Privacy Policy

1. INTRODUCTION AND SCOPE OF THIS PRIVACY POLICY

Techsnap Agentic AI Private Limited, a company incorporated and registered under the Companies Act, 2013 of India and conducting business under the trade name "Techsnap" (hereinafter collectively referred to as "Techsnap," "the Company," "we," "us," or "our"), is fully committed to protecting and respecting the privacy, confidentiality, and personal data of every individual who accesses or uses our platform. This Privacy Policy ("Policy") constitutes a comprehensive, legally binding statement of how we collect, use, store, process, share, retain, protect, and ultimately delete the personal data and personal information of users of our services. This Policy applies in its entirety to all users who interact with the Company's digital products and services, including but not limited to: (a) the website accessible at https://techsnap.in and all subdomains thereof; (b) the Progressive Web Application (PWA) accessible at https://app.techsnap.in; (c) the Android mobile application published on the Google Play Store under the developer account "TechSnap"; (d) the iOS mobile application published on the Apple App Store; and (e) any other digital interface, API, or service operated by Techsnap Agentic AI Private Limited (collectively referred to herein as the "Platform"). The terms "Services" and "Platform" shall be used interchangeably throughout this Policy to refer to all of the foregoing. By accessing the Platform, installing the mobile application on your device, creating a user account, or otherwise engaging with any of our Services, you acknowledge that you have read, understood, and freely consent to the data practices described in this Privacy Policy, including but not limited to the collection, processing, and storage of your personal information as set forth herein. If you do not agree to any provision of this Policy, you must immediately cease using the Platform and, where applicable, uninstall the mobile application from your device. Your continued use of the Platform following the publication of any amended version of this Policy shall constitute your acceptance of such amendments. This Policy is intended to satisfy the disclosure and transparency requirements of multiple applicable legal frameworks, including the Digital Personal Data Protection Act, 2023 (India), the Information Technology Act, 2000 and its subordinate rules and regulations, the Consumer Protection Act, 2019 and the Consumer Protection (E-Commerce) Rules, 2020, the Google Play Developer Program Policies and Data Safety requirements, the Apple App Store Review Guidelines and App Privacy Details requirements, and, to the extent applicable, international standards including the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the United Kingdom GDPR, the Children's Online Privacy Protection Act (COPPA) of the United States, and other internationally recognised data protection best practices.

2. IDENTITY OF THE DATA FIDUCIARY AND REGISTERED ENTITY

For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act") and all other applicable data protection laws, the Data Fiduciary responsible for the collection and processing of personal data through the Platform is: Techsnap Agentic AI Private Limited, a private limited company incorporated under the Companies Act, 2013, with its principal place of business in Hyderabad, Telangana, India. The Company operates the Techsnap platform under the brand name "Techsnap" and the domain "techsnap.in," and is also referred to commercially as "SnapTheTech" in certain historical contexts; however, all data processing activities are conducted by and on behalf of Techsnap Agentic AI Private Limited. As a Data Fiduciary, Techsnap determines the purpose and means of processing personal data it collects directly from users who register on the Platform or interact with its services independently. In certain circumstances where Techsnap processes personal data provided by and on behalf of educational institutions, universities, or corporate training partners pursuant to formal Data Processing Agreements or Memoranda of Understanding, Techsnap acts as a Data Processor and processes such data only in accordance with the instructions and for the purposes specified by the relevant institution acting as the Data Fiduciary or Data Controller in that context. In all circumstances, Techsnap remains bound by its obligations under applicable data protection law regardless of the capacity in which it acts. Users may direct all privacy-related enquiries, requests to exercise data rights, withdrawal of consent, or grievances to the Company's designated Grievance Officer and Data Protection contact, details of which are set out in Section 28 of this Policy.

3. DEFINITIONS AND INTERPRETATIONS

For the purpose of this Privacy Policy, the following terms shall have the meanings ascribed to them below:

• "Personal Data" or "Personal Information" refers to any data about an individual who is identifiable by or in relation to such data, including but not limited to name, email address, mobile number, date of birth, location data, device identifiers, photographs, biometric data, educational records, and any other information that, alone or in combination with other data, can identify a natural person.
• "Sensitive Personal Data or Information" (as defined under Rule 3 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011) includes passwords, financial information such as bank account details, payment instrument details, physical and mental health conditions, sexual orientation, medical records and history, and biometric information.
• "Data Principal" refers to the individual to whom the personal data relates, as defined under the Digital Personal Data Protection Act, 2023.
• "Data Fiduciary" refers to any person or entity that, alone or in conjunction with other persons, determines the purpose and means of processing personal data, as defined under the DPDP Act, 2023.
• "Data Processor" refers to any person who processes personal data on behalf of and under the instructions of a Data Fiduciary.
• "Processing" refers to any operation or set of operations performed on personal data, whether by automated means or otherwise, including collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, restriction, erasure, or destruction.
• "Consent" refers to any freely given, specific, informed, and unambiguous indication of the Data Principal's wishes by which the Data Principal, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to them.
• "Data Breach" refers to any accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored, or otherwise processed by the Company.
• "Platform" refers collectively to the website at techsnap.in, the Progressive Web App, the Android application, and the iOS application operated by Techsnap Agentic AI Private Limited.
• "User" or "you" or "your" refers to any individual, whether a student, educator, institution representative, visitor, or other person, who accesses or uses the Platform in any capacity.
• "Techsnap," "we," "us," or "our" refers to Techsnap Agentic AI Private Limited.
• "AI Features" refers to any artificial intelligence, machine learning, natural language processing, or algorithmic recommendation tools embedded within the Platform.
• "User Content" refers to any data, information, text, images, code, or other material that a user uploads, creates, submits, or shares through the Platform.
• "Institution" refers to any university, college, school, educational board, corporate training entity, or other organisation that has entered into a formal partnership agreement with Techsnap.

4. CATEGORIES OF PERSONAL DATA COLLECTED

Techsnap collects personal data from users through multiple channels and across multiple device types, including desktop web browsers, Android mobile devices, and iOS devices (iPhone and iPad). The categories of personal data we collect are set out in detail below. 4.1 Identity and Registration Data When you create an account on the Platform or update your profile, we collect: your full legal name; your email address; your mobile or telephone number; a profile photograph (uploaded voluntarily or captured via device camera, at your election); your date of birth or age (where required to verify eligibility); your gender (optional); your educational institution name, department, branch, and year of study; your graduation year and degree programme; your professional designation or job title (where applicable); and your city, state, and country of residence. 4.2 Educational and Academic Data In connection with our role as an education technology platform, we collect: your self-reported skills, technologies, and areas of expertise; academic performance indicators and skill assessment scores; assessment responses, code submissions, and test answers; learning progress data, module completion status, and course history; certificates issued to you by Techsnap or partner institutions; mentorship session history and feedback records; and career goal preferences and placement readiness indicators. 4.3 Technical and Device Data When you access the Platform through any device or browser, we automatically collect: your IP address; device model, manufacturer, and operating system version; browser type and version; mobile application version; unique device identifiers (including Android ID on Android devices and the Identifier for Vendor (IDFV) on iOS devices — we do not collect or use the Advertising Identifier (IDFA) on iOS); network type (Wi-Fi, mobile data) and internet service provider; screen resolution and display characteristics; system language and timezone; and crash logs, diagnostic reports, and application performance data. 4.4 Usage and Behavioural Data We collect data about how you interact with the Platform, including: features accessed and pages visited; time spent on each feature and section; search queries entered within the Platform; assessment attempt history and timing data; notifications opened or dismissed; referral sources and navigation paths; and aggregate interaction patterns used for product improvement. 4.5 User-Generated Content Data Where you create or submit content through the Platform, we collect and store such User Content, including: blog posts and articles; community discussion posts and replies; portfolio entries and project showcases; code submissions and solutions to coding challenges; chat messages and direct messages exchanged with other users (subject to our moderation policies); feedback, ratings, and reviews of courses or mentors; and competition and hackathon submissions. 4.6 Communication Data We retain records of communications you have with our support team, grievance officer, or other Techsnap personnel, including the content of such communications, for the purposes of resolving your queries, maintaining records of dispute resolution, and improving our support services. 4.7 Inferred and Derived Data Based on your activity on the Platform, we may generate derived data, including inferred skill levels, predicted career paths, AI-generated learning recommendations, and placement readiness scores. This derived data is generated from your actual usage and assessment data and is used solely to improve your personalised experience on the Platform. 4.8 Payment and Transaction Data — Razorpay (Website Only) Techsnap does not collect or process payment card numbers, banking credentials, net banking details, UPI IDs, or any other sensitive financial data through the Platform's mobile applications (Android or iOS) or in-app interfaces. All subscription purchases, renewals, and payment transactions are conducted exclusively through our website at techsnap.in, using Razorpay Software Private Limited as our payment processing partner. The Techsnap Android application and iOS application do not support in-app purchases through Google Play Billing or Apple In-App Purchase systems, and no payment transactions are initiated or completed within the mobile applications. We retain only the following transaction metadata from Razorpay, for billing, compliance, and tax purposes: your subscription plan name; transaction date and timestamp; payment amount and currency; Razorpay-generated transaction ID and order ID; and payment method type (UPI, card, net banking — not the full card number or account details).

