Hackathon Privacy Notice

Vastoco Private Limited is the data fiduciary for your personal data under the Digital Personal Data Protection Act, 2023 ("DPDP Act"). This notice covers the Vastoco Hackathon and is read together with our general Privacy Policy.

Vastoco Private Limited, CIN U63122UW2026PTC259452, registered office at 38, Lokendra Puri, Gari Bhadauriya, Agra, Uttar Pradesh 282002, India. General contact: info@vastoco.in. Grievances and privacy requests: grievance@vastoco.in.

• Registration: your name, email, mobile number, city, occupation, college or organisation, participation type, team name where applicable, optional referral source and consent version.
• Teammates: the name and email of each teammate, given by the person who registers the team.
• Payment: amount, status and Razorpay reference IDs. Not your full card, UPI PIN or banking password.
• Submission: your project title, description and link, and the time you submitted.
• Prize details for winners: PAN and bank details, collected only when a prize is paid.
• Technical data: IP address, device and browser details and security logs.

You are giving us your teammates' personal data. Before you do, make sure each teammate knows and agrees that we will use their data as described here. We use it only for the hackathon, for example to send the problem statement and the e-certificate.

• To register you, take your payment and confirm your entry.
• To email you the problem statement, reminders and results.
• To receive and evaluate your submission and decide the results.
• To publish the shortlist and winners and to send e-certificates.
• To pay prizes and meet tax duties.
• To prevent cheating and misuse, handle complaints and meet legal duties.
• To tell you about future Vastoco hackathons only if you agree separately.

If your entry is shortlisted or wins, your name or team name, project title and college or organisation may be shown on the hackathon results page. We do not publish your email address, phone number, PAN or bank details. Search engines may index the results page.

Only the people who run and judge the hackathon see your registration and submission details. We use service providers for hosting, storage, database, email, messaging and payments, such as Razorpay and SendGrid, and they may use your data only to provide that service to us. We do not sell your data. We may disclose it to tax authorities, courts or regulators when the law requires.

• Registration and submission data is kept for up to 12 months after the hackathon ends, and is then deleted or anonymised.
• Payment, prize and tax records are kept for as long as tax and accounting law require.
• After the hackathon ends you may ask us to remove your name from the results page.

We use your data to run the hackathon because you registered for it. Marketing messages need your separate consent, which you can withdraw at any time. If you withdraw consent for something we need to run the hackathon, we may not be able to keep your entry.

• Ask for a summary of the personal data we hold about you.
• Ask us to correct or complete it, or to erase it where we have no legal reason to keep it.
• Withdraw consent, and nominate a person to exercise your rights if you die or cannot act.
• Make a complaint about how your data was handled.

Write to grievance@vastoco.in from your registered email. We aim to reply within 30 days.

You must be 18 or over to take part. We do not knowingly collect data from children.

We use HTTPS, access controls and limited staff access. If a personal data breach happens, we will inform affected people and the Data Protection Board of India as the law requires.

We may update this notice when our services or the law change. The new effective date will be shown at the top. We will give reasonable notice of a material change, and where the law requires your fresh consent we will ask for it. A change does not reduce any right you already have under the law.

If you have a complaint about this document, your data or how you were treated on Vastoco, write to our Grievance Officer. You can also use the Grievance Redressal page to see the full process and where to escalate.