01 / CONTROLLER
Data Controller & Scope
The data controller responsible for personal information collected through this website is VINASTRA AEROSPACE PRIVATE LIMITED, headquartered in Hyderabad / Bengaluru, India. This policy applies to all visitors, registered portal users, students, professionals, investors, and prospective research fellows.
02 / COLLECTION
Information We Collect
We collect information provided directly by you, including: full name, verified email address, institutional affiliation or organization, chosen platform role (Student, Professional, or Investor), and inquiries submitted through our contact forms or research applications. Technical diagnostic metadata (IP address, browser user-agent) is processed strictly for telemetry security.
03 / PURPOSE
Purpose of Processing
Data is processed solely to: authenticate and secure access to our user accounts; evaluate collaboration and fellowship applications; provide institutional investor materials upon legitimate interest; prevent automated spam and security attacks; and maintain our regulatory records in accordance with applicable laws.
04 / ARCHITECTURE
Authentication & Cloud Security
User identity authentication and profile databases are managed using Google Firebase Authentication and Cloud Firestore, utilizing industry-standard TLS 1.3 encryption in transit and AES-256 encryption at rest. Vinastra enforces strict role-based access controls and granular security rules.
05 / COOKIES
Cookies & Local Storage
Our website uses strictly necessary technical tokens (stored in localStorage or session cookies) solely to persist your authentication session and interface preferences. We do not use third-party behavioral advertising cookies, cross-site trackers, or sell your personal data to data brokers.
06 / RETENTION
Data Retention & Disposal
We retain account data only for as long as your account remains active or as required to fulfill the technical and legal purposes outlined in this policy. When data is no longer necessary, it is securely deleted or anonymized in accordance with standard cryptographic erasure protocols.
07 / YOUR RIGHTS
User Data Rights
Under India's Digital Personal Data Protection Act (DPDPA 2023) and recognized global data privacy principles, you have the right to request access to the personal data we hold about you, request rectification of inaccurate records, request deletion of your account, or withdraw consent at any time.
08 / GRIEVANCES
Grievance Redressal
To exercise your data rights, request complete account deletion, or lodge a data privacy grievance, please contact our Data Protection and Grievance Officer directly via email at thesparkofwisdom@gmail.com. We respond to all verified requests within statutory timeframes.