5. LAWFUL BASIS FOR PROCESSING PERSONAL DATA

Techsnap processes personal data only where a valid lawful basis exists for such processing under applicable law. The primary lawful bases upon which we rely are set out below. 5.1 Under the Digital Personal Data Protection Act, 2023 (India) Pursuant to the provisions of the DPDP Act, 2023, Techsnap processes personal data on the following grounds: (a) Consent: Where you have provided your free, specific, informed, and unambiguous consent to the processing of your personal data for a particular purpose, such as receipt of marketing communications, activation of optional features, or participation in surveys. You retain the right to withdraw consent at any time without affecting the lawfulness of processing carried out prior to such withdrawal. (b) Legitimate Uses: Where processing is necessary for the performance of a function required under any law currently in force in India, or for the performance of any obligation or function of the State, or where you have voluntarily provided your personal data and have not indicated that you do not wish such data to be processed. 5.2 Under the General Data Protection Regulation (GDPR) — Applicable to European Users For users located in the European Union or European Economic Area, Techsnap additionally relies on the following lawful bases under Article 6 of the GDPR: (a) Contractual Necessity (Article 6(1)(b)): Processing is necessary for the performance of the contract between you and Techsnap for the provision of our educational platform services, including account creation, service delivery, and support. (b) Legal Obligation (Article 6(1)(c)): Processing is necessary for compliance with a legal obligation to which Techsnap is subject, including tax record retention obligations and cybersecurity incident reporting obligations. (c) Legitimate Interests (Article 6(1)(f)): Processing is necessary for the purposes of the legitimate interests pursued by Techsnap, including platform security, fraud prevention, product improvement, and internal analytics, where such interests are not overridden by your fundamental rights and freedoms. (d) Consent (Article 6(1)(a)): Where required and not covered by the above grounds, we rely on your explicit and freely given consent. 5.3 Under the Information Technology Act, 2000 and IT Rules, 2011 We process personal data as required for compliance with the cybersecurity obligations, incident reporting obligations, and data localisation requirements set out under the IT Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

6. DEVICE PERMISSIONS — ANDROID AND iOS APPLICATIONS

The Techsnap mobile application, available on both the Google Play Store (Android) and the Apple App Store (iOS), requests certain device permissions in order to deliver specific features of the Platform. We operate strictly on a principle of minimum necessary access: we request only those permissions that are essential for the delivery of a specific, disclosed feature, and we never access device capabilities in the background or for purposes not disclosed to you at the time of the permission request. All permissions are optional in the sense that their denial will not prevent you from using the core learning features of the Platform; it will only disable the specific feature that depends on that permission. You may revoke any granted permission at any time through your device settings without deleting your account or losing your learning data.

6.1 Camera Permission Android permission: android.permission.CAMERA iOS permission: NSCameraUsageDescription (declared in the application's Info.plist) Purpose and scope: We request access to your device camera exclusively for the following user-initiated purposes: (a) to enable you to capture a new photograph for use as your profile picture; (b) to allow you to photograph physical documents, certificates, or identity verification materials for upload to the Platform, where such upload is required by a specific workflow such as institution onboarding or proctored assessment; and (c) to support identity verification or visual proctoring functionalities during online assessments where such proctoring has been expressly disclosed to you prior to the commencement of the assessment and where your separate consent has been obtained. How we use camera data: Camera access is strictly activated only upon your explicit interaction with a camera-dependent feature within the application. We do not access the camera passively, silently, in the background, or at any time when you have not affirmatively initiated a camera action. We do not conduct continuous video surveillance. Images captured for profile use are stored on our secure servers and displayed on your Techsnap profile. Images or short video captures taken during proctored assessments are stored temporarily on our secure servers solely for the purpose of assessment integrity verification and are permanently deleted within thirty (30) days of the conclusion of the relevant assessment, except where a dispute resolution process is ongoing, in which case they may be retained until the dispute is resolved and for a period not exceeding ninety (90) days thereafter. Camera-captured data is never shared with advertisers, data brokers, or unrelated commercial third parties. It may be shared with your affiliated educational institution solely under a binding confidentiality agreement and solely for the purpose of assessment integrity. Your control: On Android devices, you may revoke camera permission at any time by navigating to Settings > Apps > Techsnap > Permissions > Camera and toggling the permission off. On iOS devices, you may revoke camera permission at any time by navigating to Settings > Techsnap > Camera and toggling the permission off. Revoking camera permission will disable camera-dependent features but will not affect your access to other Platform features or your account data.

6.2 Location Permission Android permission: android.permission.ACCESS_COARSE_LOCATION (approximate location); android.permission.ACCESS_FINE_LOCATION may be requested for specific attendance features where expressly disclosed. iOS permission: NSLocationWhenInUseUsageDescription Purpose and scope: We request access to your approximate device location for the following specific and disclosed purposes: (a) to identify your nearest affiliated educational institution and personalise your Platform experience, including showing you institution-specific content, assessments, and placement opportunities relevant to your geographical area; (b) to enable attendance and check-in features offered through institutional partnerships where your institution has activated such features; and (c) to determine your general region for the purpose of content localisation, language preferences, and surfacing placement opportunities and events relevant to your location. How we use location data: We collect approximate location only (at the granularity of city or district level, derived from Wi-Fi signals or mobile network data), not precise GPS coordinates, unless a specific feature such as attendance or venue-based events explicitly requires and requests precise location, in which case you will be separately informed and a distinct, feature-specific permission request will be displayed. Location is collected only while the application is actively in use in the foreground. We do not collect location data in the background when the application is not in use and do not track your physical movements. Location data is not used for advertising targeting, is not sold or traded, and is not shared with third parties other than our hosting infrastructure under binding confidentiality obligations. Approximate location data collected during a session is retained only for the duration of that session and is not stored long-term unless it is tied to an attendance record or similar institutional feature that necessitates retention for institutional reporting purposes, in which case it is retained for the duration required by the institution's agreement and not longer than two (2) years. Your control: On Android devices, you may revoke location permission at any time by navigating to Settings > Apps > Techsnap > Permissions > Location and selecting "Deny." On iOS devices, you may revoke location permission at any time by navigating to Settings > Techsnap > Location and selecting "Never." Revoking location permission will disable location-dependent features such as institution detection and attendance but will not affect other features of the Platform.

