Your details,
kept simple.

1. About this policy

1.1 This Privacy Policy explains how Devoic SkillTech & Consultancy Private Limited (CIN U70200MP2025PTC076786), registered in Satna, Madhya Pradesh and operating from Bhopal, Madhya Pradesh ("Company", "we", "us"), collects, uses, stores, shares and protects personal data through the IDK website, community, Events and Programs.

1.2 We are the "Data Fiduciary" for your personal data under the Digital Personal Data Protection Act, 2023 ("DPDP Act"). This Policy is also published under the Information Technology Act, 2000 and the rules made under it.

1.3 It applies to everyone who uses the Website or our Services. It forms part of our Terms of Use, and words defined there have the same meaning here.

2. What we collect

2.1 Join forms: name, email, city or campus, and the note you write.

2.2 Talent listing (Hire): name, email, the profile you write, your role, skills, location, links (such as LinkedIn, GitHub or a portfolio) and photo if you add one.

2.3 Project brief: the brief, your name, role, company and email.

2.4 Host, partner and other forms: name, email and the details the form asks for.

2.5 Bootcamp registration: name, email, mobile number, college, year of study, city, and a record of payments (amount, date, payment reference).

2.6 Payments: the payment gateway shares the payment status, amount, payment ID and method type with us. We never receive your full card number, CVV, UPI PIN or bank password.

2.7 When you write to us: the contents of your email or message.

2.8 Technical data: our hosting and database providers keep standard server logs (such as IP address, browser type and time of request) for security and to keep the service running.

3. What we do not collect

3.1 We do not run analytics, advertising or tracking scripts, and we do not use tracking cookies.

3.2 We do not collect sensitive data such as financial account details, health information, biometrics, caste, religion or government ID numbers, and we ask you not to put them in any form.

4. Why we use it, and on what basis

4.1 We process your personal data on the basis of your consent, which you give when you submit a form, and for legitimate uses allowed by the DPDP Act, such as keeping records the law requires.

4.2 We use it to: reply to you; review and publish listings and briefs you ask us to publish; register you for Programs and Events; confirm seats, record payments and tell you what is due; send joining details, schedules and certificates; run the community; prevent fraud and abuse; and meet our legal, tax and accounting duties.

4.3 We do not use your data for any purpose you have not been told about. If we want to use it for something new, we will ask you first.

4.4 We will only send you updates about other IDK Programs or Events if you have joined the community or asked to hear from us. You can opt out at any time.

5. What is public

5.1 Talent listings and project briefs appear on the Website only after our team approves them, and only with the details meant for the listing (such as name, role, skills, links and photo).

5.2 Your email address and mobile number are never shown publicly. Join requests and Bootcamp registrations are never public.

5.3 If you appear in a project showcase or Event photo, we show your name and work with credit to you. You can ask us to remove it.

6. Who we share it with

6.1 We do not sell, rent or trade your personal data.

6.2 We share it only with service providers ("Data Processors") who help us run IDK, under contracts or terms that require them to protect it:

6.3 Convex, our hosted database, which stores form submissions and Bootcamp records.

6.4 The payment gateway (an RBI-authorised payment aggregator, such as Razorpay or Cashfree), which processes payments.

6.5 Website hosting (such as Cloudflare or Vercel), which serves the Website.

6.6 Google Fonts and our image hosting (Cloudinary), which load fonts and images. Your browser shares your IP address with them when it loads these files.

6.7 Offlyne, where Event registration happens. When you register there, Offlyne's privacy policy applies. We may share attendee details with the host of an Event you register for.

6.8 Instagram and YouTube, only when you choose to play a video, and email and messaging providers we use to reply to you.

6.9 We may also share data when the law requires it, for example with a court, regulator or law enforcement agency acting under a valid legal order, or to protect the rights, safety or property of our users, the public or the Company.

6.10 If the Company is merged, acquired or restructured, your data may move to the new entity, which will be bound by this Policy.

7. Where it is stored

7.1 Your data is stored electronically on servers run by our service providers. Some of these servers may be outside India. Where data is transferred outside India, we do so only as the DPDP Act permits.

8. How long we keep it

8.1 We keep your personal data for as long as it is needed for the purposes in this Policy: running IDK, the Programs you take part in, your certificates and alumni records, and our relationship with you.

8.2 Payment, invoice and enrolment records are kept for as long as Indian tax, company and accounting law requires, and longer where we need them to verify a payment, a certificate or a past enrolment, or to resolve a dispute.

8.3 If you withdraw consent or ask us to delete your data, we delete it, except records we are required to keep by law or need to keep for the reasons above. We tell you what we have kept and why.

9. How we protect it

9.1 Only authorised IDK admins can read form submissions, from a password-protected dashboard. Each admin has only the access their role needs, and admin actions are logged.

9.2 Passwords are stored as salted hashes. All data travels over encrypted HTTPS connections. Repeated failed sign-ins lock the account.

9.3 No system is perfectly secure. If a personal data breach happens, we will inform affected users and the Data Protection Board of India as the DPDP Act requires.

10. Your rights

10.1 Under the DPDP Act you have the right to:

10.2 Access: get a summary of the personal data we hold about you and how we use it.

10.3 Correction and update: have inaccurate or incomplete data corrected.

10.4 Erasure: have your data deleted when it is no longer needed, unless we must keep it by law.

10.5 Withdraw consent at any time. This does not affect what we did before you withdrew it. If you withdraw consent for a Program you are enrolled in, we may not be able to continue providing it.

10.6 Grievance redressal: complain to our Grievance Officer, and if you are not satisfied, to the Data Protection Board of India.

10.7 Nominate another person to exercise these rights if you die or become unable to.

10.8 To use any of these rights, write to support@idk.social from the email address you used with us. We may ask you to confirm your identity. We will respond within 30 days.

11. Children

11.1 Our Programs are meant for college students. If you are under 18, you may register only with the consent of a parent or legal guardian, and we may ask for proof of that consent before processing your data.

11.2 We do not knowingly track or send targeted advertising to anyone under 18.

11.3 If you believe a child has given us data without a guardian's consent, write to us and we will delete it.

12. Cookies and browser storage

12.1 The public Website does not set any cookies of its own or store anything in your browser.

12.2 The admin dashboard stores a sign-in token in the browser of signed-in admins only.

12.3 Third-party services such as embedded videos may set their own cookies when you use them.

13. Changes to this Policy

13.1 We may update this Policy from time to time. The "Updated" date at the top shows the latest version. If a change significantly affects how we use your data, we will tell you by email or on the Website before it takes effect.

14. Grievance Officer

14.1 Grievance Officer: Shivam Singh, Devoic SkillTech & Consultancy Private Limited. Email: grievance@idk.social.

14.2 We acknowledge every complaint within 24 hours and aim to resolve it within 15 days of receiving it.

14.3 For general help, write to support@idk.social first. Use the Grievance Officer for anything that has not been resolved there, or for any complaint about your personal data.

14.4 If your complaint is not resolved, you can approach the Data Protection Board of India under the DPDP Act.