Trainlyze Privacy Policy
Last updated: October 2026 · Official Privacy Policy governing the Trainlyze application, student accounts, Google OAuth data, and platform services — compliant with the Digital Personal Data Protection Act, 2023 (India).
Trainlyze ("https://www.trainlyze.com") uses Google OAuth 2.0 to provide single sign-on (SSO) and secure student authentication. We strictly adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- We only request basic user profile data (Name, Email Address, Profile Picture).
- We NEVER sell, rent, or trade your personal or Google user data to third parties.
- We NEVER use Google user data for advertising, marketing retargeting, or AI model training.
- You can request account and data deletion at any time via info@trainlyze.com.
1. Overview & Scope
This Privacy Policy describes how Trainlyze ("we," "our," or "us"), operating via our primary web application at https://www.trainlyze.com, collects, uses, stores, and protects your personal information when you access our platform, register for our Virtual Training & Internship Programs, or sign in using Google authentication services.
By accessing or using the Trainlyze application, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
We collect personal information directly provided by you, as well as data automatically received through third-party authentication services:
A. Google OAuth User Data (Google Sign-In)
When you authenticate into the Trainlyze platform using Google Sign-In (OAuth 2.0), we request permission to access basic profile details, limited strictly to:
- Primary Email Address: Used as your unique account identifier and for program communications.
- Full Name: Used to personalize your student profile, offer letters, and verified completion certificates.
- Profile Picture URL: Used to display your avatar within your secure personal dashboard.
- Google User Account Identifier (Google ID): Used to securely link your Google authentication to your Trainlyze profile.
B. Application & Profile Data
When applying for our remote training & internship domains or completing your profile, you may submit:
- Academic details (College/University name, Degree, Year of Study).
- Contact details (WhatsApp / Mobile Number for program updates).
- Selected tech domain preferences and milestone project submission URLs.
C. Technical & Usage Data
When you browse our platform, our servers automatically collect log information including IP address, browser type, operating system, referring URL, timestamp, and essential session identifiers.
3. How We Use Your Information
We use collected personal data and Google user data exclusively for specific, legitimate operational purposes:
- Account Authentication & Access: Creating your student account, maintaining authenticated sessions, and protecting account security via Google Single Sign-On (SSO).
- Training & Internship Program Management: Processing domain applications, tracking capstone project submissions, evaluating candidate progress, and assigning mentor feedback.
- Credential Issuance & Verification: Generating official Offer Letters, Letters of Recommendation, and verifiable completion certificates.
- Service Communications: Sending essential application status notifications, program guidelines, verification links, and customer support responses.
- Security & Maintenance: Monitoring system health, preventing fraudulent activity, enforcing our terms, and protecting platform integrity.
4. Google API Services User Data Policy & Limited Use Disclosure
"Trainlyze's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements."
In accordance with Google Limited Use requirements, we enforce the following strict protections:
- No Data Sales: Google user data is NEVER sold, rented, leased, or monetized under any circumstances.
- No Advertising: Google user data is NEVER used or transferred for serving advertisements, retargeting campaigns, or targeted marketing.
- No AI Model Training: Google user data is NEVER used to train, retrain, or improve generalized artificial intelligence (AI) or machine learning (ML) models.
- Strictly Functional Transfer: Google user data is shared only with essential cloud infrastructure sub-processors (e.g., authenticated database services) solely as required to operate the user-requested features of the Trainlyze platform.
5. Data Sharing, Technical Processors & Non-Sale Commitment
Trainlyze strictly upholds candidate data privacy. We NEVER sell, rent, trade, or monetize your personal information or Google user data. Under Section 8(2) of the DPDP Act, 2023, we engage only vetted technical Data Processors bound by strict data processing and confidentiality agreements:
Secure single sign-on (SSO), encrypted authentication session tokens, and account access protection.
PCI-DSS compliant, RBI-authorized banking gateways for credential fee processing. (We never store card or UPI PIN data).
Enterprise-grade encrypted database storage with Row-Level Security (RLS) for program applications and credentials.
Global Content Delivery Network (CDN) with TLS 1.3 end-to-end encryption in transit and DDoS protection.
Data is transferred strictly to fulfill user-requested services, or when required under applicable Indian laws or valid legal process.
6. Data Security & Technical Safeguards
We implement industry-standard technical and organizational safeguards to protect personal data against unauthorized access, loss, alteration, or disclosure:
- Encryption in Transit: All web traffic and API calls use TLS 1.3 / SSL HTTPS encryption.
- Encryption at Rest: Account records and database data are protected using AES-256 encryption.
- Access Control: Administrative access is restricted using multi-factor authentication and role-based access control (RBAC).
7. Data Retention & User Rights (Account Deletion)
We retain personal data and Google user details only for as long as necessary to fulfill internship administration, certificate verification, and legal recordkeeping.