6.3 Notification Permission Android permission: android.permission.POST_NOTIFICATIONS (required on Android 13 and above per Google's runtime permission model) iOS permission: Notifications permission requested at runtime via the UNUserNotificationCenter framework, displayed to you as a system prompt the first time notifications are required. Purpose and scope: With your permission, we deliver push notifications to your device for the following specific purposes: (a) assessment and test reminders, including upcoming scheduled assessments, time-sensitive deadlines, and assessment result availability; (b) skill milestone and achievement alerts, including level-ups, badge awards, and course completion certificates; (c) placement and recruitment opportunity alerts personalised to your skill profile and preferences; (d) account security communications, including login alerts from new devices, OTP delivery for authentication, and password change confirmations; (e) platform-wide announcements, policy updates, and maintenance notifications; and (f) institution-specific communications directed to you by your affiliated educational institution through the platform. How we use notification data: Push notifications are delivered via Firebase Cloud Messaging (FCM) on Android devices and via the Apple Push Notification service (APNs) on iOS devices. In order to deliver notifications, your device is assigned a unique push token — a device-level and application-level identifier — by FCM (on Android) or APNs (on iOS). This token is transmitted to and stored on Techsnap's servers, is associated with your account, and is used exclusively for routing notifications to your specific device. The FCM push token and APNs device token are not shared with advertising networks, data brokers, or third parties for marketing, tracking, or profiling purposes. We do not send promotional or marketing push notifications without your separate affirmative consent. You may withdraw your consent to receive marketing notifications at any time through the application's notification settings without affecting your receipt of transactional or security notifications. Transactional and security notifications — such as OTPs, login alerts, assessment result notifications, and security breach alerts — cannot be disabled, as they are essential to the security and integrity of your account and the delivery of the core service. Push tokens are permanently deleted from our servers upon account deletion or upon uninstallation of the application from your device. Your control: On Android devices, you may revoke notification permission at any time by navigating to Settings > Apps > Techsnap > Notifications and toggling notifications off, or from within the application under Settings > Notification Preferences. On iOS devices, you may revoke notification permission at any time by navigating to Settings > Notifications > Techsnap and toggling "Allow Notifications" off, or from within the application under Settings > Notification Preferences. Revoking notification permission means you will not receive push alerts on your device, but all other Platform features will continue to function normally.

6.4 Photo Library Permission (iOS Only) iOS permission: NSPhotoLibraryUsageDescription (read access) and NSPhotoLibraryAddUsageDescription (write access), declared in the application's Info.plist. Purpose and scope: On iOS devices, we may request access to your device's photo library for the following specific and user-initiated purposes: (a) to allow you to select an existing photograph from your photo library for use as your profile picture; and (b) to allow you to select and upload photographs of documents, certificates, or portfolio materials stored in your photo library to the Platform. How we use photo library data: We request read access to your photo library only when you affirmatively initiate an upload action that requires photo selection. We do not access your photo library passively, in the background, or without your explicit interaction. We do not scan, analyse, index, or upload your entire photo library. We access and upload only the specific photograph or file you select. We may request write access to your photo library only to save a certificate, badge, or other achievement asset generated by the Platform to your device, and only with your explicit confirmation at the time of saving. We do not read, analyse, or retain metadata embedded in your photographs beyond what is technically necessary for the upload process. Your control: On iOS devices, you may manage photo library access at any time by navigating to Settings > Techsnap > Photos and selecting "None," "Add Photos Only," or "Selected Photos." Revoking read access means you will need to use the device camera directly to capture images for upload. Revoking write access means generated certificates will not be saved to your photo library, but you will still be able to download them through the application.

6.5 Biometric Authentication — Face ID and Touch ID (iOS Only) iOS permission: NSFaceIDUsageDescription (Face ID), declared in the application's Info.plist. Purpose and scope: On iOS devices, the Platform may offer you the option to use Face ID or Touch ID (collectively, "Biometric Authentication") as a convenient and secure alternative method to authenticate and log in to your Techsnap account, in lieu of entering your password. This feature is entirely optional and is not required to access any Platform feature. How we use biometric data: Biometric Authentication on iOS is processed entirely and exclusively by Apple's iOS operating system through the LocalAuthentication framework. Techsnap does not receive, access, process, transmit, or store your biometric data — specifically, your facial geometry data (used by Face ID) or fingerprint data (used by Touch ID) — at any time. The Platform receives only a binary pass or fail authentication result from the iOS operating system's authentication framework. Techsnap has no access to and cannot reconstruct your biometric information under any circumstances. The processing, storage, and security of your biometric data remains solely under the control of Apple's Secure Enclave hardware module on your device. Your control: On iOS devices, you may enable or disable Face ID for Techsnap at any time by navigating to Settings > Face ID & Passcode > Other Apps > Techsnap and toggling the permission off. You may also disable this feature from within the application under Settings > Security > Biometric Login.

7. GOOGLE PLAY DATA SAFETY DISCLOSURE

This section is provided to fulfil our transparency obligations to users of our Android application under Google Play's Data Safety disclosure requirements. The information below reflects our actual data collection and usage practices and is consistent with what we have disclosed in our Google Play Data Safety form. We are committed to accurately representing our data practices and updating this disclosure whenever our practices change in a material manner. Data collected and its purpose:

Data sharing:

• We do not share personal data with third parties for advertising, retargeting, or cross-app tracking purposes.
• We do not sell personal data to any third party under any circumstances.
• We do not use personal data to build advertising profiles or engage in behavioural advertising.
• Personal data may be shared with your affiliated educational institution pursuant to a binding Data Processing Agreement, solely for the delivery of educational analytics and placement services.
• Personal data may be shared with our infrastructure and service providers — including Firebase (Google LLC), hosting providers, email delivery services, and analytics platforms — solely under binding confidentiality and data processing agreements, and such providers are not permitted to use your personal data for their own independent purposes.
• Personal data may be disclosed to law enforcement, regulatory authorities, or judicial bodies where required by applicable Indian law, court order, or government directive.

Security practices: All personal data is encrypted in transit using Transport Layer Security (TLS) version 1.2 or higher. Sensitive personal data is encrypted at rest using industry-standard encryption algorithms. Access to personal data within Techsnap's systems is governed by role-based access controls and is limited to authorised personnel with a documented business need. We conduct regular security audits, vulnerability assessments, and penetration testing of our infrastructure. User controls: Users may request deletion of their account and associated personal data through the in-app account deletion feature or by emailing [email protected]. Data deletion requests are processed within thirty (30) days of verification. Please refer to Section 19 of this Policy for complete account deletion instructions. In-app purchases and payments: The Techsnap Android application does not use Google Play Billing and does not process any payment transactions within the application. All subscription purchases are made exclusively through our website at techsnap.in using Razorpay Software Private Limited as the payment processor.

8. APPLE APP STORE PRIVACY DISCLOSURE

This section is provided to fulfil our transparency obligations to users of our iOS application under Apple App Store privacy nutrition label requirements and the Apple App Store Review Guidelines. The information below accurately reflects our data collection and usage practices for the iOS version of the Techsnap application. Important notice regarding in-app purchases: The Techsnap iOS application does not use Apple's In-App Purchase (IAP) system and does not process any payment transactions within the iOS application. Techsnap is a multiplatform educational service, and all subscription purchases, upgrades, renewals, and payment transactions are conducted exclusively through our website at https://techsnap.in using Razorpay Software Private Limited as the payment processor. Apple's standard revenue-sharing policies for in-app purchases do not apply to Techsnap's subscription model. Users who wish to subscribe to a paid plan must visit our website to complete the purchase; this cannot be done within the iOS application itself. Data collected from iOS users and its purpose:

• Name and email address: collected for account creation, user authentication, and delivery of service communications
• Apple ID relay email address (if Sign in with Apple is used): collected for authentication purposes only; used solely for account-related communications
• Mobile number: collected for OTP-based identity verification and account security
• Profile photograph: collected optionally and at user initiation; used for user profile display
• Identifier for Vendor (IDFV): collected for security monitoring, crash diagnostics, and internal analytics. We do not collect or use the Identifier for Advertisers (IDFA) and we comply fully with Apple's App Tracking Transparency (ATT) framework — we do not track users across other apps or websites.
• APNs device push token: collected for delivery of push notifications to your iOS device
• Approximate location (city or district level, when permission is granted): collected for institution detection and content localisation
• Camera captures: collected on-demand and at user initiation only; used for profile photography, document upload, and proctored assessment integrity where applicable
• Photo library selections: collected on-demand and at user initiation only; used for profile photography and document uploads
• Assessment responses and code submissions: collected for skill evaluation, certification, and personalised learning
• Usage and interaction data: collected for platform performance and product improvement
• Crash logs and diagnostic data: collected for debugging and platform reliability
• Transaction metadata (from Razorpay): limited to subscription plan name, transaction ID, amount, and date; used for billing records and tax compliance

App Tracking Transparency (ATT) compliance: Techsnap does not engage in cross-app or cross-website tracking of users. We do not use the IDFA (Advertising Identifier) and we do not share data with advertising networks or data brokers for tracking purposes. Accordingly, Techsnap does not display Apple's ATT prompt for advertising tracking purposes. Any analytics data we collect is used solely for internal product improvement and is subject to binding data processing agreements with our analytics providers. Data sharing: We do not sell user data or share it for third-party advertising. Data may be shared with affiliated institutions under formal Data Processing Agreements and with our infrastructure service providers under binding confidentiality obligations, as described in detail in Section 13 of this Policy.

