Privacy Policy

1. Purpose and Scope

This Privacy Policy governs the manner in which StayMitra Technologies Private Limited collects, utilizes, maintains, and discloses information gathered from prospective clients, enterprise partners, students, and website visitors.

We strictly respect commercial confidentiality and operate under rigorous data handling standards that comply with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 of India.

2. Information We Collect

We only collect information necessary to deliver enterprise software engineering, technical consultation, educational training programs, and formal client support:

• Commercial Inquiry Data: Full Name, corporate email address, phone number, organization name, and project specifications submitted via our consultation forms.
• Internship Applications: Academic details, technical proficiencies, resume attachments, and GitHub or portfolio links.
• Technical Logs: IP address, browser type, referral URLs, and session timestamps used solely for enterprise threat detection, rate-limiting, and DDOS mitigation.

3. Absolute Non-Monetization Policy

StayMitra Technologies Private Limited never sells, rents, leases, or trades client or applicant data to third-party advertisers or lead-generation brokers.

All collected information remains confined strictly to internal project teams, authorized technical leads, and corporate administrative personnel directly engaged in delivering agreed contractual services.

4. Enterprise Data Security & Encryption

We enforce defense-in-depth infrastructure security to protect proprietary information against unauthorized access, alteration, or interception:

• Encryption in Transit: 256-bit SSL/TLS cryptographic protocols enforce secure transport for all network sessions.
• Protection at Rest: Database backups and sensitive records are stored in hardened, firewalled private VPC environments.
• Strict Access Controls: Multi-factor authenticated administrative roles with auditable activity logging.

5. Cookies and Session Tokens

Our platform utilizes strictly functional HTTP-only cookies designed to maintain authenticated staff sessions and protect against Cross-Site Request Forgery (CSRF). We do not employ third-party surveillance cookies, user fingerprinting, or invasive behavioral ad pixels.

6. Grievance Officer & Statutory Contact

In compliance with Rule 5(9) of the Information Technology Rules, 2011, the details of our designated Grievance Officer are set forth below: