Legal

CruxBit Internships (the “Platform”, “we”, “us” or “our”) is operated by CruxBit, based in India. This Privacy Policy explains what personal information we collect when you use internships.cruxbit.tech, why we collect it, how we use and share it, and the rights and choices you have.

By creating an account or using the Platform, you agree to the practices described in this policy. If you do not agree, please do not use the Platform.

We collect the following categories of information:

• Account information. Your name, email address and password (stored only as a secure hash) when you register. If you sign in with Google, we receive your name, email address and profile picture from Google, subject to your Google account settings.
• Profile information. Details you choose to add to your profile, such as a headline, location, bio, phone number, profile photo, and links to your GitHub, LinkedIn or personal website.
• Enrolment and submission data. The projects you enrol in, your task-board activity, and the work you submit for review — including links to your code repository, demo video and posts.
• Payment and billing information. When you pay an enrolment fee, the payment is processed by our payment gateway, Razorpay. We receive and store the transaction reference, amount, currency and payment status, and we generate tax invoices in your name. We never receive or store your card number, UPI PIN, or banking credentials.
• Payout information. If you participate in our referral programme, the payout details you provide (such as bank account, UPI ID, PayPal or Payoneer details) so we can pay your commissions.
• Communications. Messages you send us through the contact form, support tickets, project requests, and guidance conversations.
• Usage data. Standard technical data collected automatically — pages visited, approximate location derived from an anonymised IP address, browser and device type — via cookies and analytics described below.

• To create and operate your account and provide the services you enrol in.
• To issue and maintain your verifiable documents — your internship offer letter and, on passing review, your certificate of completion.
• To process payments, issue invoices and pay referral commissions.
• To review your project submissions and provide mentorship and support.
• To send you service communications about your account, enrolments, submissions and payments. These are not marketing messages and cannot be opted out of while you hold an account.
• To understand how the Platform is used and improve it (aggregate analytics).
• To detect, prevent and investigate fraud, abuse and security incidents.
• To comply with legal obligations, including tax and accounting requirements.

Offer letters and certificates issued by the Platform are designed to be publicly verifiable. Anyone who has a document’s serial number can look it up on our verification page and see the details needed to confirm it is genuine — your name, the project, and the relevant dates. This disclosure is an intended feature of the document: it is what makes your certificate worth sharing. If you want a document removed from public verification, contact us at the address below.

We use a small number of cookies:

• Essential cookies. Secure, HTTP-only session cookies that keep you signed in. The Platform does not work without them.
• Referral cookie. If you arrive through a referral link, we store the referral code so the referrer can be credited if you enrol.
• Analytics. We use Google Analytics 4 with IP anonymisation to understand aggregate usage of the Platform. You can block analytics cookies in your browser without affecting the Platform’s functionality.

We do not use advertising cookies and we do not show third-party advertising.

We do not sell, rent or trade your personal information. We share it only in these circumstances:

• Service providers. Vendors who process data on our behalf under contract — payment processing (Razorpay), cloud hosting and file storage (Amazon Web Services), analytics (Google), and email delivery. They may use your data only to provide their service to us.
• Public verification. The certificate details described in the section above, to anyone holding the document’s serial number.
• Legal requirements. Where disclosure is required by law, regulation, legal process or an enforceable government request, or to protect the rights, safety and property of our users or the Platform.
• Business transfers. If we are involved in a merger, acquisition or sale of assets, your information may be transferred as part of that transaction, subject to this policy.

Enrolment fees are one-time payments processed securely by Razorpay. Prices and any applicable GST are shown before you pay, and a tax invoice is available in your dashboard after payment.

All fees paid on the Platform are final and non-refundable. Because enrolment gives you immediate access to the complete project specification and design documents (digital content delivered instantly), we do not offer refunds or cancellations once an enrolment is complete — including where a submission does not pass review. The only exceptions are duplicate charges and failed transactions, as described in our Refund Policy.

We keep your personal information for as long as your account is active or as needed to provide the Platform’s services — including keeping issued certificates verifiable. Payment records and tax invoices are retained for the periods required by Indian tax and company law. When information is no longer needed, we delete it or anonymise it.

We protect your information with industry-standard measures: all traffic is encrypted in transit (HTTPS), passwords are stored only as secure hashes, session cookies are HTTP-only, and payment card data never touches our servers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security — if we learn of a breach affecting your data, we will notify you and the relevant authorities as required by law.

Subject to applicable law — including the Digital Personal Data Protection Act, 2023 — you have the right to:

• Access a copy of the personal information we hold about you.
• Correct or update your information — most of it can be edited directly in your dashboard profile.
• Request deletion of your account and personal information, subject to records we must keep by law (such as tax invoices).
• Withdraw consent where processing is based on consent.
• Raise a grievance about how your data is handled.

To exercise any of these rights, email us at contact@cruxbit.tech. We will respond within the timelines required by applicable law. If you are not satisfied with our response, you may escalate to the Data Protection Board of India.

The Platform is intended for students and early-career builders. It is not directed to children under 13, and we do not knowingly collect personal information from them. If you are under 18, you may use the Platform only with the consent and involvement of a parent or legal guardian. If you believe a child has provided us personal information without such consent, contact us and we will delete it.

We are based in India and process data on servers that may be located in India or other jurisdictions where our service providers operate. By using the Platform you understand that your information may be transferred to and processed in these locations, protected by the safeguards described in this policy.

We may update this policy from time to time. When we do, we will revise the “Last updated” date at the top of this page, and for material changes we will notify you by email or a notice on the Platform before the change takes effect. Your continued use of the Platform after a change means you accept the updated policy.

For any questions, requests or grievances about this policy or your personal information, write to our grievance team at contact@cruxbit.tech. We acknowledge grievances promptly and aim to resolve them within the timelines prescribed under applicable Indian law.