9. SIGN IN WITH APPLE AND SIGN IN WITH GOOGLE

Techsnap supports authentication via Sign in with Apple and Sign in with Google as secure and convenient alternatives to traditional email address and password-based registration. Sign in with Apple: Pursuant to Apple's requirements for iOS applications that support third-party login options, Techsnap offers Sign in with Apple as an authentication method. When you choose to authenticate using Sign in with Apple, Apple's authentication framework provides Techsnap with the following information only: your display name (first and last name, which you may edit before sharing); and your email address, which may be either your real Apple ID email address or a private relay email address generated by Apple's Hide My Email feature at your election. Techsnap uses the information provided by Apple solely for the purpose of creating and maintaining your account on the Platform and for sending you account-related communications. Where you choose to share a private relay email address, Techsnap will use that relay address for all Platform communications and will not attempt to obtain or use your underlying real email address. Techsnap does not receive, access, or store your Apple ID password or any biometric data associated with Face ID or Touch ID authentication performed during the Sign in with Apple process. To revoke Techsnap's access to your Apple ID, navigate to Apple ID Settings > Password and Security > Apps Using Apple ID > Techsnap > Stop Using Apple ID. Please be aware that revoking Apple ID access will prevent you from logging in through this method but will not automatically delete your Techsnap account; to delete your account, please follow the process described in Section 19. Sign in with Google: When you choose to authenticate using Sign in with Google, Google's OAuth 2.0 authentication framework provides Techsnap with the following information: your display name; your Google account email address; and your Google profile photograph, subject to your Google account's sharing settings. Techsnap uses this information solely for account creation and management on the Platform. Techsnap does not receive, access, or store your Google account password. To revoke Techsnap's access to your Google account, navigate to your Google Account > Security > Third-party apps with account access > Techsnap > Remove Access. As with Apple, revoking this access will prevent login through this method but will not automatically delete your Techsnap account.

10. USER-GENERATED CONTENT, COMMUNITY FEATURES, AND PLATFORM SAFETY

Techsnap operates a community-driven educational platform that includes features enabling users to create, upload, publish, and share content with other users and, in some cases, with the general public. The following categories of User Content may be created and shared on the Platform:

• Blog posts, articles, and educational writeups published to the Platform community
• Posts, comments, replies, and discussions on community boards and discussion forums
• Student portfolios comprising project descriptions, links, screenshots, and technical writeups
• Project submissions, code repositories, and competition entries
• Chat messages and direct messages exchanged between users through the Platform's messaging features
• Profile information, biographical text, skills listings, and achievement highlights displayed on your public profile
• Hackathon submissions, solution write-ups, and competition entries
• Feedback, ratings, and reviews submitted about courses, mentors, or platform features

By submitting or uploading any User Content to the Platform, you represent and warrant that: (a) you are the sole and original creator of such content, or you have obtained all necessary rights, licences, permissions, and consents to submit the content and to grant Techsnap the rights described in this Policy; (b) the content does not infringe the intellectual property rights, privacy rights, moral rights, or any other legal rights of any third party; (c) the content does not violate any applicable law, regulation, or regulatory guideline; and (d) the content complies with Techsnap's Community Standards as set out in our Terms of Service. By submitting User Content, you grant Techsnap a worldwide, perpetual (for the duration of your account and for a reasonable archival period thereafter), non-exclusive, royalty-free, sublicensable licence to store, host, reproduce, display, modify (solely for formatting and display purposes), and distribute your User Content within the Platform solely for the purpose of operating, maintaining, and improving the Platform and providing the Services to other users. You retain all ownership rights in your User Content, and this licence does not transfer any ownership to Techsnap. Content Moderation and Reporting: Techsnap maintains a moderation framework for User Content to ensure the safety, legality, and integrity of our community environment. Users may report any content, profile, message, comment, or user behaviour that they believe violates our Community Standards, applicable law, or these Terms. Reported content is reviewed by our moderation team, and content found to be in violation of our standards may be removed, restricted, or flagged pending further review. Accounts found to engage in repeated or serious violations — including harassment, impersonation, fraud, distribution of illegal content, or academic dishonesty — may be suspended or permanently terminated. Moderation decisions may be appealed by contacting [email protected]. User data associated with moderated content may be retained for a limited period for the purposes of dispute resolution and legal compliance even after the content itself is removed. Block Feature: Users may block other users on the Platform. Blocking a user prevents that user from sending you messages or interacting with you through the Platform's direct messaging or chat features, and may restrict their ability to view your public profile, depending on your privacy settings. Blocking is a private action and does not notify the blocked user. You may unblock a user at any time through your account settings. Blocking does not constitute a formal report of a policy violation; if you believe a user has violated our policies, please use the dedicated report feature in addition to blocking.

11. ARTIFICIAL INTELLIGENCE, MACHINE LEARNING, AND AUTOMATED PROCESSING

Techsnap extensively utilises artificial intelligence, machine learning, natural language processing, and algorithmic recommendation technologies to deliver personalised and adaptive educational experiences to our users. This section discloses in detail how AI systems are used to process your personal data and generate outputs that affect your experience on the Platform. AI-powered features currently operating on the Platform include, but are not limited to: (a) Personalised Learning Roadmap Generation: AI models analyse your declared skills, assessment performance, career goals, and usage patterns to generate customised, step-by-step learning roadmaps recommending courses, topics, projects, and skill milestones; (b) AI Tutor and Doubt-Solving Assistant: A conversational AI model processes your submitted questions, code errors, and conceptual queries to generate contextual explanations, debugging assistance, and learning guidance in real time; (c) Mock Interview Simulator: AI models conduct simulated technical and behavioural interview sessions, analyse your responses, and generate structured feedback on communication, problem-solving approach, and technical accuracy; (d) Resume and Portfolio Analyser: AI models review your uploaded resume and portfolio content and generate recommendations for improvement based on industry standards and employer expectations; (e) Skill Gap Analyser: AI systems compare your assessed skill profile against role-specific or institution-specific skill benchmarks and generate personalised recommendations for areas of improvement; (f) Automated Assessment Scoring: AI systems assist in the evaluation of certain code submissions, technical assessments, and structured written responses, subject to human review where consequential decisions are involved; and (g) Opportunity and Content Matching: AI algorithms analyse your skill profile, career preferences, and location to surface relevant placement opportunities, events, hackathons, and learning content. Your data and AI processing: The AI systems described above process your personal data — including your profile information, assessment history, skill ratings, interaction patterns, and User Content — as inputs to generate personalised recommendations and outputs. This processing is conducted on Techsnap's secure servers and, where applicable, through AI model providers engaged as sub-processors under binding data processing agreements. AI model outputs are generated solely for the purpose of improving your learning experience and are not used to make legally or similarly significant automated decisions about you — such as employment selection, credit assessment, or legal status determinations — without human review. Automated decision-making disclosure: Techsnap acknowledges that certain AI-generated outputs — such as learning recommendations, interview performance scores, and skill assessments — may influence your educational experience and career preparation. In accordance with applicable data protection law, including Article 22 of the GDPR for EU users and the relevant provisions of the DPDP Act, you have the right to request that significant decisions affecting you be subject to human review. To exercise this right, please contact [email protected]. Accuracy disclaimer: AI-generated content, recommendations, analyses, and outputs provided by the Platform are generated algorithmically and may contain factual errors, outdated information, or inaccuracies. Such outputs do not constitute professional advice of any kind, including but not limited to legal advice, medical advice, financial advice, psychological advice, or employment advice. You should independently verify any AI-generated output before relying upon it for any consequential purpose, and you should seek qualified professional advice where appropriate.

12. HOW WE USE YOUR PERSONAL INFORMATION

Techsnap uses the personal data described in Section 4 of this Policy for the following specific purposes, each of which is mapped to a lawful basis for processing under applicable law.

