🌐 Choose Policy Language / अपनी भाषा चुनें
Access statutory legal text in English or any of the 22 Eighth Schedule languages.
This charter is rendered in Indian languages specified under the Eighth Schedule to the Constitution of India in compliance with Section 5(3) of the Digital Personal Data Protection Act, 2023. The English language version strictly prevails, governs, and controls over every other language version in the event of any conflict, discrepancy, divergence, ambiguity, or dispute in statutory interpretation.
Data Protection
Compliance Framework
A comprehensive, end-to-end implementation of India’s Digital Personal Data Protection Act, 2023 and DPDP Rules 2025 — featuring our cryptographic SHA-256 HMAC tamper-evident ledger, statutory retention schedules, affirmative 18+ age gating, and enterprise Zero Data Retention (ZDR) AI governance.
This transparency portal provides a verifiable, in-depth audit of the architectural controls and legal safeguards powering the INTERNSYNC platform. No sensitive credentials or private tokens are exposed.
System Architecture Overview
How the DPDP compliance framework is embedded into every layer of the INTERNSYNC platform — from database to user interface.
Data Principal Layer
User-facing interfaces for consent management, data export, and rights exercise
Consent Engine
Core service orchestrating consent lifecycle, versioning, tokens, and middleware enforcement
Data Fiduciary Layer
Admin controls for policy management, breach response, and regulatory compliance
DPDP Act Compliance Mapping
Every section of the Digital Personal Data Protection Act, 2023 mapped to our concrete technical implementation.
Section 4 — Lawful Purpose
PROCESSING GROUNDS
Data processed exclusively for declared, legitimate purposes: internship lifecycle, verifiable certificate issuance, performance tracking, and optional AI services. No purpose creep.
Section 6 — Free & Granular Consent
CONSENT MECHANISM
Unbundled, affirmative consent per purpose. 11 granular purposes across 5 categories. Full version tracking with mandatory re-consent interception upon policy revisions.
Section 6(6) — Frictionless Withdrawal
EASY WITHDRAWAL
One-click email revocation using HMAC-signed tokens (no login required), plus an in-app toggle center. Strictly honors the "as easy to withdraw as to give" statutory standard.
Section 6(7) — Cryptographic Proof
BURDEN OF PROOF & LEDGER
Chained SHA-256 HMAC tamper-evident ledger meeting fiduciary burden of proof. Downloadable Vector PDF Consent Certificate with QR fingerprint and CLI audit tools.
Section 8(6) — Breach Notification
72-HOUR MANDATE
Mandatory notification to the Data Protection Board of India (DPBI) and affected Data Principals within 72 hours. Incident response coordinated with CERT-In directions.
Section 8(7) — Retention & Legal Hold
STATUTORY PURGE SCHEDULES
Category-specific retention policies (180 days for resumes, 5 years for consent artifacts). Statutory Legal Hold (is_legal_hold) freezes automated deletion during active disputes.
Section 8(10) — Grievance Redressal
48H ACK / 30D RESOLUTION
Dedicated Data Protection Officer with strict 48-hour acknowledgment and 30-day resolution SLA. Formal escalation avenue to the Data Protection Board of India.
Section 9 — Child & Minor Protection
AFFIRMATIVE AGE GATE (18+)
Affirmative age gating verifying adult status (is_adult = true). Absolute bar on behavioral monitoring, tracking, and targeted advertisements directed at minors.
Section 6(10) — AI & Zero Data Retention
ENTERPRISE ZDR CONTRACT
Enterprise AI multi-model routing (Google Gemini & OpenRouter) with strict Zero Data Retention. Personal data is never used to train foundation models. 100% human-in-the-loop.
Sections 11–14 — Comprehensive Data Rights Suite
SELF-SERVICE RIGHTS HUB
Full suite of Principal Rights available inside the dashboard: Right to Access Summary (Section 11), Right to Correction & Updating (Section 12), Right to Erasure / Forgotten (Section 12), Right to Machine-Readable Data Portability (CSV + Vector PDF), Right to Grievance Redressal (Section 13), and Right to Nominate (Section 14).
