Privacy Policy

Information We Collect

When you register and participate on DevLabs, we collect

• Account info: full name, email, phone number, college, city, state
• Payment data processed via Razorpay - we never store card or UPI details
• Team data: team name, members, invite codes, project submissions
• AI interactions: project topics used to generate AI synopsis
• Usage data: IP address, browser type, pages visited, session timestamps

How We Use Your Information

• Process team registrations, payments, and wallet transactions
• Generate event certificates with unique verification codes
• Send transactional emails (OTP, registration confirmation, updates)
• Display leaderboards (public name & score only)
• Prevent fraud, duplicate accounts, and terms violations
• Improve platform performance via anonymized analytics

Information Sharing

We do not sell your personal data. Limited sharing occurs as follows

• Razorpay - payment processing (governed by their Privacy Policy)
• Email Service - for OTP and event notification delivery only
• Team Leaders - can see names and emails of their team members
• Public Leaderboard - shows name and score (no contact info)
• Admin Panel - DevLabs staff for support and verification purposes only

Data Security

We implement industry-standard security practices

• All data transmitted over HTTPS with TLS encryption
• Passwords are hashed using bcrypt - never stored in plain text
• JWT tokens used for authentication with expiry controls
• Payment data never stored on our servers - Razorpay handles it
• Regular security reviews conducted by the Automatech team

Your Rights

• Access - View and download your data from the dashboard
• Update - Edit profile information (name, college, phone) anytime
• Delete - Request account deletion by contacting support
• Certificates - Permanently downloadable via your dashboard
• Opt-out - Unsubscribe from non-transactional emails

Cookies & Tracking

We use only essential cookies

• Authentication session cookie (required for login)
• Preference cookies (theme, language settings)
• No third-party advertising or tracking cookies
• Analytics data is fully anonymized and aggregated

Minor Users

DevLabs School events allow participants aged 13+. For participants under 18, parental or guardian consent is required. We do not knowingly collect data from children under 13.

Data Retention

• Account data - Retained until deletion is requested
• Event & team data - Retained for 6 months post-event conclusion
• Certificates - Permanently stored for public verification
• Payment records - Retained for 7 years (regulatory requirement)
• AI-generated synopsis - Stored as part of project, deleted with team data

Changes to This Policy

We may update this Privacy Policy. Material changes will be communicated via email or a dashboard notification. Continued use of the platform after changes constitutes acceptance.