• Account creation and authentication: We use your identity and registration data to create and maintain your user account, verify your identity during login (including OTP verification), and provide access to Platform features consistent with your account type and subscription status. Lawful basis: Contractual necessity; consent.
• Service delivery and personalisation: We use your educational data, usage data, and derived data to deliver personalised learning roadmaps, assessments, recommendations, and placement preparation tools. Lawful basis: Contractual necessity; legitimate interests.
• Assessment and certification: We use your assessment responses, code submissions, and skill performance data to evaluate your competency levels, generate skill scores, and issue verifiable digital certificates. Lawful basis: Contractual necessity.
• Global leaderboards and competitive rankings: When you participate in skill assessments, coding challenges, hackathons, or any competitive feature on the Platform, your score, username, and rank may be displayed on a global or category-specific leaderboard visible to other users of the Platform. By participating in any competitive feature, you expressly consent to your username and performance score being uploaded to our servers and displayed publicly on the leaderboard. You may opt out of leaderboard visibility at any time by contacting [email protected] or through your account privacy settings. Opting out of leaderboard display does not affect your ability to participate in assessments or receive scores privately. Lawful basis: Consent.
• Placement and career support: We use your skill profile, assessment results, and career preferences to match you with relevant placement opportunities, internships, and recruitment alerts. Lawful basis: Contractual necessity; legitimate interests.
• Institutional reporting and analytics: Where you are affiliated with a partner institution, we use your academic and skill data to generate anonymised and identifiable progress reports, placement readiness dashboards, and skill analytics for your institution's faculty and placement officers, pursuant to the institution's agreement with Techsnap. Lawful basis: Contractual necessity; legitimate interests.
• Push notification delivery: We use your FCM or APNs push token to deliver notifications as described in Section 6.3. Lawful basis: Consent; contractual necessity (for transactional and security notifications).
• Platform security, fraud prevention, and abuse detection: We use your technical and device data, usage patterns, and behavioural signals to detect and prevent fraudulent activity, unauthorised access, account takeover, cheating in assessments, and other abusive behaviour. Lawful basis: Legitimate interests; legal obligation.
• Product improvement and analytics: We use aggregated and, where appropriate, anonymised usage data to understand how users interact with Platform features, identify areas for improvement, and inform product development decisions. Lawful basis: Legitimate interests.
• Customer support and grievance resolution: We use your communication data and account information to respond to support queries, investigate and resolve grievances, and maintain records of dispute resolution. Lawful basis: Legal obligation; contractual necessity; legitimate interests.
• Legal and regulatory compliance: We use and retain certain personal data as required by applicable Indian law, including tax record retention obligations under the Income Tax Act, 1961 and the Goods and Services Tax (GST) framework, cybersecurity incident reporting obligations under the CERT-In Cyber Security Directions, and other regulatory requirements. Lawful basis: Legal obligation.
• Marketing communications (opt-in only): Where you have provided your separate, affirmative consent, we may use your email address or mobile number to send you marketing communications about new features, offers, events, and platform updates. You may withdraw this consent at any time. Lawful basis: Consent.

13. SHARING AND DISCLOSURE OF PERSONAL INFORMATION

Techsnap does not sell, rent, or trade your personal data to any third party under any circumstances. We share personal data only in the limited circumstances set out below, and we require all recipients to maintain confidentiality and to use your data only for the specific purpose for which it was shared.

• With your affiliated educational institution: Where you are registered on the Platform through an institutional partnership, we share your academic performance data, skill assessment scores, learning progress indicators, and placement readiness metrics with your institution pursuant to a binding Data Processing Agreement or Memorandum of Understanding. Institutions receive only the data necessary for the delivery of agreed services and are bound by confidentiality obligations.
• With infrastructure and technology service providers: We engage third-party technology providers as sub-processors to operate and maintain the Platform's infrastructure. These include: (a) Firebase (Google LLC) — for push notification delivery (FCM), crash reporting, and application diagnostics; (b) hosting and cloud infrastructure providers — for storage and compute services; (c) email delivery service providers — for sending transactional emails; (d) Google Analytics and Google Tag Manager — for web analytics; (e) Microsoft Clarity — for user experience and session analytics; and (f) Mixpanel — for product analytics. Each of these providers is engaged under binding data processing agreements that restrict their use of your data to the specific services they provide to Techsnap and prohibit independent use for their own advertising or commercial purposes.
• With Razorpay Software Private Limited: Payment transaction data (limited to transaction metadata as described in Section 4.8 and Section 14) is shared with Razorpay solely for the purpose of payment processing and reconciliation. Razorpay processes payment transactions on its own platform, which is governed by Razorpay's Privacy Policy and is PCI-DSS compliant.
• With legal and regulatory authorities: We may disclose personal data to law enforcement agencies, courts of competent jurisdiction, regulatory bodies, or government authorities where required by applicable law, court order, search warrant, or governmental directive, or where we believe in good faith that such disclosure is necessary to prevent or investigate a crime, prevent harm to individuals, or protect the legal rights of Techsnap or third parties. Where legally permissible, we will notify you of such a disclosure.
• With professional advisors: Techsnap's legal counsel, auditors, accountants, and compliance consultants may access your personal data to the extent strictly necessary for the provision of their professional advisory services, under binding confidentiality obligations.
• In connection with a corporate transaction: If Techsnap Agentic AI Private Limited undergoes a merger, acquisition, restructuring, assignment of assets, or sale of the business, your personal data may be transferred to the acquirer or successor entity as part of such transaction. We will notify you of any such transfer via the Platform or by email, and the successor entity will be required to honour the commitments made in this Privacy Policy or provide you with equivalent protections.
• With your explicit consent: We may share your data with third parties not described above where you have provided your free, prior, and informed consent for such sharing.

14. PAYMENT, SUBSCRIPTION, AND FINANCIAL DATA

Techsnap offers subscription plans that provide access to premium features of the Platform. All payment transactions, including subscription purchases, upgrades, downgrades, and renewals, are processed exclusively and entirely through our website at https://techsnap.in using Razorpay Software Private Limited ("Razorpay") as our sole payment processing partner. Razorpay is a licensed payment aggregator regulated by the Reserve Bank of India (RBI) under the Payment and Settlement Systems Act, 2007 and is compliant with the Payment Card Industry Data Security Standard (PCI-DSS). Critically, the Techsnap Android application available on the Google Play Store does not use Google Play Billing and does not initiate, process, or complete any payment transaction. The Techsnap iOS application available on the Apple App Store does not use Apple's In-App Purchase (IAP) system and does not initiate, process, or complete any payment transaction. Users who wish to purchase or renew a Techsnap subscription must do so through our website, accessible at https://techsnap.in, where the purchase is handled directly by Razorpay's secure payment gateway. This approach ensures that all payment transactions are conducted through a regulated, PCI-DSS compliant payment processor operating under Indian law, and that no payment data flows through either Apple's or Google's payment infrastructure. Techsnap does not store, transmit, or have access to your full payment card number, card verification value (CVV), bank account numbers, net banking credentials, UPI PINs, or any other sensitive financial authentication data. Such sensitive financial data is entered directly into Razorpay's encrypted, PCI-DSS compliant payment interface and is never transmitted to or accessible by Techsnap's systems. The data we retain from each successful transaction is limited to: the subscription plan purchased; the transaction date and timestamp; the transaction amount and currency (INR); the Razorpay-generated unique transaction ID and order ID; the payment method type (e.g., UPI, debit card, credit card, net banking — without the specific account or card details); and the billing status (success, failure, or pending). Transaction records, subscription history, and associated billing metadata are retained by Techsnap for a minimum period of seven (7) years from the date of the transaction, as required by the Income Tax Act, 1961, the Goods and Services Tax (GST) framework, and applicable Indian financial regulations. These records are maintained for tax compliance, audit, financial reconciliation, and dispute resolution purposes and are not used for any other purpose.

15. COOKIES, TRACKING TECHNOLOGIES, AND ANALYTICS

Techsnap uses cookies, web beacons, pixel tags, local storage, session storage, and similar tracking technologies on our website and Progressive Web App to operate the Platform, maintain sessions, remember your preferences, detect fraud, and analyse usage patterns. This section explains the types of tracking technologies we use and your options for managing them.

• Essential cookies and session tokens: These are strictly necessary for the operation of the Platform and cannot be disabled without preventing the Platform from functioning. They include: authentication tokens that maintain your login session; CSRF (Cross-Site Request Forgery) protection tokens; session identifiers; and cookies necessary to remember your preferences and settings within a single session.
• Analytics and performance cookies: We use third-party analytics services — including Google Analytics 4, Google Tag Manager, Microsoft Clarity, and Mixpanel — to collect aggregate and anonymised data about how users interact with the Platform, which pages are most visited, how long users spend on features, and where users encounter errors. These services may use their own cookies and tracking technologies. The data collected by these analytics services is used solely by Techsnap for internal product improvement and is governed by data processing agreements that prohibit the analytics providers from using your data for their own independent commercial purposes.
• Progressive Web App (PWA) service worker cache: Our PWA uses a service worker to cache certain platform resources locally on your device to enable offline functionality and improve performance. Cached data includes static application assets and, in some cases, your learning progress data to allow offline use of certain Platform features. Cached data does not include sensitive personal data and is managed in accordance with your browser's cache management settings.

We do not use advertising cookies, behavioural profiling cookies, or third-party tracking cookies for the purpose of serving targeted advertisements to you on this Platform or on other websites. We do not engage in cross-site tracking. You may manage cookie preferences through your browser's cookie management settings. Most browsers allow you to view, accept, reject, or delete cookies. Please note that disabling essential cookies will prevent the Platform from operating correctly and you may not be able to log in or access your account.

16. DATA TRANSFERS AND CROSS-BORDER PROCESSING

Techsnap is a company incorporated in India and our primary data infrastructure and servers are located in India. However, the nature of our Platform requires us to engage certain third-party service providers whose data processing infrastructure may be located in countries other than India. When your personal data is transferred outside India — for example, to Firebase servers operated by Google LLC in the United States, or to analytics service providers with infrastructure in the European Union or other jurisdictions — such transfers are conducted in accordance with the applicable data protection framework governing cross-border data transfers. For cross-border transfers to jurisdictions deemed to provide adequate protection under applicable Indian law and the DPDP Act, we rely on such adequacy as the basis for transfer. For transfers to jurisdictions without such adequacy, we implement appropriate safeguards including standard contractual clauses, binding corporate rules, or other legally recognised transfer mechanisms as may be applicable under the DPDP Act and any rules promulgated thereunder. We ensure that all sub-processors and third-party recipients of your personal data outside India are contractually bound to maintain standards of protection equivalent to those required under applicable Indian law. For users located in the European Union or European Economic Area, cross-border transfers of personal data from the EU/EEA to India or other third countries are conducted in accordance with Chapter V of the GDPR, including reliance on standard contractual clauses where applicable.

17. DATA RETENTION SCHEDULES

Techsnap retains personal data only for as long as is necessary for the purposes for which it was collected, or for as long as is required by applicable law, whichever is longer. The following specific retention periods apply to the categories of personal data we hold.

• Account identity and registration data: retained for the duration of your active account, plus a period of two (2) years following account closure or deletion, to enable dispute resolution, investigation of post-termination claims, and compliance with any applicable legal hold obligations.
• Educational data, assessment records, and skill profiles: retained for the duration of your active account, plus a period of five (5) years following account closure, to support certificate verification requests from employers, institutions, and professional bodies.
• Issued certificates and certification records: retained indefinitely in anonymised form after account deletion, to enable Techsnap to respond to certificate authenticity verification requests from third parties where certificates have already been issued and shared by the user.
• Transaction records and payment metadata: retained for a minimum period of seven (7) years from the date of the relevant transaction, in compliance with the Income Tax Act, 1961, GST record-keeping requirements, and other applicable Indian financial and tax regulations.
• Camera captures from proctored assessments: retained for a maximum period of thirty (30) days following the conclusion of the relevant assessment, unless a specific dispute or integrity investigation requires retention for a longer period, in which case they may be retained for up to ninety (90) days or until the dispute is resolved, whichever is earlier.
• FCM push tokens and APNs device tokens: deleted within thirty (30) days of account deletion or application uninstallation from your device.
• Customer support communications: retained for a period of two (2) years from the date of the last communication, for record-keeping and dispute resolution purposes.
• Crash logs and diagnostic data: retained for a period of ninety (90) days, after which they are automatically deleted or anonymised.
• Marketing consent records: retained for a period of five (5) years from the date of consent or withdrawal, to demonstrate compliance with applicable consent requirements.
• Security and fraud detection logs: retained for a period of ninety (90) days following account deletion.

When personal data is no longer required for any of the foregoing purposes, it is securely and irreversibly deleted from our systems using industry-standard data destruction methods, or it is irreversibly anonymised such that it can no longer be associated with any identifiable individual.

18. YOUR RIGHTS AS A DATA PRINCIPAL

Pursuant to the Digital Personal Data Protection Act, 2023 and, where applicable, the General Data Protection Regulation and other applicable data protection laws, you have the following rights with respect to your personal data held by Techsnap. You may exercise any of the following rights by submitting a request to [email protected] or [email protected]. We will respond to all valid requests within seventy-two (72) hours of receipt and will make every reasonable effort to resolve your request within the timeframes prescribed by applicable law.

• Right to Access: You have the right to request a summary of the personal data we hold about you, the purposes for which it is being processed, the entities with whom it has been shared, and the period for which it is retained. We will provide you with this information in a structured, clear, and accessible format within the timeframe prescribed by applicable law.
• Right to Correction: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. Where technically and legally feasible, we will correct your personal data promptly upon receiving a verified correction request, and we will communicate such corrections to any third parties to whom your data has been shared, where required.
• Right to Erasure (Right to be Forgotten): You have the right to request deletion of your personal data and account. Upon receiving and verifying your request, we will delete your personal data within thirty (30) days, subject to the exceptions described in Section 19 of this Policy, including data we are required to retain by applicable law.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, including where you contest the accuracy of the data, where processing is unlawful but you prefer restriction over deletion, or where we no longer need the data for the original purpose but you require it for legal claims.
• Right to Withdraw Consent: Where our processing of your personal data is based on your consent, you have the right to withdraw that consent at any time without prejudice to the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent may result in the disabling of certain optional Platform features that depend on the consented processing.
• Right to Grievance Redressal: You have the right to raise a complaint or grievance regarding our data processing practices with our designated Grievance Officer, whose contact details are set out in Section 28 of this Policy. We will acknowledge your grievance within seventy-two (72) hours and endeavour to resolve it within thirty (30) days. If you remain dissatisfied with our response, you have the right to escalate your complaint to the Data Protection Board of India established under the DPDP Act, 2023, or, for EU users, to the relevant supervisory authority in your member state.
• Rights Under GDPR for EU/EEA Users (where applicable): In addition to the foregoing, users in the EU/EEA have the right to data portability (Article 20 GDPR), the right to object to processing based on legitimate interests (Article 21 GDPR), and the right not to be subject to solely automated decision-making with legal or similarly significant effects (Article 22 GDPR).
• Right Under COPPA for Users Under 13 (US): We do not knowingly collect personal data from children under 13 years of age without verifiable parental consent. Parents or guardians of children under 13 who believe their child's data has been collected without consent may contact us at [email protected] to request deletion.

