This policy explains what personal data CorpGurus collects, why, who it is shared with and the choices you have. It is written to meet India’s Digital Personal Data Protection Act, 2023 and applies to trainers, company users, training participants who receive feedback links or certificates, and visitors.
1. Data we collect
- Account data: name, email, password hash, phone (optional), time zone, language, profile photo, role.
- Trainer profile: headline, bio, skills, cities, delivery modes, day rates, certifications and the documents you upload to verify them, work history, courses, gallery photos, availability, bank/payment details for invoices, GSTIN.
- Company data: company name, website, industry, size, logo, GSTIN, billing address, team members.
- Activity: requirements, applications, comments, posts, messages and attachments, ratings, recommendations, work orders and typed signatures, invoices, escrow records, saved searches, notifications.
- Participants: when a company or trainer issues certificates or feedback links, we hold participant names and (if given) email addresses, and anonymous feedback responses.
- Technical: IP address, browser and device information, pages visited, push-notification subscriptions, and cookies needed to keep you signed in and remember your language.
- Sign-in with Google or LinkedIn: your name, email and profile photo from the provider. We do not receive your provider password.
2. How we use it
- To run the marketplace: show profiles and requirements, match trainers to requirements, deliver messages and notifications, generate work orders, invoices and certificates.
- To verify certifications and company domains, and to display badges based on that verification.
- To process payments and escrow through Razorpay and Stripe, and to send billing emails.
- To send transactional email, WhatsApp/SMS and push notifications you have enabled. Marketing email is sent only with consent and always has an unsubscribe link.
- To keep the Platform secure: rate limiting, fraud and abuse detection, audit logs of staff actions.
- To improve the Platform using aggregated, de-identified usage statistics.
4. Retention
Account data is kept while your account is active and for 90 days after deletion to handle disputes, then removed or anonymised. Invoices, escrow records and work orders are kept for 8 years to meet Indian tax and accounting rules. Verification documents are deleted 12 months after a decision. Audit logs are kept for 2 years. Anonymous feedback responses are retained indefinitely in aggregate.
5. Your rights and choices
- Access and export: download your data any time from Settings (CSV and JSON).
- Correction: edit your profile and company details in Settings.
- Deletion: request account deletion from Settings or by email. Some records must be retained as described above.
- Consent: withdraw marketing, WhatsApp/SMS or push consent in Settings at any time.
- Grievance: write to our grievance officer at hello@corpgurus.in. We respond within 15 days. You may also approach the Data Protection Board of India.
7. Security
Passwords are hashed with bcrypt; sessions are signed tokens in HTTP-only cookies; connections use HTTPS; API keys and webhook secrets are stored hashed or encrypted; verification documents are served only to staff; staff actions on member accounts are logged and shown to the member. No system is perfectly secure, so please use a strong, unique password.
8. Children
The Platform is for professionals aged 18 and over. We do not knowingly collect data from children.
9. International transfers
Some providers process data outside India (for example, email delivery). We choose providers with adequate safeguards and contractual protections. USD billing through Stripe involves data processing in the United States.
10. Changes
We will post updates here and notify you by email of material changes at least 14 days before they take effect.
Questions about this document: hello@corpgurus.in or the contact page.