Privacy Policy

1. Who is responsible for your data

Prayogbharti Foundation is the Data Fiduciary for the personal data processed through this platform. That means we decide why and how your data is processed, and we are accountable for it.

2. What we collect

We collect the following, depending on how you use the platform.

If you are a student

If you are a member of staff or a trainer

Name, employee code, designation, contact details, qualification, specialisation, joining date, salary, the centre and department you belong to, and your attendance.

Collected automatically from everyone who signs in

• Audit records — your account, the action taken, the record affected, the date and time, your IP address and browser, for every change made in the platform;
• Sign-in records — the time and IP address of your last sign-in;
• Session cookie — see section 10.

We do not use behavioural tracking, profiling, advertising pixels or third-party analytics on this platform.

3. Why we collect it

We process this data on the basis of your consent, given when you enrol, and where applicable for compliance with a legal obligation. You may withdraw consent at any time — see section 9.

4. Aadhaar and sensitive data

Providing your Aadhaar number is optional. We ask for it only to identify you consistently across programmes and, where a government scholarship scheme requires it, to establish eligibility. We do not use Aadhaar for authentication or e-KYC, and we do not share it with anyone other than the specific government scheme you apply to.

Category and religion are collected only because some scholarship schemes are reserved on that basis. Leaving these blank does not affect your training, and only affects eligibility for schemes that are specifically reserved.

5. Children's data

Some of our students are under 18. For them:

• We obtain verifiable consent from a parent or guardian before enrolment;
• We collect the minimum necessary to deliver the training;
• We do not carry out behavioural tracking or monitoring, and we do not use their data for targeted advertising, as required by section 9 of the Digital Personal Data Protection Act 2023;
• A parent or guardian may exercise all of the rights in section 9 on the child's behalf.

6. Who we share it with

We share personal data only where it is necessary, and only with:

We do not sell your personal data, and we do not share it for advertising. Your data is stored on servers located in India.

7. How long we keep it

We keep student, training and scholarship records for 7 years after your last engagement with a programme, because we must be able to account to funders, auditors and government for the programmes we delivered and the funds we disbursed. Certificate records are kept indefinitely so that a certificate can still be verified by an employer years later.

When a record reaches the end of its retention period it is deleted. Where we need to keep outcome statistics beyond that point, we keep them in a form that no longer identifies you.

8. How we protect it

• All traffic to the platform is encrypted with HTTPS;
• Passwords are stored using a one-way hash and are never readable by anyone, including our staff;
• Access is restricted by role, so staff see only what their role requires — a trainer cannot see scholarship bank details, and a placement officer cannot see assessment answers;
• Administrator accounts can be protected with two-factor verification;
• Every change is written to an audit log recording who did it, when, and from which IP address;
• Sign-in attempts are rate-limited to resist password guessing;
• Application files, configuration and uploaded documents are stored outside the public web directory and cannot be fetched over the internet.

No system is perfectly secure. If a breach occurs that is likely to affect you, we will notify you and the Data Protection Board of India as required by law.

9. Your rights

Under the Digital Personal Data Protection Act 2023 you have the right to:

• Access — obtain a summary of the personal data we hold about you and what we do with it;
• Correction — have inaccurate or incomplete data corrected or completed. You can update your own contact details at any time from your profile in the student portal;
• Erasure — ask us to delete your data, unless we are required to keep it for a legal purpose or for the retention period in section 7;
• Withdraw consent — as easily as you gave it. Note that withdrawing consent may mean we can no longer keep you enrolled or process a scholarship;
• Grievance redressal — complain to us first, and if unsatisfied, to the Data Protection Board of India;
• Nominate — nominate another person to exercise these rights on your behalf in the event of your death or incapacity.

To exercise any of these, email info@prayogbharti.org. We will respond within 30 days. We may ask you to verify your identity first, so that we do not disclose your data to someone else.

10. Cookies

We use a single essential cookie to keep you signed in and to protect forms against cross-site request forgery. It is removed when you sign out, and it carries no advertising or tracking function. We do not use analytics or third-party cookies, so there is no cookie banner to dismiss.

11. Email, SMS and WhatsApp

We send messages about things that concern you directly: enrolment, low attendance, scholarship decisions, interview schedules and certificate issue. Guardians may receive attendance alerts for students under 18.

These are service messages rather than marketing, so they are part of being enrolled. We do not send promotional messages, and we do not pass your number to marketers. Every message we send is recorded in our communication log.

12. Changes to this policy

If we change how we handle your data we will update this page and, where the change is significant, tell you directly. The date at the top shows when it was last revised.

13. How to contact us

If we do not resolve your concern, you may complain to the Data Protection Board of India. See our DPDP Act statement for how we meet our obligations under the Act.