1Cybrexus Commitment to Data Protection
At Cybrexus Technology LLP (operating as "Cybrexus Technology", "we", "us", or "our"), data privacy, digital integrity, and transparency are fundamental organizational values. We are committed to processing all personal and academic records entrusted to us responsibly, securely, and in strict compliance with applicable statutory laws.
This Privacy Statement outlines how we collect, store, process, and protect personal data when you interact with our online portal, enroll in university internship programs, submit applications, or verify official credentials.
2Scope & Statutory Roles
Under the Digital Personal Data Protection Act, 2023 (DPDP Act):
- Data Fiduciary: Cybrexus Technology acts as the Data Fiduciary determining the purpose and means of processing personal data for student onboarding, technical training, and certificate issuance.
- Data Principal: You (the student, candidate, intern, university faculty coordinator, or visitor) are the Data Principal whose personal data is processed.
This policy covers all digital touchpoints operated by Cybrexus Technology, including our candidate application portal, student dashboard, QR credential verification registries, and academic helpdesk.
3Categories of Personal Data Collected
In adherence to the principle of Data Minimization under Section 6 of the DPDP Act, we collect only the personal information strictly necessary to administer academic internships and maintain verifiable credential registries:
| Data Category | Specific Elements Collected | Collection Stage |
|---|---|---|
| Identity & Contact | Full Name, Personal Email Address, Mobile Number, Gender, Date of Birth. | Application & University Enrollment |
| Academic Details | Enrolled College/University, Degree Program (B.Tech, BCA, MCA, Diploma), Academic Year, Registration/Roll Number. | Candidate Registration & MoU Coordination |
| Internship & Performance | Track Assigned (e.g. Cyber Security, Python/Django, Full-Stack PHP), Daily Attendance, Curriculum Progress, Project Submissions, Evaluation Scores. | Training Execution |
| Credential Registry | Certificate Registration IDs (e.g. INT-2026-063), Offer Letter References, Experience Letters, LOR serials, Issue Dates, Cryptographic QR hashes. |
Document Generation & Public Registry |
| Security & Telemetry | IP Address, Browser Type, Access Timestamps, Failed Login Counters, Session Authentication Tokens. | Automated Security Logging |
4Lawful Grounds & Specific Purposes of Processing
Personal data is processed solely under valid lawful grounds recognized under Section 4 and Section 6 of the DPDP Act 2023:
- Informed Consent: Provided by candidates during self-registration, enrollment, and contact inquiries.
- Performance of Academic Obligations: Delivering structured syllabus training, evaluating project deliverables, and generating final university internship reports (e.g., 90-hour technical coursework).
- Credential Authenticity Verification: Operating a secure digital verification registry allowing employers and universities to confirm certificate validity using cryptographic reference IDs.
- Statutory Cybersecurity Compliance: Monitoring and defending our platform against brute-force intrusion, fraud, and unauthorized document tampering.
5Protection of Students & Minors (Section 9 DPDP Act)
Cybrexus Technology strictly enforces the following commitments:
- Zero Behavioral Tracking: We do not deploy third-party advertising networks (such as Meta Pixel or Google AdSense) on student profile pages.
- Zero Commercial Data Selling: We never sell, lease, or trade student personal records, contact lists, or academic resumes to third-party marketing brokers or recruitment aggregators.
- Educational Purpose Exclusivity: Candidate records are accessed solely by authorized administrative personnel, assigned mentors, and verified academic evaluators.
6Security Measures & CERT-In Log Compliance
We implement technical, organizational, and physical security measures in alignment with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011:
- Encryption: Password hashes are generated using modern cryptographic algorithms (Argon2 / Bcrypt). All web traffic is strictly encrypted in transit via Transport Layer Security (TLS 1.3).
- Role-Based Access Control (RBAC): Administrative access to student data is compartmentalized across Admin, Staff, and Mentor tiers with multi-factor auditability.
- Centralized Audit Logging (CERT-In 180-Day Rule): Pursuant to Indian Computer Emergency Response Team (CERT-In) cyber directives of April 28, 2022, system and access logs are recorded securely for 180 days to support forensic accountability and prevent digital identity theft.
7Disclosure & Sharing of Personal Data
Personal data is shared only under specific, legitimate circumstances:
- Partner Universities & Colleges: Attendance and performance completion records are shared with institutional coordinators under signed institutional Memorandums of Understanding (MoUs).
- Public Credential Verification: When a prospective employer or university scans a certificate QR code or searches an official reference number, only the student's name, track, completion status, and certificate issue date are displayed. Sensitive personal contact details (passwords, payment receipts, private phone numbers) are never exposed.
- Law Enforcement Mandates: Disclosures made strictly in response to lawful summons, court orders, or statutory legal obligations under Indian law.
8Your Rights as a Data Principal (DPDP Act, 2023)
Under Chapter III of the DPDP Act 2023, you have enforceable legal rights regarding your personal data:
- Right to Access: You can view and download a summary of your personal data, certificates, and academic records via the Intern Dashboard.
- Right to Correction & Completion: You may request the update of inaccurate or incomplete profile details by contacting administrative support or editing your profile before certificate issuance.
- Right to Erasure: You may request the deletion of non-statutory personal data when the internship purpose is concluded, subject to statutory CERT-In audit requirements and academic credential retention.
- Right to Nominate: You have the right to nominate an individual to exercise your data rights in the event of incapacity.
- Right to Grievance Redressal: You have the right to readily accessible grievance resolution channels managed by our designated officer.
9Cookies & Digital Identifiers
We deploy strictly necessary cookies for session management and anti-abuse defenses. Optional functional and telemetry cookies are active only with your informed consent in compliance with Section 6 of the DPDP Act.
For a comprehensive, itemized technical disclosure of all browser cookies utilized by this platform, their lifespan, and how you can customize your preferences, please refer to our dedicated:
10Designated Grievance Redressal Officer
In compliance with Sections 12 and 13 of the Digital Personal Data Protection Act, 2023 and Rule 5(9) of the IT (SPDI) Rules, 2011, Cybrexus Technology has appointed a designated Grievance Officer: