HackerHub8 — Privacy Policy

1. Introduction

HackerHub8 Company LLP ("HackerHub8", "we", "us", "our") is a DPIIT-recognized Startup India entity, registered under MSME and K-Tech Startup Karnataka, and certified under ISO 27001 and ISO 9001. We provide cybersecurity services — Vulnerability Assessment and Penetration Testing (VAPT), Managed Detection and Response (MDR), Governance Risk and Compliance (GRC), Security Operations, Cybersecurity Consulting, Incident Response, Cyber Investigation, and Security Awareness training — alongside security products including Khetaka (our AI-driven network security gateway), Martinet (our agentic endpoint security platform), Cyber Law AI (our compliance intelligence platform), and PlayCTF (our cybersecurity skilling and Capture The Flag platform). We also run workshops, Faculty Development Programs (FDPs), Skill Development Programs (SDPs), bootcamps, hackathons, internships, and corporate training programs (collectively, the "Services").

This Privacy Policy explains what personal data we collect through our website, forms, and Services, why we collect it, how we use it, and the choices you have. By using our Services you consent to the practices described in this policy. If you do not agree, please do not use the Services.

Note: PlayCTF (playctf.in) operates under its own dedicated privacy policy covering platform accounts, KYC verification, and challenge data, available on the PlayCTF platform.

2. Information We Collect

We collect information you provide directly through forms on our website, and technical data collected automatically:

• Contact & Demo Requests: name, email, phone number, purpose of inquiry, and your message when you contact us or request a demo of our services or products.
• Event Registrations: full name, email, phone number, and any message you provide when registering for a workshop, hackathon, bootcamp, or other event.
• Career & Internship Applications: name, contact number, email, age, gender, address, LinkedIn profile, resume/CV, and the role or engagement type (Intern, Full-Time, Part-Time, Freelancer) you apply for.
• Certificate Records: for participants completing an internship, workshop, or project with us, we record your name, academic year, certificate type, project title, a summary of work done, and technical skills, in order to issue and verify certificates.
• Newsletter Subscription: your email address, if you subscribe to updates or research articles.
• Technical & Usage Data: IP address, device and browser information, and analytics data collected via cookies and Google Analytics.

3. How We Use Your Information

We use personal data to:

• Respond to contact and demo requests about our services and products.
• Process registrations for events, workshops, hackathons, FDPs, and SDPs, and send related updates.
• Review internship, freelance, and job applications, including evaluating submitted resumes.
• Issue, verify, and manage certificates for interns, participants, and project contributors.
• Send newsletter updates and research articles to subscribers who opt in.
• Prevent fraud, abuse, or illegal activity and comply with legal obligations.
• Analyze website usage to improve content and user experience.

4. Legal Basis & Consent

We rely on one or more of the following legal bases to process personal data:

• Contractual necessity: processing necessary to perform a contract (e.g., enrollments, service delivery, invoicing).
• Consent: where you have given consent for specific processing (e.g., marketing emails). You may revoke consent at any time.
• Legitimate interests: for fraud prevention, network security, and improving services, balanced against your privacy rights.
• Legal obligations: to comply with applicable laws, or respond to lawful requests from public authorities.

5. Sharing & Disclosure

We do not sell your personal information. We may share data in limited circumstances:

• Service Providers: hosting providers, email/SMTP providers, and analytics platforms (e.g., Google Analytics) that support our website operations, under confidentiality obligations.
• Partners & Collaborators: academic institutions, government bodies, or industry partners for co-hosted workshops, FDPs, SDPs, or joint programs, where relevant to your registration.
• Legal & Safety: to comply with law enforcement, government requests, or to prevent fraud and protect rights.
• Company Transactions: in the event of a merger, acquisition, reorganization or sale of assets (users will be notified).

6. Cookies & Tracking

We use cookies, web beacons and similar technologies for site functionality, analytics, and marketing. You can control cookie preferences via browser settings. Disabling certain cookies may impact site functionality.

• Essential cookies: required for site login and security.
• Performance & analytics: aggregate usage metrics used to improve our Services.
• Marketing & social: optional cookies used for promotional content.

7. Data Security

We implement technical and organizational measures to protect data (access controls, encryption in transit where supported, regular security audits). However, no system is perfectly secure. If a data breach occurs, we will follow applicable notification requirements and inform affected users as required by law.

8. Data Retention

We retain personal data only as long as necessary to fulfill the purposes described, to meet legal obligations, resolve disputes, and enforce our agreements. If you request deletion, we will remove data unless retention is required by law or for legitimate business purposes (e.g., financial records).

9. Your Rights

Depending on applicable law, you may have rights including:

• Access and obtain a copy of your personal data.
• Request correction of inaccurate data.
• Request deletion or restriction of processing.
• Object to processing (including direct marketing).
• Request portability of certain data to another service provider.

To exercise your rights, contact our Grievance Officer (details below). We will verify requests to prevent unauthorized disclosures.

10. Third-Party Services

Our Services may link to third-party services and embed third-party content. We are not responsible for the privacy or security practices of external sites. Review the privacy policies of any third-party services you use.

11. Children's Privacy

We do not knowingly collect personal data from children under 13. If we learn we have collected such data without parental consent, we will promptly delete it. If you believe we have collected data of a child, contact us immediately.

12. Cross-border Transfers

We may process and store data on servers located in India or other countries. When transferring data internationally, we use appropriate safeguards and comply with applicable legal requirements for cross-border transfers.

13. Contact & Grievance Officer

If you have questions or wish to exercise your privacy rights, contact us:

14. Changes to This Policy

We may update this policy periodically. We will post the updated version with the "Last Updated" date. Continued use after updates indicates acceptance of the revised policy.

15. Important Notes

HackerHub8 Security Team