Personal Data Lifecycle
Every stage of personal data from collection to deletion — with retention periods and legal basis at each step.
Consent Management Workflow
The complete consent lifecycle — from collection through versioning, enforcement, withdrawal, and re-consent.
User Visits Registration Page
Cookie consent banner displayed immediately (managed independently). Registration form shows 3 mandatory consent checkboxes pulled from active versioned consent texts.
OTP Verification Triggers Consent Logging
After OTP is verified and the user record is created, the consent service grants consent for each purpose. This deferred approach ensures the user's database ID is available as a foreign key. Each consent action creates an immutable log entry capturing timestamp, IP, consent text shown, version ID, and channel.
Consolidated Confirmation Email Dispatched
A single consolidated email is sent (not 3 separate ones) listing all granted consents. Each consent item includes a one-click withdrawal link using cryptographically-signed HMAC tokens with 48-hour expiry. The email is dispatched via a queued background job to avoid blocking registration.
Immutable Audit Trail Created
Each consent action creates an immutable audit log entry capturing: timestamp, IP address, consent text shown, version ID, channel (web/email), user ID, action type (granted/withdrawn/re_granted), and whether a confirmation email was sent. These logs are retained for 5 years per regulatory requirements.
Email One-Click Withdrawal (No Auth Required)
User clicks the withdrawal link in their confirmation email. The public route validates the HMAC token, checks 48h expiry, and shows a confirmation page. No login required — compliant with DPDP "as easy to withdraw as to give" requirement. The token is single-use and the IP is logged upon usage.
In-App Consent Dashboard
Logged-in users access their consent dashboard showing all active consents with individual withdraw buttons. Shows consent text, version, and grant date. Displays impact warnings before withdrawal. Requires withdrawal reason (optional but encouraged).
Withdrawal Side Effects Engine
Granular consent flags updated on user model for O(1) checks. ConsentLog records the withdrawal with reason and channel. Purpose-specific side effects are applied automatically (see Section 9 below). Withdrawal confirmation email sent. 7-day cooldown enforced to prevent toggle abuse.
⚠️ CRITICAL: Mandatory Consent Withdrawal
If the user withdraws their Terms & Privacy consent (the mandatory one), their account is immediately frozen, they are force-logged out, and their data enters a 30-day retention period before deletion. Admin is notified automatically.
Admin Creates New Consent Version
Via the admin panel, a new consent version is created with updated text, the version number is bumped, and it's activated. A side-by-side diff view shows changes from the previous version to ensure transparency in what changed and why.
Background Job Marks All Users Outdated
A queued background job marks all users as "consent outdated" and sends email notifications about the policy change. This ensures no user continues on stale consent terms. Each user must re-consent on their next login.
Re-Consent Wall Enforced via Middleware
The consent-check middleware intercepts every authenticated request. If consent is outdated, the user is redirected to the re-consent wall showing a summary of changes and requiring fresh agreement. The user cannot access any platform features until they accept the updated terms. Upon acceptance, new consent logs are created and the version is bumped.
All 11 Consent Purposes
Every consent purpose tracked by the platform, organized by category. Each purpose is independently versioned, grantable, and withdrawable.
Legal
Communications
Data Use
Cookies
Media
Cryptographic Tamper-Evident Ledger & Certificate
Under Section 6(7) of the DPDP Act, 2023, the Data Fiduciary bears the statutory burden of proof. We implement an immutable, chained SHA-256 HMAC ledger coupled with verifiable vector PDF certificates.
Consent Action Triggered
Grant, withdraw, re-consent, or purge event is dispatched with user ID, IP address, user-agent, and version ID.
Previous Hash Fetch
Engine retrieves the audit_hash of the most recent log row to form an unbroken blockchain-style chain.
