Privacy Policy

• When you apply — name, email, phone, college, year of study, and your written answer about why you want to join.
• When you enrol — the same profile fields plus your degree. These print on your certificate and appear on its public verification page.
• As you do the work — quiz attempts and scores, what you submit each week, and the reviewer’s decision and notes.
• If you publish a portfolio — the link you choose and the short intro you write. Both are optional and you can take the page down at any time.
• As you use the site — pages visited, clicks, approximate location derived from IP, device and browser, and recordings of how you move through pages.

Session recordings mask everything you type. We do not record the contents of form fields, free-text answers, or submitted links.

• To review your application and run the program.
• To grade quizzes, review submissions, and decide when a week is complete.
• To issue certificates and let anyone verify them.
• To email you about your application, submission decisions, and weeks you have left open.
• To find where students get stuck and fix it. That is the only reason we collect analytics.

We do not sell your data and we do not use it for advertising.

Each service below receives only what it needs to do its job.

• PostHog — product analytics. Receives your activity and an internal account identifier, never your name or email.
• Microsoft Clarity — session recordings and heatmaps, with typed input masked.
• Brevo — sends our email. Receives your name and email address.
• Google — signing in with Google is the only way into the program, so Google confirms your identity to us every time. We receive your name, email, and whether that email is verified. We never receive your password.
• Supabase and Vercel — database and application hosting.

Some of these process data on servers outside India. We send each one the minimum it needs.

On your first visit we show a notice about analytics. You can decline, and we will stop collecting analytics and stop recording sessions. Declining changes nothing about your application, your coursework, or your certificate.

Your choice is stored in your browser. Clearing site data brings the notice back.

Anyone holding a certificate serial can verify it. The verification page shows the holder’s name, college, degree, cohort, and issue date, plus the links submitted for the final week. We ask search engines not to index those pages, so finishing the program does not make you findable by name.

Your portfolio page is the one thing you choose to make public. It lives at /p/<your-link>, exists only while you have it switched on, and shows exactly this: your name, college, degree, year of study, cohort, the short intro you write, the week number and title of every submission a reviewer has accepted, the links you submitted for those weeks, the date each was accepted, and your certificate serial once one is issued.

It does not show your email, your phone number, your quiz scores, reviewer notes, or anything that was rejected or is still pending. Portfolio pages are listed in our sitemap and can be indexed by search engines and shared as a link preview while they are on. Turn the page off from your dashboard and it stops resolving; your link stays reserved so turning it back on restores the same URL. Pages already saved by a search engine or someone’s screenshot are outside our control.

Applications, quiz scores, submissions, and reviewer notes are never public.

Applications we do not accept are kept for one year, so we recognise you if you apply to a later cohort. Student records and coursework are kept while the program runs and for two years after.

Certificate records are kept indefinitely. A credential that stops verifying is worthless — that permanence is the point of the registry.

Analytics data follows each provider’s own retention schedule.

Under the DPDP Act you can ask us to:

• Tell you what personal data we hold about you.
• Correct anything wrong or out of date.
• Delete your data.
• Withdraw consent for analytics at any time.

Email contact@interncell.com and we will respond within 30 days.

One limit, stated plainly: if you ask for deletion after a certificate has been issued, we will remove your account and coursework, but the certificate record stays in the public registry — otherwise the credential you earned would stop verifying. Tell us if you would rather we revoked it instead.

Traffic is encrypted in transit. Access to student records is limited to program administrators, and every review decision is written to an audit log. No system is perfect; if we discover a breach affecting your data, we will tell you.

The program is for undergraduate students. We do not knowingly collect data from anyone under 18. If you believe a minor has applied, email us and we will remove the record.

If we change what we collect, we update this page and the date at the top.

Questions, corrections, or complaints: contact@interncell.com.