Legal

Privacy policy

How PSY9 collects, uses, and protects participant data, under the Digital Personal Data Protection Act, 2023.

1. Who we are

PSY9 Security Consulting Pvt. Ltd. ("PSY9", "we", "us") is the Data Fiduciary for personal data collected through this site, under the Digital Personal Data Protection Act, 2023 ("DPDP Act"). For any privacy question or request, contact our Grievance Officer (Section 11).

2. What data we collect

When you register a team and take part, we collect:

Team details: team name, chosen track and problem statement, your team's stated strengths, prior collaboration, and readiness.
Personal details of the team lead and each member: full name, email address, phone number, city and state, organization or college, role or year of study, and any professional or portfolio links you choose to share.
Screening responses: your problem-fit statement, prior work, domain and technical experience, attendance and travel information, motivation, goals, and working style.
Optional uploads: any abstract or deck you attach.
Technical data: limited information such as IP address, browser type, and timestamps, collected for security, fraud prevention, and to record your consent.

3. Why we collect it

We use your data only for these purposes:

To register your team and administer the event.
To screen and shortlist teams fairly.
To communicate with you about your registration, shortlisting, logistics, and results.
To run the event safely and securely, including preventing abuse.
To meet legal and regulatory obligations.

We will not use your data for any new purpose without asking you first.

4. Legal basis

We process your personal data on the basis of the consent you give at registration, as required by the DPDP Act. You can withdraw consent at any time (Section 10), though doing so may mean we can no longer process your registration or let you take part.

5. Who can see it

Our organizing and screening team, on a need-to-know basis.
The jury, for shortlisted teams only, and only the information relevant to judging.
Service providers who help us run the event, such as our hosting and email providers, under confidentiality obligations and only for the purposes above.

We do not sell your personal data. We do not share it with CERT-In, the Department of Telecommunications, or any other body as part of running this event, except where the law requires it or where you give us separate, specific consent. If, after the event, we wish to include a willing participant in a talent pool or share details with a partner, we will ask for your separate consent first.

6. Team members' data

The team lead submits the details of all members and confirms at registration that every member has agreed to take part and to their details being submitted. Any member may contact us to access, correct, or delete their own data.

7. Children

The event is open to participants who are 18 years of age or older. We do not knowingly collect the personal data of anyone under 18. If we learn that we have, we will delete it.

8. How long we keep it

We keep your registration and screening data for as long as needed to run the event and for a reasonable period afterward for records, reporting, and legal purposes, after which we delete or anonymise it. We will not keep it for longer than necessary.

9. How we protect it

We use reasonable technical and organizational measures to protect your data, including encryption in transit, access controls, and secure storage. No system is perfectly secure, but we work to keep your data safe and will act promptly on any incident.

10. Your rights

Under the DPDP Act, you have the right to:

Access a summary of the personal data we hold about you.
Correct or complete inaccurate or incomplete data.
Request erasure of your data.
Withdraw your consent at any time.
Nominate another person to exercise your rights in the event of death or incapacity.
Raise a grievance with us, and, if unresolved, complain to the Data Protection Board of India.

To exercise any of these, contact our Grievance Officer below.

11. Grievance officer

Name, registered office address, and direct contact to be confirmed by PSY9 before registration opens. Until then, reach us through the Contact page.

12. Analytics and cookies

We may use privacy-respecting analytics to understand site traffic and improve the event. Where required, we will seek your consent for any non-essential cookies.

13. Changes to this policy

We may update this policy. The current version, with its date, will always be on this page. Material changes will be communicated where appropriate.

14. Contact

Questions about this policy? Reach us through the Contact page.