HMAC-SHA256 Signing
Payload signed using SHA-256 HMAC keyed with the master server key (APP_KEY). Out-of-band edits invalidate signature.
Vector PDF Certificate
User downloads verifiable PDF with cryptographic fingerprint, audit transcript, and QR verification link.
Chained Hash Inviolability
Each row stores previous_hash and generates its own audit_hash. If an attacker modifies or drops a historical record in the database, every subsequent node breaks mathematically.
Artisan Integrity Suite
System administrators run php artisan consent:verify-log-integrity to perform real-time mathematical validation across millions of consent entries, alerting instantly to anomalies.
Vector Certificate of Consent
Available to interns at /dashboard/consent/certificate/pdf. Formatted as an official court-ready legal transcript with dynamic QR verification and SHA-256 fingerprint.
Statutory Retention Schedules & Legal Hold Framework
Under Section 8(7) of the DPDP Act, personal data must be erased when purpose ceases. We configure four category-specific retention schedules balanced against statutory Legal Hold preservation.
Active Statutory Data Retention Matrix
Managed via Super Admin Console (/super-admin/retention-policies)
| Data Category | Retention Period | Statutory & Legal Basis | Purge Mechanism |
|---|---|---|---|
|
Consent Artifacts
consent_artifacts
|
1,825 Days (5 Years) | DPDP Act 2023 Sec 6(7) & Limitation Act 1963 (Statutory burden of proof & contract disputes) | Preserved in cold storage; anonymized after statutory limitation expires |
|
Unselected Resumes & Applications
unselected_resumes
|
180 Days (6 Months) | DPDP Act 2023 Sec 8(7) (Purpose Cessation & Data Minimisation Principle) | Hard purge of encrypted files (.enc) & candidate PII from relational disk |
|
Attendance & Network Access Logs
attendance_ip
|
1,095 Days (3 Years) | Industrial Disputes Act & Information Technology Act 2000 (Workplace audit logs) | IP hashes and biometric/timesheet logs auto-rotated and irreversibly purged |
|
Direct Messages & In-App Chats
direct_chats
|
365 Days (1 Year) | Information Technology Intermediary Guidelines Rule 3(1)(h) (Law enforcement inquiry window) | Cascading message purge upon completion of annual statutory window |
Statutory Legal Hold Override (is_legal_hold = 1)
Under Indian Evidence Act, 1872 & DPDP Section 8(7) proviso, data retention schedules are immediately superseded when a user account or specific dataset is flagged with an active Legal Hold. If an intern lodges a formal grievance, or if data is subpoenaed by a regulatory authority, court, or CERT-In, the automatic purge daemon (data:purge-expired) strictly halts deletion until the legal inquiry is officially closed.
Enterprise AI Governance & Zero Data Retention (ZDR)
Artificial intelligence powers career guidance, skill evaluation, and resume optimization without compromising candidate privacy. We enforce contractual Zero Data Retention and a 100% human-in-the-loop mandate.
Multi-Model Gateway Routing
Requests for resume scoring and skill gap insights are routed exclusively through enterprise API endpoints (Google Gemini 1.5/2.0 and OpenRouter) protected with end-to-end TLS 1.3 transport encryption.
Zero Model Training Guarantee
Candidate data, prompt payloads, code submissions, and feedback responses are never ingested by foundation model providers for training, model alignment, or algorithmic refinement.
100% Human-in-the-Loop Mandate
No automated algorithmic decision solely determines internship offers, certificates, academic grading, or candidate disqualifications. AI serves purely in an advisory capacity; verified employers and academic mentors make all final evaluations.
Instant Processing Cessation
If an intern withdraws consent for data_processing, all AI routing is instantaneously severed. No further resume analyses or automated recommendations are performed on their data.
Affirmative Age Gate & Protection of Minors
Section 9 of the DPDP Act mandates heightened protections for children. We enforce an affirmative age gate and a strict statutory bar on behavioral tracking or profiling directed at minors.
Affirmative 18+ Age Gate
During registration, users must affirmatively check: "I confirm that I am at least 18 years of age (an adult under Indian Law)." This is recorded as is_adult = true with an immutable timestamp.
No Minor Tracking or Profiling
In accordance with Section 9(2) and Section 9(3), INTERNSYNC completely prohibits behavioral tracking, targeted advertisements, and psychographic profiling directed at children or minors under any circumstances.
Verifiable Parental Consent
If specialized secondary education partnerships onboard students under the age of 18, verifiable parental/guardian consent protocols are mandated before profile creation is unlocked.
Data Principal Rights Implementation
Every right granted under DPDP Act Sections 11–14, mapped to our specific technical implementation.
Right to Access
DPDP ACT — SECTION 11
Users can view a summary of all personal data collected and processing activities through their consent dashboard. Shows all consent statuses, granted dates, and version information.
Right to Correction
DPDP ACT — SECTION 12
Users can update their profile data (name, email, phone, college) directly via their dashboard profile settings. Changes are logged in the activity trail.
Right to Erasure
DPDP ACT — SECTION 12(3)
Users can request full data deletion through the consent dashboard. Processes cascading removal of personal data, encrypted files, and related records. Consent logs retained for 5 years per regulatory obligations. Deletion is logged with anonymized metadata.
Right to Data Portability
DATA EXPORT
CSV data export via a queued background job — machine-readable format. Includes all personal data, consent history, and activity logs. Export is processed asynchronously to handle large datasets.
Right to Grievance Redressal
DPDP ACT — SECTION 13
Public grievance form with ticket generation, email notifications to Grievance Officer, 48h acknowledgment SLA, and 30-day resolution commitment. Supports categories: data deletion, data access, data correction, complaint, and other.
Right to Nominate
DPDP ACT — SECTION 14
Data Principals may nominate a representative to exercise their rights in case of death or incapacity. Requests handled through the Grievance Officer channel with proper identity verification.
Encryption & File Security Workflow
How every uploaded file and sensitive data field is protected through our multi-layer encryption pipeline.
File Upload
User uploads a document (resume, NDA, certificate). File arrives at the server.
5-Layer Validation
- ✓ File integrity check
- ✓ Size limit enforcement
- ✓ Extension whitelist
- ✓ MIME type verification
- ✓ Magic byte validation
AES-256-CBC Encryption
File content is encrypted with AES-256-CBC. Random IV generated per file. HMAC-SHA256 integrity tag appended.
Secure Storage
UUID-renamed .enc file stored in an isolated secure disk. Original filename stripped. Path stored in DB.
🔒 At-Rest Encryption
- ✓ AES-256-CBC — All uploaded files (resumes, NDAs, certificates) are encrypted before storage using industry-standard AES-256
- ✓ HMAC-SHA256 integrity — Each encrypted file includes an HMAC tag to detect tampering. Decryption fails if data was modified
- ✓ Random IV per file — Each encryption uses a unique 16-byte initialization vector, ensuring identical files produce different ciphertext
- ✓ Derived encryption key — File encryption key is derived via HMAC from the application master key, providing key isolation
🌐 In-Transit & Access Protection
- ✓ TLS 1.3 — All network traffic encrypted with latest TLS protocol. HSTS enforced to prevent downgrade attacks
- ✓ UUID-renamed files — Original filenames are stripped and replaced with UUIDs. No sensitive metadata in file paths
- ✓ Authenticated decryption — Files are decrypted on-the-fly only when accessed by authorized users through verified routes
- ✓ Zero browser cache — Sensitive file downloads include no-cache, no-store headers to prevent local caching of decrypted data
Data Breach Response Protocol
Our incident response procedure as mandated by DPDP Act Section 8 — from detection to resolution.
Withdrawal Side Effects Engine
When a user withdraws a consent, the system automatically enforces purpose-specific side effects — ensuring no data is processed beyond the user's wishes.
Technical Security Measures
Defense-in-depth security architecture protecting personal data at every layer.
