Privacy Policy
Last updated September 8, 2026. Written in plain language first; where a legal term matters, it appears beside the plain version.
What we collect
Account details you provide: name (as on college records), email, mobile, college, university, course, branch, semester, session, registration number, city/state, chosen track and start date. Training artifacts you submit (code links, reports, build logs, quiz answers, payment UTR + optional screenshot link). Routine service data (login sessions, seat/payment status, review outcomes).
We do not collect Aadhaar, college ID scans, photos, marksheets, or resumes in the pilot. We do not buy data, run advertising profiles, or track you across other sites.
Why we collect it (purpose + consent)
To run your cohort: confirm seats, reconcile UTR payments, review submissions, issue offer letters and training-completion certificates, run the public verification registry, and report progress to your own college T&P on request.
Consent is taken once at signup and again at seat request (version v1-2026-09, timestamped). Withdrawing consent stops new processing but cannot delete already-issued registry entries that third parties rely on to detect forgery — we will explain this before you withdraw.
What is public by design
The verification registry intentionally publishes, per issued certificate: candidate name, college, program, cohort, verified hours, dates, grade band, and mentor names. This publication is the anti-fraud mechanism — a certificate nobody can check is worthless.
If you require a non-public credential for safety reasons, write to the registry desk before enrollment and we will arrange it.
How data is used and shared
Your data runs the cohort: mentor reviews, attendance, logbooks, certificates, and T&P reporting for your own college. We share roster standing with your college T&P cell and nothing with anyone else, except as required by law.
Retention and deletion
Issued certificate records are retained for seven years to support future verification. Non-registry data (messages, drafts, rejected payments) is deleted within 12 months of cohort close unless law requires longer. You may request correction at any time and deletion of non-registry data after your cohort closes by writing to contact@cannyintern.in — we reply within 90 days.
Withdraw consent anytime from the same inbox; withdrawing stops new processing from that date.
Grievance + children
Grievance contact: contact@cannyintern.in with subject “Privacy grievance”. We acknowledge within 5 working days and resolve within 90 days.
If you are under 18, enroll only via a parent/guardian account. We run no behavioural tracking or targeted ads for any student account.