Privacy Policy

1. Who We Are (Data Fiduciary)

DBERT Labs ("we", "us", "our") is an MSME-registered entity based at Noida, Uttar Pradesh 201301, India, and operates the internship portal at internship.dbert.online. For the purposes of the DPDP Act, we act as the Data Fiduciary for the personal data you provide. You can contact us at careers@dbert.info.

2. Information We Collect

• Identity & contact data: your name, email address and phone number.
• Academic & profile data: education details, chosen domain, LinkedIn and GitHub profile links, portfolio/company website (if provided), and your answers to application and intent questions (such as why you wish to join and your learning preferences).
• Public profile data: where you share a GitHub link, we may fetch limited information from your public GitHub profile to provide context to mentors during the interview/review step.
• Payment-related data: your UPI payment reference or a payment screenshot used to verify a Deposit or Fee. We do not collect or store card numbers, CVV, net-banking credentials, or bank account details.
• Account & usage data: login credentials (passwords are stored only in hashed form), application status, interview answers, and records of your interactions with the Platform.
• Technical & device data: IP address, browser/device characteristics, an approximate device/visit profile (for fraud-prevention and analytics), cookies and similar identifiers.
• Communication preferences: your newsletter opt-in choice and consent records.

3. How We Use Your Information

• to create and manage your account and verify your identity;
• to process and evaluate your application, interview and enrolment;
• to deliver the internship/program, assign mentors, and issue certificates, offer letters and recommendation letters;
• to verify and reconcile UPI payments and process eligible refunds;
• to send you transactional communications (application status, reminders, account and payment updates);
• to send newsletters and offers only where you have opted in;
• to maintain security, prevent fraud and abuse, and debug and improve the Platform; and
• to comply with legal obligations and enforce our Terms & Conditions.

4. Legal Basis & Consent

We process your personal data on the basis of your consent (which you give when you sign up, apply, and opt in to communications) and for the "legitimate uses" permitted under the DPDP Act, such as providing a service you have requested. You may withdraw your consent at any time (see "Your Rights" below); withdrawal does not affect processing already carried out, and may limit our ability to provide certain services.

5. Newsletter & Communications

Transactional emails and notifications (for example, application status and payment confirmations) are part of the service and are sent to all registered users. Marketing newsletters are sent only if you opt in, and every such email includes an unsubscribe link. You can also unsubscribe at any time via the unsubscribe page or by emailing us. Unsubscribing from marketing does not stop essential transactional messages.

6. Cookies, Analytics & Notifications

• Essential cookies: we use session cookies to keep you logged in and to secure the Platform.
• Analytics: we use Google Analytics (GA4) to understand how the Platform is used so we can improve it.
• Push notifications: if you opt in, we use OneSignal to send browser/web push notifications. You can disable these in your browser or device settings at any time.

7. How We Share Your Data

We do not sell your personal data. We share it only as needed:

• Mentors and hiring/channel partners — relevant profile and performance information to deliver mentorship and placement.
• Service providers (Data Processors) — for example Google (analytics), Amazon Web Services / our email provider (email delivery), and OneSignal (push notifications), who process data on our behalf under appropriate safeguards.
• Payment ecosystem — UPI transactions are completed through your chosen UPI app and the banking network; we receive only the reference/proof you provide.
• Legal and safety — where required by law, court order, or to protect our rights, users, or the public.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes set out above, to comply with legal, tax and accounting obligations, and to resolve disputes. When data is no longer required, we delete or anonymise it. You may request earlier deletion as described below, subject to records we are required by law to keep.

9. Data Security

We implement reasonable security practices and procedures as required under the IT Act and its rules, including HTTPS encryption in transit, hashed storage of passwords, access controls, and secure handling of payment proofs. No method of transmission or storage is fully secure, but we work to protect your data and to notify affected users and authorities of any significant personal-data breach as required by law.

10. Your Rights as a Data Principal

Under the DPDP Act, you have the right to:

• access a summary of the personal data we hold about you and how it is processed;
• request correction, completion, updating, or erasure of your personal data;
• withdraw consent and request deletion of your account;
• nominate another individual to exercise your rights in case of death or incapacity; and
• raise a grievance with us, and escalate to the Data Protection Board of India if unresolved.

To exercise any of these rights, email careers@dbert.info. We may need to verify your identity before acting on a request.

11. Children's Privacy

Our Platform is intended for users aged 18 and above, or 16 and above with verifiable parental or guardian consent. We do not knowingly collect personal data from children below this age without the consent of a parent or lawful guardian, and we do not undertake tracking, behavioural monitoring, or targeted advertising directed at children. If you believe a child has provided us data without appropriate consent, contact us and we will delete it.

12. Grievance & Data Protection Officer

For any privacy concern, data request, or complaint, you can contact our Grievance Officer / point of contact for data protection:

• Name: Abhinav Sharma
• Designation: Grievance Officer, DBERT Labs
• Address: Noida, Uttar Pradesh 201301, India
• Email: careers@dbert.info

We aim to acknowledge requests within 48 hours and to respond within the timelines prescribed under applicable law.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the latest version. Material changes will be notified through the Platform or by email where appropriate. Please review this page periodically.

14. Contact

Privacy questions or data requests? Email careers@dbert.info.