privacy policy

This Privacy Policy explains how INSTY (“INSTY”, “we”, “us”) collects, uses, shares, stores, and protects personal data when you visit our website, use our platform/tools/communities, or enroll in our programs (“Services”). This Policy should be read with our Terms & Conditions.

We process personal data in accordance with applicable Indian laws, including the Digital Personal Data Protection Act, 2023 and notified rules under it, and other applicable IT rules.

1) Who we are (Data Fiduciary) & Contact

INSTY
Address: 7th Floor, Fortune Terraces, New Link Road, Andheri (W), Mumbai – 400053, Maharashtra, India
Email (Support + Privacy/Grievance): instyoffice@gmail.com

If you have questions or requests related to your personal data, email us at instyoffice@gmail.com.

2) What personal data we collect

We may collect the following categories of personal data depending on how you interact with us:

A. Identity & contact data

  • Name, email address, phone number, date of birth/age confirmation (where required)

B. Profile & application data (for programs / talent pipeline)

  • Education, work history, portfolio links, social handles (optional), skills, interests, assessment responses/scores, interview readiness information, communication history

C. Transaction & billing data

  • Payment status, transaction reference details, invoices/receipts (note: payments are typically processed by third-party payment processors; we may not store full card/bank details)

D. Content you submit

  • Assignments, project submissions, forms, community posts/messages, files, and any “Input” you upload to our tools (if offered)

E. Technical & usage data

  • Device information, browser type, IP address, approximate location (derived), log data, pages viewed, timestamps, referral URLs, cookies and similar tracking data

F. Audio/visual data (if applicable)

  • Session recordings/photographs where sessions are recorded (as described in our Terms)

We do not intend to collect highly sensitive personal data (e.g., passwords for your other accounts, detailed medical data) unless you voluntarily provide it. Please avoid sharing such information unless specifically requested for a lawful purpose.

3) How we collect personal data

We collect personal data:

  • Directly from you (forms, enrollment, account creation, submissions, support emails, community participation)

  • Automatically (cookies/logs/analytics when you use our website/platform)

  • From partners/employers (only where relevant for interview facilitation, verification, or program delivery and where lawful)

4) Why we process your personal data (Purposes)

We process personal data to:

  1. Provide and administer our Services (enrollment, program delivery, support)

  2. Verify identity/eligibility and maintain platform integrity

  3. Conduct assessments, issue certificates (if applicable), track progress

  4. Facilitate interview opportunities/talent pipeline processes (where applicable)

  5. Communicate program updates, operational messages, and support responses

  6. Improve our Services, troubleshoot issues, prevent fraud/abuse

  7. Maintain records for accounting, compliance, dispute resolution, and enforcement of terms

  8. Meet legal obligations and respond to lawful requests

We follow purpose limitation, data minimisation, security safeguards, and storage limitation principles as required under applicable law.

5) Legal basis / grounds for processing

Where required, we process personal data based on:

  • Your consent (e.g., optional marketing, certain profile sharing, certain tool inputs), and you may withdraw consent as described below

  • Performance of a contract (to deliver Services you request)

  • “Legitimate uses” / lawful purposes permitted under applicable law (e.g., where you voluntarily provide data for a specified purpose)

  • Compliance with law (tax, accounting, legal requests)

6) How we share personal data

We do not sell your personal data.

We may share personal data only on a need-to-know basis with:

A. Service providers (Data Processors)

  • Hosting/cloud storage, email/communication tools, analytics, customer support tools, payment processors, and video/meeting tools (to operate and deliver Services). Data fiduciaries remain responsible for processing done on their behalf and are expected to use contracts with processors.

B. Employers/partners (Talent pipeline / interviews)

  • With your participation/eligibility in a program or pipeline, we may share relevant profile details (e.g., resume/portfolio/assessment highlights) with potential employers/partners for interview facilitation and evaluation. We will aim to share only what is necessary for that purpose.

C. Legal and compliance

  • Regulators, courts, law enforcement, or government agencies where required by law or to protect rights/safety.

7) Cookies & tracking technologies

We use cookies and similar technologies to:

  • Keep the website/platform functional

  • Understand usage and improve performance

  • Measure marketing effectiveness (if applicable)

You can manage cookies through your browser settings. Disabling cookies may affect site functionality.

8) Data retention

We retain personal data only for as long as necessary for the purposes described in this Policy, including:

  • Delivering Services and supporting users

  • Maintaining records for legal, tax, accounting, and dispute resolution needs

Retention is guided by storage limitation expectations under applicable law.

9) Security safeguards

We maintain reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. Security expectations and “reasonable security practices” are recognised under Indian IT rules and data protection law.

No system is 100% secure; however, we work to continuously improve safeguards.

10) Personal data breach

If a personal data breach occurs, we will take reasonable steps to investigate, mitigate, and, where required, notify affected users and the appropriate authority (e.g., the Data Protection Board of India) in the manner prescribed by law.

11) Your rights (Data Principal rights)

Subject to applicable law, you may have rights including:

  • Access to information about personal data processing

  • Correction, completion, updating, and erasure (where applicable)

  • Withdrawal of consent where consent is the basis of processing

  • Grievance redressal

  • Nomination (to allow another individual to exercise rights in case of death/incapacity)

To exercise rights, email instyoffice@gmail.com with your request and verification details. We may need to verify identity before acting.

12) Children’s data

Our Services are generally intended for individuals 18+. Where processing of children’s data may occur, we will take steps consistent with applicable legal requirements (including parental/guardian consent where required) and we do not knowingly engage in targeted advertising or behavioural monitoring directed at children where prohibited.

13) Cross-border transfers

We may store/process personal data using service providers located in India or other jurisdictions. Where cross-border transfer restrictions apply, we will follow applicable legal requirements and safeguards.

14) Third-party links

Our Services may contain links to third-party websites or tools. Their privacy practices are governed by their own policies. INSTY is not responsible for third-party privacy practices.

15) Changes to this Privacy Policy

We may update this Policy periodically. We will update the “Last Updated” date and may provide additional notice where appropriate. Continued use of Services after updates indicates acceptance of the updated Policy.

16) Contact / Grievance

For privacy questions, requests, or complaints:
Email: instyoffice@gmail.com
Address: 7th Floor, Fortune Terraces, New Link Road, Andheri (W), Mumbai – 400053, Maharashtra, India