Encryption
- ✓AES-256 encryption at rest
- ✓TLS 1.3 for data in transit
- ✓HMAC-SHA256 token signing
- ✓CSRF protection on all forms
Access Control
- ✓Role-based access (Intern/Admin/Super)
- ✓OTP-based authentication
- ✓Need-to-know data access
- ✓Session management & auto-logout
Privacy by Design
- ✓Self-hosted fonts & JS (no CDN tracking)
- ✓Zero browser-cache for sensitive assets
- ✓Anti-hotlink & anti-scraping layers
- ✓Screenshot protection on sensitive data
Data Localization
- ✓India-based servers
- ✓No cross-border data transfer
- ✓Local backup infrastructure
- ✓Sovereign data compliance
Audit & Logging
- ✓Immutable consent audit trail
- ✓IP address logging per consent action
- ✓5-year consent log retention
- ✓Admin action accountability
AI Transparency
- ✓Explicit AI consent checkbox
- ✓No fully automated decisions
- ✓Human oversight on all AI outputs
- ✓Purpose-limited AI processing
Implementation Stack
The complete enterprise technical stack powering our DPDP compliance — across 9 development lifecycle phases.
Key Design Decisions
Important architectural decisions made to balance compliance, usability, and security.
| Decision | Rationale |
|---|---|
| Chained SHA-256 HMAC Ledger | Every consent event cryptographically signs previous_hash + payload using the server's master key. Any direct SQL tampering permanently breaks the chain, providing irrefutable burden-of-proof under DPDP Section 6(7) |
| Statutory Legal Hold Override | The is_legal_hold flag freezes automatic purge routines (data:purge-expired) during active grievances or investigations to preserve vital evidence per Evidence Act and Sec 8(7) proviso |
| Zero Data Retention (ZDR) AI | AI queries dispatched to Google Gemini and OpenRouter are ephemeral in RAM and discarded immediately. Strict contract ensures candidate data is never used to train foundation models, with 100% human-in-the-loop oversight |
| Affirmative 18+ Age Gate | Mandatory affirmative checkbox during registration (is_adult = true) with an absolute bar on behavioral tracking, profiling, or targeted ads directed at minors per DPDP Section 9 |
| Deferred consent logging | Consent logged after OTP verification (not during registration form submission) so the user's database ID exists as a foreign key |
| Consolidated emails | Registration sends 1 email for all consents (not multiple separate emails) to avoid overwhelming users while maintaining withdrawal capability per-consent |
| HMAC-signed tokens | One-click withdrawal via email without requiring an active session — compliant with the "as easy to withdraw as to give" principle |
| 7-day cooldown period | Prevents consent toggle abuse while still allowing withdrawal. Balances user rights against system stability |
| Middleware-based enforcement | Every authenticated request passes through the consent-check middleware — impossible to bypass consent requirements at the application layer |
| Granular flags on user model | Separate boolean flags per consent purpose enables O(1) checks in middleware and controllers without querying the consent log table |
| Purpose-specific side effects | Each consent withdrawal triggers targeted, predictable effects (not a blanket shutdown) — allowing users to retain partial platform access |
| 5-layer file validation | Extension + MIME + magic bytes + size + integrity checks before encryption — defense-in-depth against malicious file uploads |
Your Data is Protected
INTERNSYNC implements the Digital Personal Data Protection Act, 2023 at every layer — from database to user interface. Your privacy rights are not just policy, they're code.
Last Updated: October 22, 2026 · Governed by the laws of India · Digital Personal Data Protection Act, 2023
We value your privacy under Section 5(3) of the DPDP Act 2023. Non-essential cookies expire after 180 days. Essential cookies cannot be disabled. Cookie Policy · Privacy Policy · Terms of Use
Session, CSRF protection, authentication. Always active.
Local and CDN font caching for fast typography rendering.
Page views and performance metrics (180-day expiry).
Tailwind and Alpine JS library caches.