Skip to content

Privacy Policy

Last updated: 18 May 2026

1. Who we are

Engitrack is a virtual internship platform operating under the trade name “Engitrack” and accessible at https://engitrack.in. Our principal place of business is Koramangala / Tavarekere / SG Palya, Bengaluru, Karnataka 560029, India. For all matters related to this Privacy Policy or your personal data, contact us at support@engitrack.in.

2. What data we collect

We collect only the information needed to operate the platform:

  • Identity & contact: full name, email, phone number, college, year of study, branch.
  • Application content: skills, motivation statement, task submissions (text and links to externally hosted artefacts).
  • Payment metadata: Razorpay order ID, payment ID, amount, status. We never receive or store card numbers, UPI handles, or banking credentials — those stay with Razorpay.
  • Technical: IP address, browser user-agent, and session cookies set by our authentication provider.
  • Communications: messages you send to us through the contact form or email.
  • Service inquiry data: if you contact us about agency services (web development, social media, digital marketing), we collect the business name, contact person, project scope, budget range, and timeline you share with us.

3. How we use your data

We use your data only for the purposes for which you provided it:

  • To review your internship application, communicate decisions, assign tasks, and review submissions.
  • To generate, deliver, and verify your certificate and Letter of Recommendation.
  • To process certificate-purchase payments via Razorpay.
  • To send transactional emails (selection notice, submission status, payment receipt, certificate ready).
  • To detect fraud, abuse, and to enforce our Terms of Service.
  • To comply with applicable Indian law and respond to lawful requests.

We do not sell your data. We do not use it for behavioural advertising. We do not share it with anyone except the processors listed in section 4.

4. Third-party processors

We rely on the following service providers to operate the platform. Each handles a narrow slice of your data under their own privacy policies:

  • Razorpay Software Pvt. Ltd. — payment processing.
  • Resend, Inc. — transactional email delivery.
  • MongoDB, Inc. (Atlas) — database hosting, region AWS Mumbai (ap-south-1).
  • Vercel Inc. — application hosting and content delivery.
  • Cloudinary Ltd. — image hosting for portfolio thumbnails.
  • Functional Software, Inc. (Sentry) — error monitoring; we send anonymised stack traces and request metadata, no submission content.
  • Upstash, Inc. — rate-limiting cache; we send hashed IP / email identifiers, no submission content.

Data may transit through the United States or the European Union as part of standard cloud operations. Our primary data store remains in Mumbai, India.

5. Retention

  • Applications are retained for 3 years from submission, then deleted.
  • Payment records are retained for 7 years to comply with Indian income-tax record-keeping requirements.
  • Issued certificates are retained indefinitely so that the public verification page at /verify/<id> continues to work for the holder's lifetime.
  • Server access logs are retained for 90 days for security and debugging.

You may request earlier deletion at any time (see section 6), subject to our legal obligation to retain payment records.

6. Your rights under the DPDP Act 2023

Indian users have the following rights with respect to their personal data:

  • Right to access — request a copy of the personal data we hold about you.
  • Right to correction — ask us to correct inaccurate or incomplete data.
  • Right to erasure — ask us to delete your personal data, subject to legal retention obligations.
  • Right to grievance redressal — raise a complaint with our grievance officer (section 8).
  • Right to nominate — nominate another person to exercise these rights on your behalf in the event of incapacity or death.

To exercise any of these rights, email support@engitrack.in from the address on your account. We will respond within 30 days.

7. Cookies

We use a minimal set of session cookies required for authentication (set by our auth provider). We do not use third-party tracking cookies, advertising cookies, or social-media pixels. If you disable cookies in your browser, you will not be able to log in.

8. Grievance officer

In accordance with section 10 of the Digital Personal Data Protection Act, 2023, the Engitrack grievance officer can be reached at:

Grievance Officer, Engitrack
Email: grievance@engitrack.in
Address: Koramangala / Tavarekere / SG Palya, Bengaluru, Karnataka 560029, India

We acknowledge complaints within 7 working days and resolve them within 30 days of receipt. Unresolved complaints may be escalated to the Data Protection Board of India once it is operational.

9. Children

Engitrack is intended for users aged 18 and above, primarily Indian college students. If you are under 18, you may use the platform only with verifiable parental consent. We do not knowingly collect personal data from anyone under 13. If we discover that we have collected such data, we will delete it without delay.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified by email to registered users at least 30 days before they take effect. The “Last updated” date at the top reflects the most recent revision.

11. Contact

Questions about this policy? Email support@engitrack.in. For grievances specifically, use grievance@engitrack.in.