Privacy Policy

Skill Trust India ("Skill Trust India," "we," "us," or "our") operates skilltrustindia.com and related services, including certification programs, blockchain-verified credentialing, online assessments, employer verification tools, and partner certification infrastructure (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you visit our website, create an account, enroll in programs, take assessments, or otherwise interact with us.

By using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Services. Where this policy conflicts with our Terms & Conditions regarding personal data, this Privacy Policy governs.

1. Scope and roles

Skill Trust India acts as a data fiduciary (data controller) for personal information collected directly through our platform — for example, when you register, complete onboarding, purchase a certification, or manage your credential profile.

When a hospital, university, enterprise, or other partner institution ("Partner Institution") sponsors your enrollment or requests verification on your behalf, that institution may be the data fiduciary for certain processing activities. In those cases, Skill Trust India typically acts as a data processor, handling personal data on the Partner Institution's instructions to deliver assessments, issue credentials, and support verification workflows. The Partner Institution decides why your data is collected and how verification results are used.

2. Personal information we collect

"Personal information" means information that identifies you or can reasonably be linked to you. Depending on how you use the Services, we may collect the following categories:

Information you provide directly

• Account and registration data: full name, email address, password, and profile preferences. Your name may appear on issued certificates exactly as entered.
• Education and professional background: qualification level, institution, field of study, graduation year, employment history, job titles, and employer names submitted during onboarding or profile updates.
• Certification and assessment data: program enrollments, exam registrations, attempt history, scores, pass/fail outcomes, proctoring logs, and session integrity signals used to protect credential validity.
• Payment and billing data: billing name, address, transaction references, and payment method details processed through our payment partners. We do not store full card numbers on our servers.
• Communications: support tickets, survey responses, feedback, and any information you voluntarily provide when contacting us.

Blockchain-verified credential data

Because Skill Trust India issues tamper-evident, verifiable credentials, we maintain records essential to certification integrity, including certificate ID, certification title, issue date, expiration date (if applicable), verification status, and a cryptographic hash anchored to our verification ledger. When an employer or third party verifies a credential using our public verification tools, they may see limited credential metadata necessary to confirm authenticity — such as your name as printed on the certificate, program title, and issuance status. We do not publish your email address, payment details, or full assessment responses through public verification.

Information collected automatically

• IP address and approximate location derived from IP
• Device type, browser, operating system, and screen resolution
• Pages visited, features used, referral URLs, and session duration
• Security logs, authentication events, and audit trails
• Assessment platform telemetry used for fraud prevention and exam integrity monitoring

Information from third parties

• OAuth sign-in providers (such as Google): basic profile information you authorize at login
• Partner Institutions that enroll or sponsor learners and share enrollment or outcome data
• Service providers that help us operate payments, analytics, email delivery, and infrastructure

3. How we use your information

We use personal information for the following purposes:

• Deliver certification services: administer assessments, evaluate performance, issue certificates, maintain verification records, and enable employers to confirm credential authenticity
• Operate your account: authenticate users, manage profiles, process enrollments, and provide customer support
• Partner programs: report enrollment status and outcomes to Partner Institutions that sponsor or co-author programs, where permitted by contract and applicable law
• Payments and transactions: process purchases, refunds, invoices, and financial record-keeping
• Communications: send transactional messages such as exam access, results, credential issuance, security alerts, and renewal reminders. These are necessary to deliver the Services and generally cannot be opted out while you maintain an active account
• Marketing: with your consent or as permitted by law, send newsletters, program announcements, and career insights. You may opt out at any time using the unsubscribe link in emails or by contacting us
• Security and integrity: detect fraud, prevent credential misuse, monitor exam sessions, protect platform security, and investigate suspected violations of our policies
• Improvement and analytics: understand usage patterns and improve programs, content, and platform performance
• Legal compliance: comply with applicable laws, respond to lawful requests, enforce our agreements, and protect the rights and safety of users and the public

4. Legal basis for processing

Under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable laws, we process personal data based on one or more of the following grounds:

• Your consent, where required
• Performance of a contract with you or your sponsoring institution
• Compliance with legal obligations
• Legitimate interests that are not overridden by your rights — such as securing the platform, preventing fraud, and maintaining credential integrity

5. How we share your information

We do not sell your personal information. We share data only in the limited circumstances below:

• Partner Institutions: when your program is co-authored or sponsored by a hospital, university, or enterprise partner, we may share enrollment status, assessment outcomes, and credential issuance details with that partner as required to deliver the program
• Credential verification: limited certificate metadata may be disclosed to employers, recruiters, or auditors who use our verification tools to confirm authenticity
• Service providers: trusted vendors who process data on our behalf under contractual safeguards — including cloud hosting, payment processing, email delivery, analytics, and exam proctoring partners
• Professional advisors: lawyers, auditors, and insurers where reasonably necessary
• Legal and safety: regulators, courts, or law enforcement when required by law or to protect rights, safety, and platform integrity
• Business transfers: in connection with a merger, acquisition, or asset sale, subject to notice where required by law

6. Cookies and similar technologies

We use cookies and similar technologies to operate the Services, remember your preferences, keep you signed in, and understand how the platform is used.

Categories of cookies

• Strictly necessary: required for authentication, session management, security, and checkout. These cannot be disabled without affecting core functionality.
• Functional: remember settings such as theme preference and language.
• Analytics: help us measure traffic and improve performance. Where required by law, we obtain consent before placing non-essential analytics cookies.
• Marketing: used to deliver relevant communications or measure campaign effectiveness, only with your consent where required.

You can manage cookies through your browser settings. Disabling certain cookies may limit features such as staying signed in or completing purchases.

7. Data retention

We retain personal information only as long as necessary for the purposes described in this policy, including maintaining long-term credential records so employers can verify certifications years after issuance. Assessment records, certificate metadata, and verification logs may be retained for the life of the credential plus any additional period required by law, accreditation standards, or Partner Institution agreements. Account data that is no longer needed is deleted or anonymized in accordance with our retention schedule.

8. Security

We implement administrative, technical, and organizational measures designed to protect personal information, including encryption in transit, access controls, audit logging, and secure development practices. No method of transmission or storage is completely secure; while we work to safeguard your data, we cannot guarantee absolute security.

9. Your privacy rights

Depending on applicable law — including the DPDP Act — you may have the right to:

• Access personal information we hold about you
• Correct inaccurate or incomplete information
• Withdraw consent where processing is consent-based
• Request erasure, subject to legal and credential-retention obligations
• Nominate another individual to exercise rights on your behalf in the event of death or incapacity, as permitted under the DPDP Act
• Lodge a complaint with the relevant data protection authority

To exercise your rights, email privacy@skilltrustindia.com. We may need to verify your identity before processing a request. If we process your data on behalf of a Partner Institution, we may direct you to contact that institution for certain requests.

10. Children's privacy

The Services are not directed to individuals under 18 years of age, and we do not knowingly collect personal information from children without appropriate consent from a parent or lawful guardian. If you believe a child has provided us personal information without consent, please contact us and we will take appropriate steps to delete it.

11. International data transfers

Skill Trust India is based in India. If you access the Services from outside India, your information may be processed in India and in other countries where our service providers operate. Where required, we use appropriate safeguards — such as contractual clauses and security assessments — to protect data transferred across borders.

12. Third-party links

Our website may link to third-party sites or services — such as partner institutions, payment gateways, or social login providers. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing personal information.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will post the updated policy on this page and revise the "Last updated" date. Continued use of the Services after changes become effective constitutes acceptance of the updated policy.

14. Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, contact:

We aim to respond to privacy requests within 30 days, or within the timeframe required by applicable law.