Privacy policy

Who we are

3sintern.com is run by EL Corp Technologies, [FILL: registered address]. We decide why and how your details are used, so under the DPDP Act we are the "Data Fiduciary". In this policy, "we" and "us" mean that company.

For any question about your details, write to our grievance officer (see below) or use the support page.

What we collect, and what for

• When you apply: your name, email, WhatsApp number, college, course, graduation year, first and second choice track, and your answer to "Are you 18 or older?". If you add them, your resume (a PDF up to 2 MB) and a note about yourself. We use these to read your application, contact you about it and place you on a track.
• When you ask to hear about a training: your name, email, WhatsApp number and track. We use these to tell you when it opens, with the price and how to join.
• When you write to support: who you are (intern, applicant, placement officer or faculty, or someone else), your name, email, your WhatsApp number if you give it, and your message. We use these to answer you.
• When a placement officer or faculty member writes to us about their college: name, role, college, town, work email, phone number, a rough number of students and an optional note. We use these to reply and plan work with that college.
• When you book a mock interview: your name, email, WhatsApp number, the track it is for if you give it, and the slot you pick. We use these to hold your slot, send your pay link and the video call link, and let you move it.
• When you ask for help with your job search: your name, email, WhatsApp number, field, the year you finish your course if you give it, and whether you agree that we may share your details with a placement agency. We use these to call you about it.
• When you pay us: what it is for, the amount, a booking reference, and the time you tapped "I have paid". When the money shows in our bank, we also note the UPI reference number and the name the bank shows. We use these to match the payment to your booking and to keep our accounts.
• When you finish an internship: your certificate record, with your name, email, track, dates and certificate ID. We use it to issue your certificate and let anyone check it with its ID.
• With every form: the campaign tags in the link you came from (such as utm_source), the Google ad click ID (gclid) if you came from an ad, the first page you opened, the version of the consent text you agreed to, and the time. We use these to see which ads and links work, and to keep a record of your consent.

We never ask for your date of birth, Aadhaar number, bank or card details, passwords, OTP or UPI PIN on the site.

Payments

You pay by UPI on a 3sintern.com pay page, to EL Corp Technologies’s merchant UPI ID. The pay page opens from a private link we email you; the link works only for your booking. Your UPI app and your bank handle the payment, so we never see your bank login, card or UPI PIN. We keep the amount, the date, the booking reference, the UPI reference number and the name the bank shows, so we can match the payment to your internship or booking.

If you send us a screenshot of your payment on WhatsApp, we use it only to find your payment in our bank, and delete it once the payment is matched. [REVIEW]

Why we use it

• To read your application, call you, and place you on a track.
• To send you confirmation emails and answer your messages.
• To issue your certificate and let others check it with its ID.
• To see which ads and links bring students to us, so we stop paying for the ones that do not.
• To stop spam and abuse of our forms.
• To keep records the law asks us to keep, such as accounts for fees paid.

A person on our team reads every application. No decision about you is made by a computer alone. We do not use your details for a new purpose without asking you first.

Your consent

We use your details only with your consent, which you give with the tick box on each form. The box is never ticked for you. If you do not tick it, we cannot read your form.

You can withdraw your consent at any time, and it is as easy as giving it: write to us by email or from the support page. We then stop using your details within a reasonable time, ask the services that handle them for us to stop too, and delete what we no longer need. Withdrawing does not undo what we did before.

If you withdraw consent while your application is open, we cannot go on with it. If you withdraw it for your certificate record, the check page stops showing your certificate, so recruiters can no longer check it.

Email us to withdraw consent

Sharing your details with a placement agency for help with your job search needs its own separate tick, which is never ticked for you. Saying no does not affect your application or internship.

You may also give, manage or withdraw consent through a Consent Manager registered with the Data Protection Board of India. We do not work with one yet. [REVIEW: confirm we need not offer a Consent Manager at launch]

Who else handles your details

These services handle details for us, under contract, only to run the site. They may not use your details for their own purposes. We never sell your details.

• Supabase: our database and the private store for resumes, in Mumbai, India.
• Cloudflare: hosts the site, runs the spam check on forms (Turnstile) and limits repeated requests. It sees your IP address.
• Resend: sends our emails. Your email address may be handled outside India.
• Zoho: our support mailbox, where your messages and replies are kept.
• Cloudinary: serves the brand video, and sees your IP address when you play it.
• Google: Analytics and the Google Ads tag, only if you accept analytics cookies. Ad personalisation is off.

