Privacy Policy

2. Purpose and Legal Basis for Processing

Under the DPDP Act, 2023, we process your personal data only for specific, clear purposes. The list below describes each purpose and its legal basis:

• Account creation and management — Legal basis: Contract (necessary to provide the service)
• Delivering platform features (questions, content, progress tracking) — Legal basis: Contract
• Sending service notifications (security alerts, account updates) — Legal basis: Contract / Legitimate interest
• Sending newsletters or product updates — Legal basis: Consent (you may withdraw at any time)
• Analytics and platform improvement — Legal basis: Legitimate interest (data anonymized/aggregated where possible)
• Fraud detection and security monitoring — Legal basis: Legitimate interest / Legal obligation
• Complying with legal obligations (court orders, government requests) — Legal basis: Legal obligation

We will not process your personal data for any purpose not listed above without first obtaining your explicit consent.

3. Consent

Where we rely on consent as the legal basis for processing:

• We will present a clear, specific, and plain-language consent request before collecting such data
• Consent will never be bundled with acceptance of these Terms — it will be a separate, voluntary action
• You may withdraw your consent at any time by contacting support@codinzhub.com or using the opt-out mechanism provided (e.g., unsubscribe link in emails)
• Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal
• Refusing or withdrawing consent for non-essential processing will not affect your access to core platform features

4. How We Share Your Information

CodinzHub does not sell your personal data. We share data only in these limited circumstances:

5. International Data Transfers

CodinzHub is operated from India. If any of our service providers are located outside India (for example, cloud or analytics providers in the United States or European Union), your data may be transferred internationally.

We ensure such transfers occur only when:

• The recipient country provides an adequate level of data protection, OR
• Appropriate contractual safeguards (such as Standard Contractual Clauses) are in place with the recipient

By using our platform, you acknowledge that your data may be processed outside India under these safeguards.

6. Data Retention

• Active account data: retained for the duration of your account
• User-generated content: retained until you delete it or your account is closed
• Log and analytics data: retained for up to 24 months, then deleted or anonymized
• Legal/compliance records: retained for up to 7 years where required by law
• After account deletion: personal data is removed from active systems within 30 days. Residual copies in backups are overwritten within 90 days.

7. Cookies & Tracking Technologies

For users in jurisdictions requiring consent for non-essential cookies (including under the DPDP Rules, 2025), we will seek your consent via a cookie notice banner before setting analytics or preference cookies.

8. Your Rights as a Data Principal

Under the DPDP Act, 2023, you have the following rights as a Data Principal:

• Right to Access: Request a summary of personal data we hold about you and the purposes for which it is being processed
• Right to Correction: Request correction of inaccurate, incomplete, or outdated personal data
• Right to Erasure: Request deletion of your personal data where it is no longer necessary for the stated purpose, subject to legal retention obligations
• Right to Grievance Redressal: Lodge a complaint with our Grievance Officer (see Section 11) and receive a response within the prescribed timeframe
• Right to Nominate: Nominate another individual to exercise your data rights on your behalf in the event of your death or incapacity
• Right to Withdraw Consent: Withdraw consent for any consent-based processing at any time, without affecting prior processing

To exercise any of these rights, contact support@codinzhub.com with subject: “Data Rights Request — [Your Username]”. We will respond within 30 days.

9. Children's Data

Under the Digital Personal Data Protection Act, 2023 (DPDP Act), a “child” is defined as any individual under the age of 18. CodinzHub takes its obligations regarding children's data seriously.

For users under 18:

• We require verifiable parental or guardian consent before processing the personal data of any user under 18
• We do not process children's data in a manner that is detrimental to their well-being
• We do not engage in targeted advertising directed at children
• We do not track or monitor children's behaviour in ways not necessary to provide the platform service

If we discover that a user under 18 has registered without verifiable parental consent, we will immediately suspend the account and delete associated personal data. Parents or guardians who believe their child has registered without consent should contact us at support@codinzhub.com.

Note: CodinzHub does not apply the US COPPA 13-year threshold. As an Indian platform, the DPDP Act's definition of a child (under 18) governs our data practices.

10. Data Breach Notification

In the event of a personal data breach that is likely to result in harm to Data Principals, CodinzHub will:

• Notify the Data Protection Board of India as required under the DPDP Act and Rules, 2025
• Notify affected users via email at the earliest opportunity, describing the nature of the breach, data affected, and remedial steps taken
• Maintain an internal breach log and conduct a post-incident review

We implement appropriate technical safeguards to prevent breaches, including encrypted password storage, HTTPS/TLS for all data in transit, access controls, and regular security reviews.

11. Grievance Officer

In accordance with the DPDP Act, 2023, CodinzHub has designated a Grievance Officer to address data-related complaints:

If your grievance is not resolved to your satisfaction, you may escalate to the Data Protection Board of India once it is constituted and operational under the DPDP Rules, 2025.

12. Changes to This Privacy Policy

We may update this Privacy Policy as our practices evolve or as required by law. Material changes will be communicated via email and a notice on the platform. The updated policy takes effect from the date stated at the top. Continued use of the platform constitutes acceptance of the revised policy.

13. Contact — Privacy