Privacy Policy

1. Introduction

This Privacy Policy explains how MyProBuddy Ventures Private Limited ("MyProBuddy", "we", "us") collects, uses, shares, protects, retains, and transfers Personal Data when you use www.myprobuddy.com and related services (the "Website"). By using the Website, you consent to this Policy.

We act as a Data Fiduciary (under the DPDP Act) and, where applicable, as a Controller (under GDPR/UK GDPR) for the processing described here.

2. Key Definitions

• Personal Data: Any data about an individual who is identifiable by or in relation to such data (DPDP Act).
• Processing: Any operation performed on Personal Data (collect, store, use, disclose, etc.).
• Data Principal / User: The individual to whom the Personal Data relates.
• Data Processor / Data Service Provider: A third party that processes data on our behalf.
• Children's Data: Personal Data of a child (under 18 years in India, unless Applicable Law specifies otherwise).

3. What We Collect

Depending on how you use the Website, we may process:

• Identity & Contact: name, email, phone, address, organization, role/title.
• Education/Professional: resume/CV details, institution, skills, LinkedIn/GitHub (if you share).
• Transaction/Program Data: applications, forms, program participation, feedback.
• Technical: IP address, device IDs, browser type, pages viewed, timestamps, cookies.
• Communications: emails, support requests, call/meeting notes.
• Payment (if applicable): masked card/bank references via payment gateways (we do not store full card data).

4. Sources of Data

• Directly from you (forms, applications, emails, uploads).
• Automatically via cookies/SDKs and analytics.
• From third parties you authorize (universities, incubators, investors, references).

5. Why We Use Personal Data (Purposes & Legal Bases)

We process data to:

• Provide services/Website (contract/legitimate interests).
• Program operations (screening, mentorship, evaluations) (consent/contract/legitimate interests).
• Communications & support (legitimate interests/consent).
• Security, fraud prevention, abuse detection (legitimate interests/legal obligation).
• Compliance & record-keeping (legal obligation).
• Marketing (optional) (consent; you can withdraw anytime).

6. Children's Data

We do not knowingly collect Personal Data from children without verifiable parental/guardian consent as required by law. We do not engage in tracking, profiling, or targeted advertising to children.

7. Cookies & Similar Technologies

We use cookies for essential site functions, analytics, and (only if you opt-in) marketing. See Section III – Cookie Policy for details and how to manage preferences.

8. Sharing & Processors

We may share Personal Data with:

• Vendors/Processors: hosting, cloud, email, analytics, customer support, payment gateways — under written contracts with confidentiality, security, sub-processor, and audit obligations.
• Affiliates/Advisors: only as needed and under confidentiality.
• Regulators/Law enforcement: where legally required.

We do not sell Personal Data.

9. International Transfers

We may transfer Personal Data outside India. Transfers will not be made to any country restricted by the Government of India under the DPDP Act Section 16. For cross-border transfers, we implement appropriate safeguards (contractual clauses, technical/organisational measures). Where GDPR applies, we use recognised transfer mechanisms (e.g., SCCs).

10. Data Retention

We retain Personal Data only as long as necessary for the purposes above or to comply with law (e.g., tax/accounting). Typical periods:

• Account/engagement records: for the relationship + up to 7 years thereafter.
• Program/application records: up to 7 years from closure.
• Communications/support: up to 3 years from last contact.

Where the law prescribes longer/shorter periods, we follow the law. After retention, data is securely deleted or anonymized.

11. Your Rights

Subject to Applicable Laws, you may:

• Access/Know what Personal Data we hold.
• Correct/Update inaccurate data.
• Delete/Erase data (subject to legal retention).
• Withdraw consent (for consent-based processing).
• Opt-out of marketing communications.
• Raise a grievance/complaint to our Grievance Officer; escalate to the Data Protection Board of India if unsatisfied.

Where GDPR applies, you may also have restriction, objection, and portability rights, and complain to your local Data Protection Authority. To exercise rights, email privacy@myprobuddy.com or contact the Grievance Officer below. We will respond without undue delay and within legal timelines.

12. Grievance Redressal (DPDP)

Process: Send your complaint with sufficient detail (your identity, description of issue, relevant dates, and any supporting material). We will acknowledge and address it without undue delay and within timelines prescribed by law. If unresolved, you may escalate to the Data Protection Board of India under the DPDP Act.

13. Updates to this Policy

We may update this Policy from time to time. Material changes will be posted on this page with a new "Last Updated" date. Continued use of the Website after changes means you accept the revised Policy.

14. Contact