Others who get your details, each for their own use:

• The group company you are placed with: your application details, once you are selected, so they can plan your work. [REVIEW: is the group company a separate Data Fiduciary, and does the consent text say so?]
• Placement agencies we work with: only if you choose help with your job search and give the separate consent. You can ask us which agency got your details.
• Government bodies, courts or police: only when the law makes us share.

If we message you on WhatsApp, WhatsApp (Meta) carries that chat. [REVIEW: confirm we use WhatsApp, and whether a business account or tool stores the chats]

Details handled outside India

Our database and resumes stay in India. Some of the services above may handle your details outside India: Resend for emails, Google for analytics, and Cloudflare and Cloudinary, which serve pages and the video from a location near you. The DPDP Act allows this, unless the Government of India restricts a country. If it does, we stop sending details there. [REVIEW: confirm the Zoho data centre and each service’s locations]

Details kept on your device

These stay in your browser and are not sent anywhere unless you send a form. Clear them at any time by clearing this site’s data in your browser settings.

• Your name, email, WhatsApp number and college, for 90 days from when you type them, so the next form fills itself. Your consent tick is never saved.
• A form you have not sent yet, until you close the tab, so you do not lose your answers.
• The campaign tags and ad click ID from the link you came from, for 30 days, so they can be sent with your form.
• The language you picked for the brand video.
• Your cookie choice.

See the cookie notice for the full list.

How long we keep it

• Resumes, and applications that were not selected: 12 months after you applied, then deleted.
• Training registrations, support messages and college enquiries: 12 months after we last heard from you.
• Records of interns, including fee payments: as long as the law asks us to keep them. For accounts, this is usually 8 years. [REVIEW]
• Certificate records: as long as the certificate can be checked, so a recruiter can check it years later.
• The record of your consent: as long as we keep the details it covers, so we can show you agreed. [REVIEW]
• Logs of how details were handled (such as who opened a record, and when): at least 1 year, as the DPDP Rules, 2025 ask, then deleted.

When the time is up, we delete your details and ask the services that handle them for us to delete them too, unless the law asks us to keep them. Copies in backups are removed as the backups expire. [REVIEW: confirm the backup period]

Age

The site is for people aged 18 and over. Under the DPDP Act, anyone under 18 is a child, and we would need a parent’s checked consent to use their details. We do not collect that, so we do not take details of anyone under 18.

The application form asks "Are you 18 or older?". If you answer "Not yet", the form stops and nothing is sent to us. If you think we hold details of someone under 18, tell us and we delete them. [REVIEW: the training and support forms do not ask this question yet]

Your rights

• Ask for a summary of the details we hold about you, what we do with them, and who we shared them with.
• Ask us to correct, complete or update them.
• Ask us to delete them, unless the law asks us to keep them.
• Withdraw your consent.
• Name someone who can use these rights for you if you die or cannot act yourself.
• Complain to our grievance officer, and if you are not happy with the answer, to the Data Protection Board of India.

To use any of these rights, write to us by email or from the support page. We may ask you to confirm it is you before we act. We reply within 30 days.

Email us about your details

The Data Protection Board of India takes complaints online. Under the Act, you need to write to our grievance officer first, and you can go to the Board if you are not happy with our answer or we do not answer in time. [REVIEW: add the Board’s official complaint link once confirmed]

The Act also asks you to give true details, not to pretend to be someone else, and not to make false complaints.

You can ask for this policy in English or in any language listed in the Eighth Schedule to the Constitution of India, such as Tamil or Hindi. [REVIEW: confirm how we provide translations]

Grievance officer

Nirmalkumar T, Director, EL Corp Technologies, [FILL: registered address]. Write to the grievance officer by email, or from the support page. This is also the person who answers questions about your details.

We confirm we got your message within 48 hours, and resolve it within 30 days. [REVIEW: the DPDP Rules allow up to 90 days; we use the shorter consumer law time]

Email the grievance officer

How we keep it safe

Every form is sent over HTTPS. Our database is not open to the public: only our own server can read it. Resumes sit in a private store that only our team can open. Only the people who need your details for their work can see them, and we keep a log of who opened what. The services that handle your details for us must keep them safe under their contracts. We follow the reasonable security practices that the IT Act, 2000 and the DPDP Rules, 2025 ask for.

If something goes wrong

If a data breach affects your details, we tell you without delay, by email or WhatsApp. We tell you what happened and when, what it may mean for you, what we are doing about it, what you can do to stay safe, and who to contact.

We also report it to the Data Protection Board of India within 72 hours, and to CERT-In where its rules ask us to. [REVIEW: confirm the CERT-In 6 hour reporting rule applies to us]

Changes to this policy

If we change this policy, we change the date at the top. For a big change, we also email everyone with an open application. If a change means we would use your details for a new purpose, we ask for your consent again first.