Privacy Policy

1. Definitions (DPDP Act Alignment)

• Personal Data: Any data about an identifiable individual.
• Data Principal: Student or company representative using the Platform.
• Data Fiduciary: UniIntern, determining purpose and means of processing.
• Processing: Collection, storage, usage, sharing, or deletion of data.

2. Categories of Personal Data Collected

Students

• Name, email, phone number
• Educational and professional details
• Resume/profile information
• Login credentials
• Referral information
• Platform interaction data

Companies

• Company details
• Authorized personnel information
• Course and instructor details
• Business contact information

3. Financial Information

Payments are processed via Stripe. The Platform:

• Does not store card or banking details
• Uses PCI-DSS compliant payment processors
• Receives only transaction confirmation data

Financial data handling complies with IT Act SPDI Rules.

4. Purpose of Data Processing

Personal data is processed only for lawful purposes including:

• Account creation and authentication
• Subscription management
• Outreach facilitation between students and companies
• Course hosting and discovery
• Referral discount validation
• Fraud prevention
• Legal compliance
• Service improvement

We process data under consent and legitimate business use, as permitted under the DPDP Act.

5. Outreach-Based Membership Logic

Certain memberships remain valid until outreach from a specified number of companies. Users acknowledge:

• Outreach determination relies on platform records.
• Platform methodology shall be final and binding.
• No guarantee of employment, internship, or selection is provided.

6. Data Sharing

We may share data with:

• Companies and students for platform functionality
• Payment processors
• Cloud hosting providers
• Analytics vendors
• Government or regulatory authorities when legally required

We do not sell personal data.

7. Cross-Border Data Transfers

Data may be processed or stored outside India using secure global infrastructure providers compliant with applicable Indian law and DPDP requirements. Users consent to such transfers.

8. Data Retention

Data is retained only for:

• Active membership duration
• Outreach verification
• Legal, accounting, or dispute resolution obligations

Data is deleted or anonymized when no longer necessary.

9. Rights of Data Principals (DPDP Act)

Users have the right to:

• Access personal data
• Request correction or erasure
• Withdraw consent
• Nominate another person for data rights exercise
• File grievance

Requests may be sent to the Grievance Officer (see Section 10).

10. Grievance Officer (Mandatory Under IT Rules)

Email: shesparksteckwork@gmail.com

Complaints will be addressed within statutory timelines.

11. Security Practices

We implement reasonable security safeguards including:

• Encryption
• Access control
• Secure hosting
• Payment tokenization

As required under Rule 8 of SPDI Rules.

12. Limitation of Liability

The Platform acts solely as a technology intermediary facilitating interaction between students and companies. The Platform:

• Does not guarantee outreach outcomes
• Does not guarantee course quality
• Is not responsible for hiring decisions
• Is not liable for company conduct or student performance

13. Policy Updates

Continued use after updates constitutes acceptance.