Privacy Notice

Version 1.1 · Effective 27 August 2026 · Issued under the Digital Personal Data Protection Act, 2023

This notice explains what personal data Sanrad Infotech Pvt. Ltd. collects through the Sanrad Internships portal, why we collect it, how long we keep it, and what you can ask us to do about it. Sanrad Infotech Pvt. Ltd. is the Data Fiduciary for this data.

We ask for your consent before you create an account. You can withdraw it at any time — see Your rights below.

1. Who to contact

Our Grievance Officer is the Chief Executive Officer of Sanrad Infotech Pvt. Ltd.. For any question, request or grievance about your personal data, contact them at privacy@sanradinfotech.com. We acknowledge every request within 7 days and give a decision within 30 days. If you are not satisfied with how we handle it, you have the right to complain to the Data Protection Board of India.

2. Who may use this portal

This portal is for applicants aged 18 or over. We do not knowingly collect the personal data of children. You are asked to confirm your age when you create an account. If we learn that an account belongs to someone under 18, we will erase it.

3. What we collect and why

CategoryWhat it includesWhy we need it
Identity and contact details Full name, username, primary email address, university email address (optional), phone number. To create and secure your account, verify that you control the email address and phone number you gave us, and contact you about your application and internship.
Application details Internship track, expected start date, duration, and full-time availability. To assess whether we can offer you an internship of the kind and length you are asking for.
Academic record University and college name, current degree, semesters completed, per-semester course names and marks or CGPA, and details of any prior internships. To assess your application on merit.
Referee details Name, designation, institution, email address and phone number of the referee you nominate. To verify your application. You are responsible for telling your referee that you have given us their details.
Identity documents (KYC) Aadhaar card, PAN card, university identity card, and — for the professional track — a letter from your college. To confirm you are who you say you are before granting access to our systems and premises. Required by our internal onboarding controls.
Onboarding and internship records Signed policy agreements, offer letter, completion certificate and any additional documents issued to you, internship start date and duration, and any extension request you make. To administer your internship and to evidence what you agreed to and what we issued you.
Attendance records Daily sign-in and sign-out times, and whether a session was remote or onsite. To administer your internship and to support any certificate or letter we issue about it.
Endpoint agent data If the Sanrad Endpoint Agent is installed on a machine you use for the internship, it reports a periodic heartbeat and captures periodic screenshots while you are signed in. To protect company and client systems and information you are given access to. Screenshots are only captured while you are signed in to attendance, and never outside it.
Technical and security records IP addresses and timestamps for sign-in, policy signature, and administrative actions; the IP address, timestamp and browser user-agent of anyone who opens a document link you share. To keep the portal secure, to give you a record of who opened documents you shared, and to maintain the audit trail we are expected to keep.

We use this data only for the purposes listed above. We do not sell it, and we do not use it for advertising or automated decision-making.

4. Who else sees it

Your data is seen by Sanrad Infotech Pvt. Ltd. staff who need it to assess your application and administer your internship, and their access is governed by role-based permissions and recorded in our audit log. We use an email delivery provider to send you portal email. We do not otherwise share your data with third parties, except where the law requires it.

If you create a link to share one of your documents with a university or employer, that document becomes visible to whoever holds the link, for as long as you choose. You control those links and can revoke them at any time, and you can see every access to them.

5. How long we keep it

DataRetention
Applications that are rejected Deleted automatically 24 hours after the rejection decision.
Applications and internship records Kept for as long as you hold an account with us, so that we can answer verification requests from universities and employers, and so that you can download your documents at any time. Erased when you ask us to erase them.
One-time passcodes (OTPs) Deleted automatically 30 days after they are issued.
Shared document links and their access history Deleted when the link is deleted with your account. Links themselves stop working on the expiry date you chose, or as soon as you revoke them.
Administrative audit records Retained as a record of who did what in the portal. These record the acting administrator and the affected person's name, not your application content.

6. How we protect it

All traffic to this portal is encrypted in transit with TLS. Passwords are stored only as bcrypt hashes and are never recoverable. Sign-in can be protected with two-factor authentication, and administrative access is limited by granular permissions and recorded in an audit log. Access to your documents requires an authenticated session; document files are never publicly reachable. If a personal data breach occurs, we will notify the Data Protection Board of India and affected individuals as the Act requires.

7. Your rights

Access
Download a complete copy of the personal data we hold about you, at any time, from the Privacy & Data section of your dashboard.
Correction
Ask us to correct anything that is inaccurate or incomplete. Email us and we will correct it, or tell you why we cannot.
Erasure
Ask us to erase your account and personal data. You can raise this request from your dashboard. We will confirm the outcome by email. Where we must keep something (for example, a record that an administrative action took place), we will tell you what and why.
How quickly we respond
We acknowledge any request or grievance within 7 days and give you a decision within 30 days of receiving it. If we need longer we will tell you why, and when to expect an answer.
Withdraw consent
Withdraw your consent to our processing at any time. Because we cannot run an application or an internship without this data, withdrawing consent means ending your application or internship, and is handled as an erasure request.
Grievance redressal
Raise a grievance with us at privacy@sanradinfotech.com. It reaches our Grievance Officer, the Chief Executive Officer, directly. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
Nomination
Nominate another person to exercise these rights on your behalf if you are unable to do so. Contact privacy@sanradinfotech.com to record a nomination.

8. Your duties

The Act asks you not to impersonate anyone else, not to suppress material information when providing it, and not to raise false or frivolous grievances. Please give us accurate information and keep it up to date.

9. Changes to this notice

If we change this notice we will publish a new version here. We keep a record of which version you consented to, so there is always an accurate record of what you agreed to.