Data Protection & Privacy Governance
Privacy Policy
At SWIZOSOFT INSTITUTE OF TECHNOLOGY (A Unit of SWIZOSOFT (OPC) PRIVATE LIMITED, GSTIN: 29ABOCS7724B1Z1), we are committed to safeguarding the privacy, confidentiality, and security of all personal data collected from students, controllers, and portal visitors. This Privacy Policy outlines how your personal information is collected, processed, stored, and protected across our application.
1. Information We Collect
We collect personal information necessary to manage your academic track, verify course eligibility, process payments, and issue official digital credentials:
- Identity & Contact Details: Full Name, University Seat Number (USN), Institutional Email Address, Mobile Phone Number, and Gender.
- Academic & Project Submissions: Course enrollments, attendance logs, project proposal PDFs, weekly report submissions, and marks evaluations.
- Financial & Payment References: Payment screenshot uploads, UTR/Transaction Reference Numbers, and order tokens issued by payment processing partners.
- System & Audit Logs: IP address, device verification logs, biometric WebAuthn credentials (for authorized admin actions), and portal access timestamps.
2. How We Use Your Information
- To verify student eligibility, activate course tracks, and manage academic progression.
- To evaluate project deliverables and issue official, verifiable digital Certificates of Completion, Tax Invoices, and Enrollment Letters.
- To send critical transactional notifications, academic circulars, and course progress updates via email.
- To maintain institutional audit compliance and prevent fraudulent activity.
3. Data Security & Storage Architecture
We employ industry-standard technical and organizational security measures to protect your personal data. All user passwords are encrypted using secure cryptographic hashing algorithms. State-changing HTTP requests are protected by Cross-Site Request Forgery (CSRF) tokens. Documents and uploads are stored within access-controlled directories.
4. Third-Party Sharing & Commercial Policy
Zero Commercial Sharing: We do NOT sell, trade, rent, or lease your personal information to third parties for marketing purposes. Personal data is shared strictly with:
- Razorpay Payment Gateway: For secure processing of online payment transactions.
- Verification Authorities: When an employer or institution submits a valid Certificate ID / USN on our public verification engine (`/verify`).
5. Data Retention & Policy Updates
Student academic records, certification identifiers, and financial transaction histories are retained in our secure repository to maintain long-term digital certificate verification. SWIZOSOFT INSTITUTE OF TECHNOLOGY reserves the right to update this Privacy Policy to reflect operational, legal, or regulatory changes.