Home/Legal/Privacy Policy

Privacy Policy

Your privacy matters to us. This charter details how GrowthCraft collects, protects, and handles your information across our educational platform and campus operations.

Filter:

Executive Summary

Key Commitments at a Glance

A quick digest of our core pledges to students, colleges, mentors, and hiring partners.

Security

Data Protection & Encryption

Strict HTTPS protocols, secure database access controls, and PCI-DSS payment compliance.

Jump to full clause

No Ads

Zero Data Selling

We never monetize or sell your personal information or contact details to third-party advertisers.

Jump to full clause

Academic

Offline-First Transparency

Records are used strictly to manage campus cohorts, 1-on-1 doubt sessions, and placement pipelines.

Jump to full clause

User Rights

Your Privacy Rights

You have complete control to access, update, export, or request permanent deletion of your account.

Jump to full clause

Clause:Introduction & Scope

Showing:10 of 10Clauses

Overview

Introduction & Scope

In Plain English:

GrowthCraft and SynthWeb Technologies are dedicated to safeguarding your personal data across our offline campus operations and online platforms.

Applies to students, mentors, college partners, and hiring employers.

Governed by India's Digital Personal Data Protection (DPDP) Act and global privacy principles.

GrowthCraft ("we", "us", or "our"), operated by SynthWeb Technologies, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at https://growthcraft.com and related offline training services.

By using our platform or enrolling in campus programs, you consent to the practices described in this policy. If you do not agree, please discontinue use of our services.

Data Collection

Information We Collect

In Plain English:

We collect personal contact details, academic credentials, and automated device usage data solely to run our educational programs.

Direct: Full name, verified email, phone number, college, branch, resume, profile photo.

Mentors & Partners: Professional credentials, LinkedIn profile, tax ID, and banking/UPI payout info.

Automated: Device type, browser data, login activity, and cohort progress metrics.

We collect information you provide directly, including: full name, email address, phone number, college/university name, course details, profile photo, resume, and payment information.

We automatically collect usage data such as: IP address, browser type, device information, pages visited, time spent on pages, referring URL, and interaction patterns within courses and bootcamps.

If you register as a Mentor or College partner, we additionally collect professional credentials, area of expertise, organizational affiliation, and bank/UPI details for payouts.

Purpose

How We Use Your Information

In Plain English:

Your data is used to conduct training sessions, issue verifiable certificates, match you with mentors, and coordinate job placements.

Track attendance, physical workshop check-ins, and milestone completions.

Connect you with 1-on-1 industry mentors for live code reviews.

Share your verified resume and project portfolio with matched hiring partners.

To provide, operate, and maintain our educational platform and services including courses, bootcamps, training programs, mentoring sessions, and job placement features.

To process transactions, manage enrollments, issue certificates, and facilitate payments between students, mentors, and hiring partners.

To personalize your learning experience, recommend courses and mentors, and track your progress through cohort batches.

To communicate with you about your account, sessions, doubt resolutions, event invitations, and promotional offers (with opt-out available).

To improve our platform through analytics, A/B testing, and feedback analysis.

To comply with legal obligations and enforce our terms of service.

Sharing

Data Sharing & Third-Party Disclosure

In Plain English:

We never sell your contact information to advertisers. Data is shared exclusively with your mentors, college administration, and prospective employers.

Zero third-party advertising data broker sales.

Shared with assigned mentors for cohort doubt clearing.

Shared with hiring partners only when you actively apply or opt-in to placement support.

We share your profile and academic progress with assigned mentors for the purpose of cohort-based mentoring and doubt sessions.

When you apply for jobs through our platform, relevant profile data (resume, skills, course completions, certificates) is shared with hiring partners.

We share data with college partners only to the extent required for tracking students enrolled via their institution.

We use third-party services for payments (Razorpay), video conferencing (Google Meet), email delivery, and cloud hosting. These providers have their own strict privacy standards.

We may disclose information if required by law, regulation, or legal process, or to protect our rights, safety, or property.

Security

Data Security & Infrastructure

In Plain English:

We employ industry-grade TLS encryption, secure database access control, and PCI-DSS compliant financial gateways.

End-to-end TLS/HTTPS encryption on all platform traffic.

Financial data is handled directly by PCI-DSS certified payment processors (Razorpay).

Regular vulnerability assessments and role-based access control (RBAC).

We implement industry-standard security measures including HTTPS encryption, secure server infrastructure, access controls, and regular security audits.

Payment information is processed through PCI-DSS compliant payment gateways and is never stored on our servers.

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

Tracking

Cookies & Session Storage

In Plain English:

We use essential cookies strictly for secure session logins, token refresh cycles, and basic site analytics.

HttpOnly dual JWT cookies (15-minute access token + 7-day refresh token).

No invasive cross-site ad retargeting trackers.

We use essential cookies for authentication, session management, and platform functionality.

We use analytics cookies (e.g., Google Analytics) to understand usage patterns and improve our services.

You can control cookie preferences through your browser settings, though disabling essential cookies may affect platform functionality.

Retention

Data Retention & Archival

In Plain English:

We retain credentials and verified project history indefinitely so employers can verify your certificates; inactive accounts can be erased upon request.

Certificates and credentials remain publicly verifiable forever.

Account deletion requests are permanently purged within 30 days.

We retain your account data for as long as your account is active or as needed to provide services.

Course completion records, certificates, and placement data are retained indefinitely for verification purposes.

If you request account deletion, we will remove personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., financial records).

User Rights

Your Privacy Rights & Controls

In Plain English:

You hold the right to access, rectify, export, or permanently delete your personal information at any moment.

Request full export of your personal academic history.

Opt-out of promotional SMS or email broadcasts in 1-click.

Full GDPR & DPDP compliance for data portability and objection.

You have the right to access, correct, or update your personal information at any time through your account settings.

You may request deletion of your account by contacting us at support@growthcraft.com.

You may opt out of marketing communications at any time using the unsubscribe link in emails or through notification settings.

If you are located in the EU/EEA, you have additional rights under GDPR including data portability and the right to object to processing.

Eligibility

Age Eligibility & Minor Protection

In Plain English:

Our programs are tailored for college students and working professionals aged 16 and older.

Users must be 16 years or older to register independently.

Any inadvertent data from minors under 16 is purged immediately upon discovery.

Our platform is intended for users aged 16 and above. We do not knowingly collect information from children under 16.

If we learn that we have collected data from a child under 16, we will delete that information promptly. If you believe a child has provided us with personal data, please contact us.

Amendments

Policy Revisions & Updates

In Plain English:

We periodically update this policy as new educational programs launch; material modifications are notified via email.

Notices sent at least 7 days prior to material changes.

Historical revisions available upon request.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.

For significant changes, we will notify you via email or a prominent notice on our platform.

If you have questions about this policy, contact us at hello@growthcraft.com.

Frequently Asked

Common Legal & Privacy Inquiries

Quick answers regarding offline cohort policies, credential verification, and learner rights.

Questions about our data protections?

We believe in 100% transparency for our students, mentors, and partner colleges. Reach out anytime.

Email Support Desk Contact Us Form

Related Documents:Terms of Service•Refund Policy•About GrowthCraft

Your privacy matters to us. This charter details how GrowthCraft collects, protects, and handles your information across our educational platform and campus operations.

Filter: