Data Protection & Student Privacy

Privacy Policy

Your trust is our highest priority. This policy outlines how we collect, use, store, and protect your personal information, task submissions, and academic records.

Last Updated: September 2026
Back to Home

What We Collect

Name, email, college, phone, task GitHub/deployment links, and verification UTR. Zero bank passwords or card PINs.

How We Use It

Issuing Offer Letters, ID Cards, reviewing project tasks, verifying QR certificates, and essential service updates.

How We Protect It

Encrypted PostgreSQL database, Row-Level Security, signed storage URLs, and a strict zero-data-selling guarantee.

1. Student Data We Collect (மாணவர் தரவு சேகரிப்பு)

Detailed breakdown of information gathered when you use Skyrovix

We only collect information that is strictly necessary to deliver high-quality internship training, evaluate your submissions, issue accredited certificates, and protect account security.

Personal & Academic Details

  • Full Name & Email Address: Used for account creation, communication, and certificate issuance.
  • Phone Number: For urgent support updates and verification purposes.
  • College / University Name & Degree: To personalize your Offer Letter, Student ID card, and internship documents.
  • Year of Study: To cater appropriate difficulty levels in training.
  • Profile Photo (Optional): Displayed on your digital Student ID card and internship dashboard.

Academic Submissions & Technical Logs

  • Task Submissions: GitHub repositories, hosted demo URLs, architecture diagrams, and project code uploaded for mentor review.
  • Course Performance: Quiz responses, assessment scores, and completion percentage.
  • Payment References: UPI Transaction / UTR reference number and payment confirmation screenshots.
  • Security Logs: IP address, device/browser details, and login timestamps to detect fraudulent activity.
What We NEVER Collect: Skyrovix strictly never requests, processes, or stores your banking passwords, UPI MPIN, debit/credit card CVVs, or biometric credentials. All payment confirmations are verified via standard manual UTR reconciliation.

2. How We Use Student Data (மாணவர் தரவு பயன்பாடு)

The legitimate educational and operational purposes for which your data is processed

Your personal data is used solely to facilitate your internship and educational journey on Skyrovix. Specifically, your information enables us to:

🎓 Digital Document Generation

Instantly generate personalized Offer Letters, digital Student ID Cards, and accredited completion certificates bearing your name, Intern ID, and college.

🔍 Mentor Review & Feedback

Provide mentors with access to your project code and live URLs to grade submissions, deliver constructive feedback, and approve sequential stages.

🛡️ Public Credential Verification

Maintain the public verification portal (/verify-certificate) allowing future employers and university officials to authenticate your credential via unique ID and cryptographic QR code.

📩 Transactional Communications

Send important notifications regarding task approvals, revisions required, payment confirmations, and direct certificate PDF dispatch via email.

3. Data Storage & Cloud Protection (தரவு சேமிப்பு & பாதுகாப்பு)

Architecture and safeguards protecting student databases and files

We implement enterprise-grade security protocols to ensure that student records are safeguarded against unauthorized access, loss, or alteration:

Row-Level Security (RLS)

Our Supabase PostgreSQL databases enforce strict RLS policies. Students can only query their own application and submission records.

Encrypted Cloud Storage

Uploaded profile pictures, payment proofs, and project archives are stored in isolated encrypted cloud buckets accessible only via signed URLs.

Zero Data Selling

We maintain an absolute prohibition on selling, renting, or monetizing student contact data with third-party advertisers or marketing brokers.

Role-Based Access Control (RBAC):

Access to admin verification queues, task evaluations, and student records is strictly restricted to verified administrators and mentors via cryptographically secure JWT authentication.

4. Data Retention & Your Rights (உங்கள் உரிமைகள்)

How long records are retained and how you can manage your data

You maintain sovereign rights over your personal data under applicable Indian information technology and digital privacy regulations:

  • Certificate Verification Retention: Certificate records (Certificate ID, Intern ID, Full Name, Domain, and Completion Date) are preserved indefinitely so that your academic credentials can always be validated by prospective employers.
  • Right to Access & Rectify: You can request a copy of the personal data we hold or request corrections to incorrect college or contact details by contacting support.
  • Right to Erasure (Account Deletion): You may request permanent deletion of your account and uploaded submission files at any time by emailing us. Please note that deleting your account revokes access to the student dashboard.

5. Cookies & Session Management

How cookies are used to maintain your login session

Skyrovix uses only strictly essential session cookies and local storage tokens required for secure authentication, maintaining login state across navigation, and preserving UI preferences (such as dark mode). We do not deploy third-party advertising trackers or invasive behavioral cookies.

Privacy Inquiries & Grievance Redressal

If you have any questions, concerns, or requests regarding how your student data is collected, used, or stored, our privacy desk responds within 24 to 48 hours.