1. Who We Are
CodeZoner is a virtual internship platform operated by Sameer Ray, India. We are accessible at codezoner.in. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our platform.
2. Information We Collect
We collect the following categories of personal data:
- → Account Information: Full name, email address, college name, degree, graduation year, and password (hashed)
- → Profile Data: LinkedIn profile URL, GitHub profile URL, phone number (optional)
- → Internship Data: Program enrolled, project selected, submission links (GitHub repo, demo video URL), written description
- → Payment Data: Transaction ID, payment status, order ID. We do NOT store card numbers or UPI IDs — payments are processed by Easebuzz
- → Usage Data: Login timestamps, page visits, XP activity
- → Communications: Emails you send to our support address
3. How We Use Your Information
- → To create and manage your account
- → To enroll you in internship programs and track your progress
- → To review your project submission and communicate approval or feedback
- → To process certificate payments and generate your digital certificate
- → To send transactional emails (registration confirmation, OTP, offer letter, certificate)
- → To display XP points, badges, and leaderboard rankings on your profile
- → To prevent fraud, abuse, and violations of our Terms of Service
- → To improve platform features based on aggregate usage analytics
4. Information Sharing
We do not sell your personal data. We share data only in the following limited circumstances:
- → Easebuzz: Payment processing. Your name, email, and transaction data are shared with Easebuzz to complete certificate payments
- → Resend: Transactional email delivery (offer letters, OTPs, certificates)
- → Neon (PostgreSQL): Our database provider stores your account and enrollment data
- → Legal Obligations: We may disclose data if required by Indian law, court order, or government authority
Your certificate (Certificate ID, name, internship title) is publicly verifiable at codezoner.in/verify. Only what is on the certificate itself is public.
5. Data Retention
- → Account data is retained for as long as your account is active
- → Certificate records are retained indefinitely for public verification purposes
- → If you request account deletion, we will remove your personal data within 30 days, except certificate records required for verification integrity
- → Payment records are retained for 7 years as required under Indian financial regulations
6. Data Security
We implement the following security measures:
- → Passwords are hashed using bcrypt before storage
- → All data in transit is encrypted via TLS (HTTPS)
- → Authentication uses signed JWT tokens with server-side validation
- → Payment data is handled exclusively by Easebuzz, an RBI-authorised payment aggregator
- → Database access is restricted to application servers only
⚠️ No system is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security of your data transmitted over the internet.
7. Your Rights
Under the Digital Personal Data Protection Act 2023 (DPDPA) and applicable Indian law, you have the right to:
- → Access: Request a copy of the personal data we hold about you
- → Correction: Request correction of inaccurate data
- → Erasure: Request deletion of your account and personal data (subject to legal retention requirements)
- → Withdraw Consent: Withdraw consent for data processing at any time by contacting us
- → Grievance Redressal: Lodge a complaint with our Grievance Officer (see Section 8)
To exercise any of these rights, email us at privacy@codezoner.in. We will respond within 30 days.
8. Grievance Officer
As required under the Information Technology Act 2000 and Rules 2011, we have appointed a Grievance Officer:
Name: Sameer Ray
Role: Grievance Officer, CodeZoner
Email: grievance@codezoner.in
Response time: Within 30 days of receiving your complaint
9. Contact
For general privacy questions or data requests: