance Redressal and Data Protection Officer (DPO) If you have any questions about this Privacy Policy, wish to exercise your rights, or have any grievances regarding your personal data, you may contact our designated Grievance Redressal Officer / Data Protection Officer (DPO): * **Designation:** Data Protection & Grievance Officer, DevTrack Academy * **Email:** `grievance@devtrackacademy.com` * **Address:** DevTrack Academy, Hyderabad, Telangana, India * **Processing Time:** We will acknowledge your grievance within 48 hours and attempt to resolve it within 30 days. If you are not satisfied with our response, you have the right to escalate your complaint to the **Data Protection Board of India (DPBI)**.