Privacy Policy

What we collect

• When you apply — name, email, phone, college, year of study, and your written answer about why you want to join.
• When you enrol — the same profile fields plus your degree. These print on your certificate and appear on its public verification page.
• As you do the work — quiz attempts and scores, what you submit each week, and the reviewer’s decision and notes.
• As you use the site — pages visited, clicks, approximate location derived from IP, device and browser, and recordings of how you move through pages.

Session recordings mask everything you type. We do not record the contents of form fields, free-text answers, or submitted links.

Why we collect it

• To review your application and run the program.
• To grade quizzes, review submissions, and decide when a week is complete.
• To issue certificates and let anyone verify them.
• To email you about your application, submission decisions, and weeks you have left open.
• To find where students get stuck and fix it. That is the only reason we collect analytics.

We do not sell your data and we do not use it for advertising.

Who else processes it

Each service below receives only what it needs to do its job.

• PostHog — product analytics. Receives your activity and an internal account identifier, never your name or email.
• Microsoft Clarity — session recordings and heatmaps, with typed input masked.
• Brevo — sends our email. Receives your name and email address.
• Google — if you sign in with Google, Google confirms your identity to us. We receive your name, email, and whether that email is verified.
• Supabase and Vercel — database and application hosting.

Some of these process data on servers outside India. We send each one the minimum it needs.

Analytics, and your choice

On your first visit we show a notice about analytics. You can decline, and we will stop collecting analytics and stop recording sessions. Declining changes nothing about your application, your coursework, or your certificate.

Your choice is stored in your browser. Clearing site data brings the notice back.

What is public, and what is not

Anyone holding a certificate serial can verify it. The verification page shows the holder’s name, college, degree, cohort, and issue date. Nothing else is public.

Applications, quiz scores, submissions, and reviewer notes are never public.

How long we keep it

Applications we do not accept are kept for one year, so we recognise you if you apply to a later cohort. Student records and coursework are kept while the program runs and for two years after.

Certificate records are kept indefinitely. A credential that stops verifying is worthless — that permanence is the point of the registry.

Analytics data follows each provider’s own retention schedule.

Your rights

Under the DPDP Act you can ask us to:

• Tell you what personal data we hold about you.
• Correct anything wrong or out of date.
• Delete your data.
• Withdraw consent for analytics at any time.

Email contact@interncell.com and we will respond within 30 days.

One limit, stated plainly: if you ask for deletion after a certificate has been issued, we will remove your account and coursework, but the certificate record stays in the public registry — otherwise the credential you earned would stop verifying. Tell us if you would rather we revoked it instead.

Security

Traffic is encrypted in transit. Access to student records is limited to program administrators, and every review decision is written to an audit log. No system is perfect; if we discover a breach affecting your data, we will tell you.

Children

The program is for undergraduate students. We do not knowingly collect data from anyone under 18. If you believe a minor has applied, email us and we will remove the record.

Changes

If we change what we collect, we update this page and the date at the top.

Contact

Questions, corrections, or complaints: contact@interncell.com.