Our Privacy Commitment
PortalForInterns.com ("we", "us", or "our") is built on the foundation of trust, zero-resume friction, and total data transparency. We do not sell your personal data or phone numbers to third-party telemarketers. This Privacy Policy details how we collect, use, store, process, and safeguard your information.
1. Information We Collect
We collect information you provide directly to us when creating an account, building a standardized profile, posting an opportunity, or communicating with support:
🎓 A. Student & Candidate Information
- Account Credentials: Full name, verified email address, phone number, and encrypted password.
- Standardized Academic Profile: College/university name, degree program, field of study, graduation year, state, and city.
- Practical Portfolio: Technical/soft skills, project summaries, GitHub profile URL, LinkedIn profile URL, and portfolio website link.
- Application Submissions: Cover notes, application status history, offer letters, and self-reported placement feedback.
🏢 B. Employer & Recruiter Information
- Company Profile: Organization legal name, brand name, corporate website URL, headquarters city, industry category, and company bio.
- Authorized Recruiter Data: Contact person name, official corporate email, and phone number.
- Verification & Billing: Business identification (GSTIN/PAN where applicable for invoicing), internship job descriptions, stipend details, and location requirements.
💳 C. Payment & Transaction Information
When you purchase a paid upgrade (such as Student Pro or Employer Candidate Unlock Token Packs), transaction processing is handled directly by Razorpay Payments Private Limited. We receive confirmation metadata (such as Razorpay Order ID, Payment ID, timestamp, and amount paid). We never collect, process, or store sensitive payment credentials (e.g. credit card numbers, CVVs, expiry dates, net banking passwords, or UPI PINs) on our servers.
2. Purpose of Data Processing & Legal Basis
We process your personal data under lawful grounds specified in the DPDP Act 2023 and GDPR:
- Service Delivery: To display your standardized candidate profile to employers when you apply for an internship, and to notify you of application updates, interviews, and offer letters.
- Authentication & Security: To verify accounts, prevent fraudulent job listings, combat spam, and maintain platform integrity.
- Billing & Invoicing: To provision student subscriptions, employer candidate unlock token packs, and issue GST-compliant tax invoices.
- Customer Support: To investigate support tickets, resolve billing queries, and fulfill grievance requests.
- Platform Optimization: To monitor system uptime, analyze aggregate search trends, and enhance user experience.
3. How We Share Your Information
We strictly limit disclosure of your information to the following parties:
- Hiring Companies: When a student submits an application to a specific internship, their standardized profile (name, education, contact info, skills, project links) is shared exclusively with that recruiting organization.
- Payment Aggregator: Transaction details are shared securely with Razorpay PA to authenticate, process, and settle subscription and token pack purchases.
- Statutory Authorities: We may disclose data if required by law, subpoena, court order, or official request by Indian law enforcement agencies.
4. Cookies & Tracking Technologies
We use essential session cookies to maintain your login state, secure CSRF tokens, and save UI preferences. For full details on our cookie categories and to customize your consent settings, please consult our dedicated Cookie Policy.
5. Data Security & Storage Standards
We implement rigorous technical, organizational, and physical security safeguards to protect your personal information:
- End-to-End Encryption: 256-bit SSL/TLS encryption for all data in transit.
- Password Protection: Strong bcrypt one-way cryptographic hashing for account passwords.
- Access Controls: Role-based access restrictions limiting administrative access strictly to authorized compliance personnel.
- Secure Data Centers: Primary servers located in secure Indian cloud regions complying with ISO/IEC 27001 standards.
6. Your Privacy Rights (DPDP Act 2023 & GDPR)
You have comprehensive rights regarding your personal data:
7. Data Retention & Statutory Legal Compliance
We retain personal data only for as long as required to fulfill the purposes for which it was collected or to comply with statutory legal, tax, and cyber security obligations:
Upon account deletion, all personal identifiers (full name, phone number, resume credentials, bio, portfolio links, and active application slots) are immediately and permanently erased from public search and candidate directories.
Under Section 36 of the Central Goods and Services Tax (CGST) Act 2017, registered businesses are mandated to retain accounting ledgers, invoices, and payment order audit records for a minimum statutory period of 72 months (6 years) from the due date of furnishing annual returns. Financial billing details and issued GST Rule 46 tax invoices are preserved strictly for tax authorities and cannot be erased prematurely.
In accordance with the Information Technology Act 2000 and CERT-In Cyber Security Directions (Direction No. 20(3)/2022-CERT-In), service providers must maintain secure audit logs containing technical forensic identifiers (timestamp, registration trace, deletion timestamp, IP address, and cryptographic SHA-256 integrity checksum) for a mandatory minimum period of 180 days. These encrypted compliance records are held strictly in cold storage to respond to lawful statutory notices or official inquiries from Cyber Crime / Law Enforcement agencies and are automatically purged upon expiry of the statutory retention window.
8. Data Protection & Grievance Contact
For any privacy inquiries, data deletion requests, or DPDP Act compliance questions, contact our Data Protection Officer: