GOBITSNBYTES FOUNDATION is the Data Fiduciary responsible for personal data processed through official bits&bytes™ websites (including gobitsnbytes.org), event registration portals, application forms, and digital communication platforms.

• Corporate Entity: GOBITSNBYTES FOUNDATION
• Status: Section 8 Non-Profit Company (Limited by Guarantee) incorporated under the Companies Act, 2013 (Ministry of Corporate Affairs, India)
• CIN: U85500UP2026NPL248652
• Registered Office: 265/1 Patrakar Colony, Ashok Nagar, Prayagraj - 211001, Uttar Pradesh, India
• Operational / Creator Base: Lucknow, Uttar Pradesh, India
• General Inquiries: hello@gobitsnbytes.org
• Grievance Redressal Officer: grievance@gobitsnbytes.org

We adhere to strict data minimization principles under Section 6 of the DPDP Act, collecting only information reasonably necessary for educational, safety, anti-abuse, and operational functions:

• Identity and Contact Details: Name, email address, phone number (optional), age/date of birth, school or college institution, city, and GitHub or portfolio links.
• Guardian Information for Minors: Parent or legal guardian name, email, and phone number where required for verifiable parental consent.
• Event and Hackathon Records: Team rosters, dietary and accessibility preferences, project submissions, attendance check-ins, and certificate issuances.
• SparkCloud KYC & Anti-Abuse Verification: For students requesting free compute access on SparkCloud, we verify student identity to prevent multi-accounting, denial-of-service, or compute abuse. We strictly accept School/College photo ID or Masked Aadhaar (first 8 digits hidden). We strictly prohibit and delete unmasked Aadhaar numbers. Verification documents are retained solely until manual verification is complete.
• Technical & Telemetry Data: Anonymized device characteristics, browser type, referral paths, and page speed metrics. We do not engage in cross-site tracking or behavioral profiling.
• Communication Logs: Inquiries submitted via our contact forms, support emails, or AI assistant feedback logs.

Because bits&bytes™ is dedicated to teen builders (ages 13–19), safeguarding young people's privacy is our highest priority, governed by the DPDP Act, 2023 and the Protection of Children from Sexual Offences Act, 2012 (POCSO):

• Verifiable Parental Consent: Under Section 9(1) of the DPDP Act, we require verifiable consent from a parent or legal guardian before collecting or processing personal data of individuals under 18 years for in-person hackathons, sponsored travel, media releases, or leadership appointments.
• Absolute Prohibition on Behavioral Tracking: Under Section 9(2) of the DPDP Act, we strictly do not track, monitor the behavior of, or create behavioral profiles of children.
• No Targeted Advertising: We do not serve targeted ads or share minor data with advertising networks or commercial brokers under any circumstances.
• Child-Safe Storage & Safeguarding: Safeguarding incident reports and minor consent files are treated with enhanced confidentiality and restricted access.

We process personal data only under lawful grounds recognized by the DPDP Act:

• Consent (Section 6): Freely given, specific, informed, unconditional, and unambiguous consent provided via our forms and checkboxes.
• Legitimate Uses: Educational coordination, hackathon participant safety, code of conduct enforcement, and fulfilling statutory compliance under Indian law.

Specifically, your data is used to:

• Coordinate hackathons, cohorts, hardware workshops, and regional Fork activities.
• Deliver certificates of participation and achievement badges.
• Verify eligibility and prevent infrastructure abuse on SparkCloud.
• Respond to inquiries, support requests, and community applications.
• Enforce our Code of Conduct and maintain physical and digital safety.
• Comply with legal requirements, tax audits, and lawful directives from statutory authorities.

GOBITSNBYTES FOUNDATION never sells, rents, or monetizes personal data. We disclose limited data only to trusted entities under strict confidentiality agreements:

• Technical Infrastructure Providers: Trusted hosting, database, and telemetry providers (e.g. Vercel, Supabase) operating under reasonable security standards.
• Security & Bot Protection: hCaptcha (Intuition Machines, Inc.) for human verification on forms.
• Event Partners & Host Institutions: Venue hosts or academic partners where explicit consent has been provided for attendance security.
• Statutory & Law Enforcement Bodies: Where required under applicable law, court summons, or to investigate criminal misconduct or imminent safety threats.

We implement reasonable security practices and procedures (in accordance with Section 43A of the Information Technology Act, 2000 and SPDI Rules 2011) to safeguard data against unauthorized access, loss, or alteration:

• Encryption: All data in transit is encrypted using TLS 1.3. Stored databases utilize industry-standard encryption at rest.
• Retention Schedules: We retain personal data only for as long as necessary to fulfill the purpose for which it was collected. Event rosters and project submissions are retained for portfolio history and certificate verification. Verification ID documents submitted for SparkCloud access are securely purged after verification.
• Data Breach Notification: In the unlikely event of a personal data breach, GOBITSNBYTES FOUNDATION will notify affected individuals and the Data Protection Board of India in accordance with statutory procedures under the DPDP Act.

Under the DPDP Act, 2023, you (or your parent/guardian, if you are a minor) have full control over your personal data:

1. Right to Access: You may request a summary of your personal data processed by us and the identities of any data fiduciaries or partners with whom it was shared.
2. Right to Correction and Erasure: You may request the correction of inaccurate data, completion of incomplete records, or erasure of personal data that is no longer necessary for the purpose it was collected.
3. Right to Withdraw Consent: You may withdraw your consent at any time by emailing hello@gobitsnbytes.org. Upon withdrawal, we will cease processing your personal data unless required by statutory retention obligations.
4. Right of Grievance Redressal: You have the right to register a grievance with our designated Grievance Officer regarding any data processing concern.
5. Right to Nominate: You have the right to nominate an individual who, in the event of your death or incapacity, can exercise your rights as a Data Principal.

In compliance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the DPDP Act, 2023, GOBITSNBYTES FOUNDATION has appointed a designated Grievance Officer:

• Grievance Officer: Legal & Compliance Desk
• Entity: GOBITSNBYTES FOUNDATION
• Email: grievance@gobitsnbytes.org / hello@gobitsnbytes.org
• Postal Address: GOBITSNBYTES FOUNDATION, 265/1 Patrakar Colony, Ashok Nagar, Prayagraj - 211001, Uttar Pradesh, India
• Response Timeline: We acknowledge grievances within 24 hours and resolve them within 15 calendar days of receipt.
• Regulatory Escalation: If you are not satisfied with the resolution of your grievance, you have the right to lodge a complaint with the Data Protection Board of India.

• Cookie Policy: For detailed information on our use of essential cookies, local storage, and telemetry, please read our Cookie Policy.
• External Links: Our website contains links to external platforms (such as GitHub, Discord, Notion, or partner websites). We are not responsible for the privacy practices or content of third-party platforms.