Legal
Privacy Policy
This policy explains how IndusMinds ("IndusMinds", "we", "us"), a micro enterprise registered in India (Udyam Registration No. UDYAM-GJ-24-0236920) and based in Vadodara, Gujarat, handles personal data when you use indusminds.tech (the "Platform"). We process personal data in line with India's Digital Personal Data Protection Act, 2023.
1. Who can use IndusMinds
The Platform is for students aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a person under 18 has created an account, contact us and we will delete it.
2. What we collect
Account information
When you sign in with Google, we receive your name, email address and a unique account identifier from Google (through Firebase Authentication). We do not receive or store your Google password.
Profile information you choose to add
For example your bio, job title, location, LinkedIn and website links, and elevator pitch. All of these are optional.
Your work on the Platform
The company, role and project you choose; your daily submissions (written approach and answers); GitHub repository links you provide, and the code in those repositories, which we read to review your work; questions you ask your AI team and their answers; and the scores and feedback generated for you.
Usage and technical data
Pages you visit and actions you take on the Platform, linked to your account after you sign in (product analytics); error reports and, for a sample of sessions, a recording of how the page behaved, with all text and images hidden (error monitoring); and basic device and browser information. We store a sign-in token and your theme preference in your browser's local storage.
3. How we use it
- To run the Platform: sign you in, show your tasks and save your progress.
- To review your work: your submissions, linked code and questions are processed by AI models to generate feedback, scores and mentor replies.
- To build your Readiness Report from your reviewed work.
- To fix bugs, keep the Platform secure and understand how it is used so we can improve it.
- To contact you about your account or important changes to the Platform.
We do not sell your personal data, and we do not use it for advertising.
4. AI processing
Your submissions, linked code, questions and relevant project context are sent to Google's Gemini models through Google Cloud (Vertex AI) to generate reviews and mentor replies. Feedback is generated automatically and can be wrong; it is not an assessment by a human or an official certification.
5. Who we share it with
We share personal data only with service providers that help us run the Platform, and only for that purpose:
- Google: sign-in (Firebase Authentication), application hosting (Cloud Run) and AI processing (Vertex AI).
- Supabase: database hosting.
- Upstash: job queue for review processing.
- Vercel: website hosting.
- PostHog: product analytics.
- Sentry: error monitoring.
- GitHub: we fetch repositories you link, through GitHub's API.
We may also disclose data where required by law or to protect the rights and safety of our users or the Platform.
Some of these providers process data on servers outside India. When we use them, we choose established providers with their own security and privacy commitments.
6. Your Readiness Report
Your Readiness Report is private by default. It becomes visible to someone else only when you share its link. Reports are marked so search engines do not index them. Anyone you give the link to can see the information on it, including your name, scores and reviewer feedback.
7. How long we keep data
We keep your data while your account is active. If you ask us to delete your account, we delete your personal data within 30 days, except where we must keep something to meet a legal obligation.
8. Your rights
You can ask us to:
- give you a summary of the personal data we hold about you and how we use it;
- correct or update inaccurate data;
- delete your data and account;
- withdraw consent, which may mean you can no longer use the Platform.
You may also nominate another person to exercise these rights on your behalf in case of death or incapacity. To make a request, email contact@indusminds.tech from the email address on your account. We respond within 30 days.
9. Security
Data is encrypted in transit (HTTPS), we limit access to personal data to the people who need it to run the Platform, and sign-in is handled by Google. No system is perfectly secure; if a breach affects your personal data, we will notify you and the authorities as required by law.
10. Grievances and contact
For questions or complaints about this policy or your data, contact:
Arun Rajput, Founder, IndusMinds, Vadodara, Gujarat, India
contact@indusminds.tech
If you are not satisfied with our response, you may approach the Data Protection Board of India.
11. Changes to this policy
We will update this page when our practices change and revise the effective date above. If a change is significant, we will tell you on the Platform or by email.