Legal & Privacy · Fortified Data Standards

Privacy & Data Protection Policy

Effective Date: August 2026 · Data Handling, Private Disk Security & Privacy Protection.

1. Data Controller & Scope

This Privacy Policy explains how Trendzza collects, uses, stores, and protects your personal and operational data across our academy workspaces, recruiter marketplace, storefront, and global community platforms.

2. Information We Collect

We collect only data necessary for platform operations, academic verification, and billing:

  • Identity & Account Data: Name, verified corporate or student email address, password hash, assigned organization/batch, role permissions.
  • Academic Proofs & Submissions: Task submission links, backlink sheet records, custom table rows, screenshot proof files, and submission version history.
  • Financial & Transaction Metadata: Payment status, billing entity details, Razorpay transaction IDs, recruiter unlock logs, and store order history.
  • Technical Interaction Logs: IP address, device user-agent, session tokens, and activity timestamps evaluated in Indian Standard Time (Asia/Kolkata IST).

3. Private Storage Disk Architecture & Security

ENCRYPTED PRIVATE DISK PROTECTION: All student task submissions, proof-of-work documents, screenshot uploads, and digital storefront files are strictly stored on our isolated private storage disk (`storage/app/private`).

Private assets are NEVER accessible directly via public web URLs or web-scraping bots. Document access is restricted to authorized controller streams that verify authentication, role permissions, and ownership before streaming any file.

4. Recruiter Candidate Contact Protection

Student personal contact details (email, phone number) are masked and unindexed during Tier 0 and Tier 1 stages. Upon reaching Tier 2 (Recruiter Marketplace Level), student profiles become eligible for talent discovery.

  • Candidate contact details are disclosed to corporate recruiters ONLY upon a completed Razorpay unlock transaction.
  • Recruiters receive a single-purpose, non-transferable license to contact the student regarding direct career opportunities.
  • Unauthorised sharing, reselling, or public dissemination of candidate contact details by recruiters is illegal under the Indian Information Technology Act and results in immediate legal action.

5. Payment Security & Gateway Compliance

All checkout processing (student subscriptions, store orders, recruiter wallet top-ups) is handled securely via Razorpay over SSL/TLS encrypted links. Trendzza does not store, process, or transmit raw credit card, debit card, or UPI PIN credentials on local servers.

6. Third-Party Data Sharing & Cookie Policy

We do not sell, rent, or monetize your personal data to third-party advertisers. Data is shared only with essential infrastructure providers (hosting servers, Razorpay payment gateway, transactional email services) strictly for service delivery. Essential session cookies are used for authentication and CSRF security.

7. Data Retention & User Rights

Operational and submission logs are retained for academic record verification and legal compliance. Users have the right to request access to their personal data export or request account closure by submitting a ticket to support.