You possess full rights over your data under applicable data privacy laws:
How to Request Account & Data Deletion:
- Email Deletion Request: Send an email to info@trainlyze.com with the subject line "Account Deletion Request" from the email address associated with your Trainlyze profile.
- Revoke Google Access: You can revoke Trainlyze's access to your Google account at any time by visiting your Google Account Security Permissions page at https://myaccount.google.com/permissions and selecting "Remove Access" for Trainlyze.
Upon receipt of your deletion request, your profile details, contact information, application records, and Google OAuth user records will be permanently purged within 30 days.
8. Your Rights as a Data Principal (DPDP Act, 2023)
Under the Digital Personal Data Protection Act, 2023 (India), you are recognized as a "Data Principal" and Trainlyze operates as your "Data Fiduciary." You are entitled to the following rights:
- Right to Access (Section 11): You may request a summary of the personal data we hold about you and the processing activities performed on it.
- Right to Correction & Erasure (Section 12): You have the right to request correction of inaccurate or misleading data, completion of incomplete data, updating of outdated data, and erasure of data that is no longer necessary for the purpose for which it was collected.
- Right to Grievance Redressal (Section 13): You may raise a complaint with our designated Grievance Officer (details below). If unsatisfied with our response within 30 days, you may escalate to the Data Protection Board of India.
- Right to Nominate (Section 14): You may nominate another individual to exercise your data principal rights on your behalf in case of your death or incapacity.
- Right to Withdraw Consent: You may withdraw your consent at any time by contacting us at info@trainlyze.com. Withdrawal does not affect the lawfulness of processing performed prior to withdrawal.
To exercise any of the above rights, email us at info@trainlyze.com with the subject line "Data Principal Rights Request." We will respond within 30 days of receiving your verifiable request.
9. Grievance Redressal Officer & Redressal Mechanism
In accordance with Section 13 of the Digital Personal Data Protection Act, 2023 and Rule 3(11) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, Trainlyze has established an expedited grievance redressal mechanism. The designated Data Protection & Grievance Redressal Officer details are as follows:
If your grievance remains unaddressed or you are unsatisfied with the resolution within the 30-day statutory timeline, you possess the statutory right under Section 13(3) of the DPDP Act, 2023 to file a complaint directly with the Data Protection Board of India (DPBI).
10. Consent & Lawful Basis for Processing
In compliance with the DPDP Act, 2023 (Section 6), we collect and process your personal data only after obtaining your free, specific, informed, unconditional, and unambiguous consent. Consent is captured:
- At Registration: When you create your account via Google OAuth or complete your profile, you consent to data collection as described in this Privacy Policy.
- During Application: When you apply for an internship domain, you consent to the processing of your academic and contact data for program administration.
- Via Cookie Banner: When you visit our platform, an interactive banner lets you accept or decline cookies. We classify cookies into three distinct tiers:
You may withdraw consent at any time by emailing info@trainlyze.com. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
11. Children's Privacy (DPDP Act Section 9 Compliance)
Our educational internship programs and platform services are primarily intended for individuals aged 18 years and older (college students, graduates, and early-career candidates).
In strict adherence to Section 9 of the Digital Personal Data Protection Act, 2023 (Processing of personal data of children):
- We do not knowingly process personal data of any individual under 18 years of age without verifiable consent from their parent or lawful guardian.
- We do not undertake tracking, behavioral monitoring, or profiling of children, nor do we serve targeted advertisements.
- We do not engage in any data processing activities likely to cause detrimental effects on the well-being of a child.
If we discover or receive notice that personal data belonging to an individual under 18 years has been submitted without verifiable parental/guardian consent, we will promptly delete all such data from our active databases upon verification.
12. Compliance with Digital Personal Data Protection Act, 2023
Trainlyze is committed to full compliance with the Digital Personal Data Protection Act, 2023 enacted by the Parliament of India. As a registered Data Fiduciary operating within the territory of India, we implement all obligations prescribed under the Act, including but not limited to:
- Obtaining free, specific, informed, and unambiguous consent before processing personal data (Section 6).
- Providing clear notice at the time of data collection specifying the purpose and manner of processing (Section 5).
- Implementing reasonable security safeguards to protect personal data (Section 8(4)).
- Notifying the Data Protection Board of India and affected Data Principals in the event of a personal data breach (Section 8(6)).
- Retaining personal data only for the period necessary to serve the stated purpose, and erasing it upon fulfillment unless legally required to retain (Section 8(7)).
- Appointing a Grievance Redressal Officer and responding to Data Principal complaints within 30 days (Section 13).
13. Policy Updates & Contact Information
We may update this Privacy Policy from time to time to reflect platform enhancements, regulatory updates, or changes in our data processing practices. Any material changes will be notified via the platform and posted directly on this page with an updated effective date.
Data Fiduciary Contact Details:
Application Name: Trainlyze
Official Website: https://www.trainlyze.com
Privacy & Grievance Email: info@trainlyze.com
Location: India
Applicable Law: Digital Personal Data Protection Act, 2023 (India)