Privacy Policy

1. Who We Are

Workora is an educational internship platform offering task-based virtual learning programs. This Privacy Policy details how we collect, process, secure, and store your personal information when using our services.

2. Information We Collect

We collect only the information necessary to provide and secure your internship experience:

• Registration details: Name, email address, and mobile number.
• Profile details: College name, technical skills (provided voluntarily by the student).
• Internship activity: Selected domain, milestones completed, task submissions, and project links.
• Payment tracking: Razorpay order and transaction references for certificate evaluations.
• Technical logs: IP address, browser type, and access timestamps (collected automatically via secure web servers).
• Support and consent records: Messages you send to support and the recorded time of registration agreement.

3. How We Use Your Data

We process your personal information for these functional purposes:

• Creating, managing, and authenticating your student dashboard profile.
• Generating and formatting your virtual Offer Letters and verified completion Certificates.
• Sending service emails, including welcome notices, task decisions, support replies, eligible task reminders, and certificate payment reminders. Reminders stop when their applicable task or payment conditions are met.
• Auditing and verifying transaction status via payment gateways to prevent payment fraud.
• Analyzing aggregate statistics (total registrations, completion ratios) to optimize curriculum structures.
• Sending internship invitations only to recipients for whom permission has been recorded or supplied. Invitation emails include an unsubscribe link; opting out does not cancel your account.

4. Security Architecture

We implement standard backend security protocols to protect your credentials and data records:

• SSL/TLS encryption for all network traffic in transit.
• Signed access tokens and protected server-side authentication controls for dashboard endpoints.
• Server-side storage of integration secrets and parameterised database access.
• We make every effort to employ standard safeguards, but absolute security cannot be guaranteed.

Student login currently uses email plus mobile number; it does not verify ownership by sending a one-time code. Keep access to your email and phone secure and contact support if you suspect unauthorised access. Do not include passwords, OTPs, card details, or sensitive personal data in task submissions.

5. Data Sharing

We do not share student profiles except with services required to operate the platform:

• Email Delivery Services (Brevo): To transmit system messages and notifications.
• Infrastructure Services (Hosting): For server operations.
• Razorpay: To create and verify certificate payment orders and process approved refunds. Razorpay handles payment instrument details under its own privacy policy; Workora stores order/payment references and verification status, not your card PIN or OTP.
• Legal Authorities: Only when legally required under local court orders.

Reviewers access the project links you submit; automated tools may inspect those links and assist preliminary review. Administrators make the approval or rejection decision. Third-party sites such as GitHub, LinkedIn, or file hosts apply their own privacy rules when you publish or share there. Share only the task material required, with the intended access permissions.

Hosting, email, or payment providers may process information outside India, subject to their service arrangements and applicable law. We do not claim that every provider stores all information in India.

6. Public Credential Verification

A person who has your Workora ID or credential QR link can look up your name, internship field, ID, program dates, enrolment/certificate status, and assessed task statuses and grades. Certificate availability is checked against the program's approval, payment, and date rules. Public verification does not publish your email, mobile number, submitted project links, support messages, or private review feedback. Share your credential link only with intended recipients.

7. Data Retention

We retain information needed to administer your program, support credential verification, resolve disputes, and meet applicable record-keeping obligations:

• Profiles: Our program retention target is the program period plus 12 months. We do not currently claim automatic deletion on that date. Contact us for an account-closure or deletion request; necessary credential, transaction, dispute, and legally required records may remain.
• Certificate verification: Limited records are maintained for ongoing credential verification. A deletion request is reviewed against the purpose of verification and applicable law, rather than rejected automatically because a certificate was issued.
• Security and audit logs: Retention depends on security, investigation, and applicable legal requirements. We do not promise an automatic 90-day purge.

8. Access, Correction, and Deletion

Students hold the following rights regarding their data:

• Access: Request details of information stored in your student profile.
• Correction: Modify college details or skills directly via the dashboard profile editor.
• Deletion: Request account closure or deletion of personal information, subject to necessary verification and records we are legally required or otherwise permitted to retain.

To request deletion, email us at nicedev328@gmail.com.

Use your registered email and Intern ID if available. We may need proportionate information to confirm your authority before disclosing, correcting, or deleting a record. Do not send government identity documents unless support explains a specific need and a suitable secure method. If a request cannot be fulfilled in full, you may ask for the reason and raise a complaint. Nothing in this policy limits rights available under applicable law.

9. Cookies and Browser Storage

Essential browser storage supports sign-in, theme preferences, and registration handoff. Workora does not include Google Analytics 4 tracking, analytics consent prompts, or Google Analytics registration events on the website. Security and server access logs, aggregate account counts, and hosting-provider operations remain separate from GA4.

If you previously allowed the short-lived Google Analytics integration, its old browser cookies or saved preference may remain until they expire or you clear site data. The current website does not load or use that integration. Clearing all site data also removes your saved theme and sign-in state.

10. Young Participants

Workora's minimum participation age is 13. Participants aged 13–17 must involve a parent or legal guardian and contact support before registering to confirm consent arrangements. The registration checkbox does not establish verified guardian consent. A guardian can contact support about a child's information or suspected registration without permission.

11. Contact and Policy Changes

For inquiries regarding data protection, email us at nicedev328@gmail.com.

We date material changes on this page. A change to this policy does not retroactively remove an existing privacy right. Please contact us with a concern or correction rather than sending sensitive information in a public post.