19. ACCOUNT DELETION AND DATA ERASURE

Techsnap provides you with multiple methods through which you may permanently delete your account and request erasure of your associated personal data, in compliance with the account deletion requirements of the Google Play Developer Program Policies and the Apple App Store Review Guidelines. In-App Deletion (Android Application): to delete your account from within the Android application, open the Techsnap app and log in, navigate to your Profile by tapping the profile icon, tap Settings, tap Account, tap Delete Account, verify your identity by entering the OTP sent to your registered mobile number or email address, and confirm the deletion when prompted. You will receive an email confirmation once your deletion request is queued for processing. In-App Deletion (iOS Application): to delete your account from within the iOS application, open the Techsnap app and log in, navigate to your Profile by tapping the profile icon, tap Settings, tap Account, tap Delete Account, verify your identity by entering the OTP sent to your registered mobile number or email address, and confirm the deletion when prompted. You will receive an email confirmation once your deletion request is queued for processing. Web Application Deletion: to delete your account through the web application, log in at https://app.techsnap.in, navigate to Profile Settings, select Account, and click Delete Account, following the on-screen instructions to verify your identity and confirm the deletion. Deletion by Email Request: if you are unable to access the Platform through any of the above methods, you may request account deletion by sending an email from your registered email address to [email protected] with the subject line "Account Deletion Request." Please include your full name and your registered mobile number or email address. We will verify your identity before processing your request. Processing Timeline: all verified account deletion requests — whether submitted through the application or by email — are processed within thirty (30) days of verification of your identity. Upon completion of the deletion process, you will receive a confirmation email at your registered email address confirming that your account and personal data have been permanently and irreversibly deleted from our primary systems. Data Retained After Deletion: notwithstanding the foregoing, certain categories of your data may be retained after account deletion where required by applicable law or for legitimate business purposes. Specifically: (a) transaction and payment metadata is retained for seven (7) years as required by Indian tax law; (b) certificate issuance records may be retained in anonymised form for up to five (5) years for certificate verification purposes; (c) security and fraud detection logs are retained for ninety (90) days post-deletion; and (d) data subject to an active legal hold, court order, or ongoing regulatory investigation may be retained until the relevant matter is concluded. The foregoing retained data is isolated from active systems and is not used for any purpose other than that for which it is retained. Subscription Note: deleting your account does not automatically cancel an active subscription or entitle you to a refund. All subscriptions are purchased and managed through our website at techsnap.in using Razorpay. If you have an active subscription, please cancel it through your account settings before requesting account deletion, or contact [email protected]. There are no Apple IAP or Google Play Billing subscriptions to manage through the respective app stores, as all Techsnap subscriptions are purchased directly through our website.

20. DATA SECURITY AND ORGANISATIONAL MEASURES

Techsnap takes the security of your personal data extremely seriously and implements a comprehensive set of technical, administrative, and organisational security measures designed to protect your personal data from unauthorised access, accidental or unlawful destruction, loss, alteration, or disclosure. The security measures we implement include, but are not limited to, the following:

• Encryption in Transit: all data transmitted between your device and our servers is encrypted using Transport Layer Security (TLS) version 1.2 or higher. We enforce HTTPS across all Platform interfaces and do not transmit personal data over unencrypted connections.
• Encryption at Rest: sensitive personal data stored in our databases is encrypted at rest using industry-standard encryption algorithms. Database access requires authenticated, role-based access credentials.
• Access Controls: access to personal data within Techsnap's systems is governed by a strict principle of least privilege. Access is granted only to employees, contractors, and service providers who have a documented and authorised business need to access the relevant data. All access is authenticated using multi-factor authentication (MFA) and is logged and audited.
• Regular Security Audits: we conduct regular security audits, vulnerability assessments, and penetration testing of our infrastructure and applications to identify and remediate security vulnerabilities before they can be exploited.
• Intrusion Detection and Monitoring: our infrastructure is protected by real-time intrusion detection and anomaly monitoring systems that generate alerts when unusual access patterns, authentication failures, or potential security incidents are detected.
• Incident Response: we maintain a documented cybersecurity incident response plan compliant with the CERT-In Cyber Security Directions issued by the Ministry of Electronics and Information Technology (MeitY), Government of India. In the event of a data breach that poses a significant risk to your rights, we will notify you and the relevant authorities in accordance with applicable legal requirements, including the obligation to report certain incidents to CERT-In within six (6) hours of detection.
• Employee Training: all Techsnap employees with access to personal data undergo mandatory data privacy and security training and are bound by confidentiality obligations.

Notwithstanding the foregoing measures, no method of electronic data transmission or storage is entirely immune to security risks, and absolute security cannot be guaranteed. In the event of a data breach that affects your rights and freedoms, we will notify you promptly and take all reasonably practicable steps to mitigate the impact of such a breach.

21. INFORMATION COLLECTED FROM EDUCATIONAL INSTITUTIONS

Techsnap partners with universities, colleges, engineering institutions, and other educational bodies across India to deliver assessment, analytics, certification, placement preparation, and skill development services to students. In the context of these institutional partnerships, educational institutions may share with Techsnap personal data relating to their enrolled students, including but not limited to student names, institutional email addresses or roll numbers, course and department information, year of study, academic performance indicators, and placement readiness data. Where Techsnap receives personal data from an educational institution, it does so pursuant to a formal Data Processing Agreement (DPA) or Memorandum of Understanding (MoU) executed between Techsnap and the relevant institution. Techsnap processes institutionally provided student data exclusively for the purposes authorised by the relevant DPA or MoU, which are limited to the delivery of the agreed educational and analytical services and do not extend to marketing, profiling for non-educational purposes, or sharing with unrelated commercial third parties. Educational institutions are the Data Fiduciary in respect of student data they share with Techsnap and are responsible for ensuring that they have the appropriate legal authority, institutional authorisation, and student consent (where required) to share such data with Techsnap. Institutions are also responsible for ensuring that students whose data is processed by Techsnap pursuant to an institutional partnership are made aware of Techsnap's involvement in such processing and are directed to review this Privacy Policy. Students whose personal data is shared with Techsnap by an educational institution may contact Techsnap's Grievance Officer at [email protected] to request information about what data is held, to seek correction of inaccurate data, or to exercise any other applicable data rights. Students should also contact their institution directly, as the institution may have separate data retention and processing obligations under its own policies and applicable law.

22. STUDENT AND MINOR PRIVACY

Techsnap's Platform is designed for use by students enrolled in Indian colleges, universities, and technical institutions, many of whom may be between the ages of sixteen (16) and twenty-four (24). The Platform may also be used by students who are minors under the age of eighteen (18) under applicable Indian law, and in such cases, Techsnap complies with the requirements relating to the processing of personal data of children under the DPDP Act, 2023. Pursuant to Section 9 of the DPDP Act, 2023, Techsnap does not process the personal data of children under the age of eighteen (18) without obtaining verifiable parental or guardian consent prior to such processing, except where such processing is undertaken by or on behalf of a certified educational institution in respect of students enrolled therein and in accordance with the institution's authorised purposes. Where Techsnap processes data of minors pursuant to institutional partnerships, such processing is conducted strictly within the scope of the institutional authorisation and does not extend to profiling minors for commercial purposes, targeting minors with marketing communications, or exposing minors to content not appropriate for their age group. We do not knowingly collect personal data from children under the age of thirteen (13) years. If we become aware that we have inadvertently collected personal data from a child under thirteen (13) without verifiable parental consent, we will take prompt steps to delete such data from our systems. Parents or guardians who believe a child under thirteen (13) has provided personal data to Techsnap without appropriate consent should contact us at [email protected] to request deletion. We do not use personal data belonging to minors for advertising profiling, behavioural targeting, or commercial purposes beyond the delivery of the educational services. Proctoring features involving camera use during assessments, where conducted in respect of minor students, are disclosed to students and where applicable to their institution prior to the assessment and are governed by the institution's authorisation as described in Section 21.

23. EXTERNAL LINKS, THIRD-PARTY SERVICES, AND INTEGRATIONS

The Techsnap Platform may contain hyperlinks, embedded content, or integrations that direct you to or interface with third-party websites, platforms, services, employers' careers portals, job boards, event registration pages, open-source documentation platforms, educational institution websites, and other external digital resources. These external resources are provided solely as a convenience to users and for the purpose of enhancing your educational and career development experience on the Platform. Techsnap does not control, operate, endorse, or accept responsibility for the privacy practices, data collection policies, terms of service, accuracy, completeness, security, or reliability of any third-party website or service. This Privacy Policy applies exclusively to data collected and processed by Techsnap through the Platform. When you click a link to a third-party website or service, you leave the Techsnap Platform and your use of that third-party website is governed entirely by that website's own terms and privacy policy, over which Techsnap exercises no control. The third-party technology services that Techsnap integrates with as part of the Platform's operation, and with which your data may be shared as described in Section 13, include: Firebase (Google LLC) for push notifications and crash analytics, governed by Google's Privacy Policy; Razorpay Software Private Limited for payment processing on our website, governed by Razorpay's Privacy Policy; Google Analytics 4 for web analytics, governed by Google's Privacy Policy; Google Tag Manager for analytics tag management; Microsoft Clarity for user experience analytics, governed by Microsoft's Privacy Statement; and Mixpanel for product analytics, governed by Mixpanel's Privacy Policy. Each of these providers processes data in accordance with their own privacy policies and is subject to binding data processing terms with Techsnap. Techsnap is not liable for any harm, loss, damage, data breach, or adverse outcome arising from your use of or reliance on any third-party website, service, or content accessed through links or integrations on the Platform. We encourage you to read the privacy policies of all third-party services you use.

