1.Who we are
This policy explains how CDAC360 ("CDAC360", "we") collects, uses and protects your personal data when you use the CDAC360 website and services. We act as the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and follow the Information Technology Act, 2000 and its rules.
2.Data we collect
- Account details: name, email address, mobile number, target course and a securely hashed password (never stored in plain text).
- Google / GitHub sign-in: your verified email, name and provider account ID. We never receive your Google or GitHub password.
- Device and security data: a random device identifier stored in your browser, a hashed browser fingerprint, browser/OS name, IP address and sign-in times. This keeps your account personal (device limit and single session) and protects it from misuse.
- Learning data: test attempts, answers, scores, bookmarks, reading progress, reported questions, reviews and session or doubt-call requests (including the questions and phone numbers you submit).
- Payment data: order and payment references, amounts, coupons and status received from Razorpay. Card, UPI and bank details are handled only by Razorpay and never reach us.
- Communications: messages you send through contact or enquiry forms, emails and notifications.
3.How we use your data
- To create and run your account, deliver the plans you buy, show your progress and results, and run leaderboards (where only your first name and last initial are shown).
- To prevent account sharing, fraud and piracy – including stamping your name, email and mobile number as a watermark on study material you open.
- To schedule mock interviews, mentoring sessions and doubt calls, and to contact you about them by email, phone, WhatsApp or in-site notifications.
- To process payments, refunds, invoices and receipts, and to meet legal, tax and accounting obligations.
- To answer your questions, improve our content and fix problems.
4.Consent and legal basis
We process your personal data on the basis of the consent you give when you create an account or submit a form, and for legitimate uses permitted by the DPDP Act, such as providing a service you asked for or complying with law. You can withdraw consent at any time by writing to us; this will not affect processing already done, but we may no longer be able to provide services that depend on it.
7.Data retention
We keep your data while your account is active and for as long as needed to provide services, resolve disputes and meet legal, tax and accounting requirements (payment records are typically kept for up to 8 years). Security logs are kept for a limited period. When data is no longer needed, we delete or anonymise it.
8.Security
We use HTTPS encryption, hashed passwords, signed and HttpOnly session cookies, device-bound sessions, rate limiting and access controls. No system is perfectly secure, so please use a strong, unique password and sign out on shared computers. If we become aware of a personal data breach affecting you, we will notify you and the authorities as required by law.
9.Your rights
Under the DPDP Act you can:
- Ask for a summary of the personal data we process about you.
- Correct or update your data (name and course from your dashboard; email or mobile through support, after verification).
- Ask us to erase your data, subject to legal retention requirements.
- Withdraw consent, nominate a person to exercise your rights in case of death or incapacity, and raise a grievance.
Write to support@cdac360.in from your registered email. We respond within 30 days.
10.Children
The Platform is meant for graduates preparing for C-DAC programmes. If you are under 18, please use it only with verifiable consent from a parent or legal guardian. We do not knowingly track or target advertising at children.
11.Where data is stored
Our service providers may store or process data on servers outside India. Where this happens, we rely on providers with strong security practices and transfer data only as permitted under Indian law.
12.Grievance Officer
For any privacy question or complaint, contact our Grievance Officer:
Email: support@cdac360.in
We acknowledge grievances within 48 hours and resolve them within 30 days.
If you are not satisfied with our response, you may approach the Data Protection Board of India.
13.Changes to this policy
We may update this policy from time to time. The "Last updated" date shows the current version, and we will notify you of significant changes on the Platform or by email.
Questions about this policy?
Write to us and we'll reply within 2 working days.