24. COMMUNICATIONS, MARKETING, AND NOTIFICATIONS

Techsnap sends various categories of communications to users through email, push notifications, and in-app messages. The categories of communications we send, and the legal basis and opt-out options applicable to each, are set out below.

• Transactional and service communications: we send transactional communications that are directly related to your use of the Platform and your account, including account registration confirmations, OTP messages for authentication and identity verification, assessment result notifications, subscription confirmation and receipt emails, certificate issuance notifications, and account security alerts. These communications are essential to the delivery of our services and to the security of your account and cannot be opted out of while your account remains active.
• Academic and platform service communications: we send communications related to the educational features of the Platform, including assessment reminders, skill milestone achievements, placement opportunity alerts, and platform feature announcements. These communications are part of the core service we provide and are sent based on your activity and preferences on the Platform. You may manage your preferences for these communications through the notification settings within the application or by contacting [email protected].
• Marketing communications: where you have provided your separate and affirmative consent to receive marketing communications, we may send you promotional emails, special offer notifications, event invitations, and newsletters. You may withdraw your consent to receive marketing communications at any time by clicking the unsubscribe link included in every marketing email, by adjusting your notification preferences within the application, or by contacting [email protected]. Withdrawal of marketing consent will not affect your receipt of transactional or service communications.

We do not send unsolicited commercial messages to users who have not provided their separate consent for marketing communications, and we do not sell or share your contact details with third-party marketing organisations.

25. COMPLIANCE WITH APPLICABLE LAWS AND REGULATIONS

Techsnap's data processing practices are designed to comply with all applicable laws and regulatory frameworks governing the collection, use, storage, and protection of personal data. The primary legal and regulatory frameworks with which Techsnap endeavours to comply include the following:

• Digital Personal Data Protection Act, 2023 (India): the primary Indian data protection legislation governing the processing of digital personal data by Data Fiduciaries. Techsnap complies with its obligations as a Data Fiduciary including obtaining consent where required, providing transparency notices, honouring Data Principal rights, maintaining security safeguards, and reporting data breaches.
• Information Technology Act, 2000 (India) and IT (Reasonable Security Practices) Rules, 2011: governing cybersecurity obligations, liability for data breaches, and requirements for reasonable security practices in relation to sensitive personal data or information.
• Consumer Protection Act, 2019 and Consumer Protection (E-Commerce) Rules, 2020 (India): governing Techsnap's obligations as an e-commerce entity providing digital goods and services to consumers, including transparency in pricing, refund obligations, and grievance redressal.
• Indian Contract Act, 1872: governing the formation, interpretation, and enforcement of the contractual relationship between Techsnap and its users as set out in the Terms of Service.
• Copyright Act, 1957 (India): governing the intellectual property rights of Techsnap and its users in respect of content created, published, or shared on the Platform.
• Trade Marks Act, 1999 (India): protecting Techsnap's registered trade marks and governing users' obligations not to infringe such marks.
• Income Tax Act, 1961 and Goods and Services Tax legislation (India): mandating retention of financial and transaction records for prescribed periods.
• CERT-In Cyber Security Directions (India): mandating cybersecurity incident reporting obligations and the maintenance of certain logs and records.
• UGC (University Grants Commission) and AICTE advisories relating to student data handling in EdTech platforms.
• Payment and Settlement Systems Act, 2007 (India) and RBI guidelines on payment aggregators: governing the payment processing activities of Razorpay through which Techsnap's subscription transactions are processed.
• Google Play Developer Program Policies and Data Safety Requirements: governing the data collection and disclosure obligations applicable to Android applications published on the Google Play Store.
• Apple App Store Review Guidelines, App Privacy Details requirements, and App Tracking Transparency (ATT) framework: governing the data collection, disclosure, and payment practices applicable to iOS applications published on the Apple App Store.
• General Data Protection Regulation (EU) 2016/679 (GDPR): to the extent applicable to processing of personal data of individuals located in the European Union or European Economic Area, Techsnap applies the relevant provisions of the GDPR including lawful basis requirements, Data Subject rights, cross-border transfer restrictions, and mandatory breach notification.
• United Kingdom General Data Protection Regulation (UK GDPR): to the extent applicable to individuals located in the United Kingdom.
• Children's Online Privacy Protection Act (COPPA) (United States): Techsnap does not knowingly collect personal data from children under 13 years of age without verifiable parental consent.
• FERPA-aligned educational data privacy principles: although FERPA is a US federal law, Techsnap applies FERPA-inspired principles of educational record confidentiality when handling student data provided by institutional partners.

26. INTERNATIONAL USERS AND CROSS-BORDER APPLICABILITY

Techsnap is primarily designed and marketed for users in India, and our Platform is optimised for the Indian educational ecosystem. However, students and users from other countries may access the Platform, and we welcome international users subject to the following considerations. If you access the Platform from outside India, your personal data will be transferred to and processed in India or in other countries where our cloud infrastructure and service providers operate. By accessing the Platform from outside India, you acknowledge and consent to such international transfer, subject to the data protection and security measures described in this Policy. We apply reasonable contractual and technical safeguards to protect your data during any such international transfer, consistent with the requirements of the DPDP Act and any applicable international data protection framework. For users located in the European Union or European Economic Area, you have additional rights under the GDPR as described in Section 18 of this Policy. Cross-border transfers of your personal data from the EU/EEA to India are conducted in accordance with Chapter V of the GDPR, including through the use of standard contractual clauses where applicable. You have the right to lodge a complaint with your local data protection supervisory authority if you believe your GDPR rights have been violated. For users located in the United Kingdom, your rights under the UK GDPR apply, and you may lodge a complaint with the Information Commissioner's Office (ICO) if you believe your rights have been violated.

27. CHANGES TO THIS PRIVACY POLICY

Techsnap reserves the right to amend, update, or revise this Privacy Policy at any time to reflect changes in our data practices, new Platform features, changes in applicable law, or other circumstances that necessitate an update. When we make material changes to this Policy — including changes that affect how we collect, use, or share your personal data, or that affect your rights — we will provide you with advance notice by the following means: (a) displaying a prominent notice within the Platform application on your next login; (b) sending an email notification to your registered email address; and (c) updating the "Last Updated" date displayed at the top of this Policy. For non-material changes — such as corrections of typographical errors, clarifications of existing provisions, or organisational restructuring of the Policy that do not substantively alter your rights or our practices — we may update the Policy without prior individual notification, and the updated "Last Updated" date will serve as notice of such changes. You are encouraged to review this Policy periodically to stay informed about our data practices. Your continued use of the Platform following the effective date of any amended version of this Policy shall constitute your acceptance of such amendments. If you do not agree to any amended version of this Policy, you must cease using the Platform and may request deletion of your account and personal data in accordance with Section 19 of this Policy.

28. CONTACT INFORMATION, GRIEVANCE REDRESSAL, AND DATA PROTECTION OFFICER

Techsnap is committed to resolving privacy-related queries, requests to exercise data rights, and grievances promptly and in accordance with applicable law. You may contact Techsnap regarding any matter related to this Privacy Policy or your personal data through the following channels: Techsnap Agentic AI Private Limited Website: https://techsnap.in General Support: [email protected] Grievance Officer: [email protected] Account Deletion Requests: [email protected] (subject: "Account Deletion Request") Data Rights Requests: [email protected] (subject: "Data Rights Request — [describe your request]") We will acknowledge all privacy-related communications within seventy-two (72) hours of receipt. We will make every reasonable effort to respond substantively to your query or request within fifteen (15) days of receipt and to resolve the matter within thirty (30) days, in accordance with the timelines prescribed by the DPDP Act, 2023. Where additional time is required due to the complexity of your request, we will inform you and provide a revised timeline. If you are not satisfied with our response to your grievance, you have the right to escalate your complaint to: (a) in India: the Data Protection Board of India, once established under the DPDP Act, 2023, or the competent civil court of jurisdiction; (b) in the European Union or EEA: the competent data protection supervisory authority in your member state; (c) in the United Kingdom: the Information Commissioner's Office (ICO); or (d) in any other jurisdiction: the relevant data protection or privacy regulatory authority in your country of residence.

© 2026 Techsnap Agentic AI Private Limited. All rights reserved.