Version 1.0 · In force from 1 August 2026 · Silverit Technologies
The Privacy Policy says what we collect and why. This page says how it is kept safe, who is accountable for it, and what to do if you think something has gone wrong.
Who is accountable
Silverit Technologies is the Data Fiduciary for all personal data described in the Privacy Policy. That means we decide what is collected and why, and we are answerable for it.
| Grievance Officer | Mohak Gupta, Founder |
| Email | hello@silverit.app |
| Post | Silverit Technologies, 4th Floor, Regus Business Center, Rectangle 1, Saket, New Delhi 110017 |
To be confirmedIndian law requires a published contact who can answer questions about how personal data is handled. Named above as the Founder, using the general address. If you would rather this be a dedicated address such as privacy@silverit.app, or a different person as the organisation grows, change it here and nowhere else.
If you have a complaint
- Write to the Grievance Officer at the address above. Tell us the student’s name and school, and what you believe has gone wrong.
- We will acknowledge within 3 working days and respond substantively within 30 days.
- If you are not satisfied, you may escalate to the Data Protection Board of India, which is the statutory body for complaints about personal data in India.
You do not have to exhaust our process before going to the Board, but telling us first is usually faster.
How we protect the data
Access
- Access to personal data is limited to the people who need it to run the Bootcamp.
- Individual accounts, not shared logins, so any access can be traced to a person.
- Access is removed when someone stops working on Silverit.
In transit and at rest
- The site and service are served over HTTPS. There is no unencrypted route in.
- Personal data is encrypted at rest by our infrastructure providers.
- Bill images are stored separately from the identity records they belong to, and joined only when a claim is being verified.
By design
- We collect the minimum the Bootcamp needs, and nothing for a purpose we have not named.
- The site carries no advertising cookies, no third-party analytics and no tracking scripts. There is nothing to secure because there is nothing collecting.
- Data sent to our OCR provider carries no student identity alongside it.
Children’s data
Every participant is under 18, so the strictest tier applies to every account without exception. Four things follow, and none of them can be unlocked by consent:
- We do not carry out behavioural tracking of a student.
- We do not profile a student.
- We do not direct targeted advertising at a student.
- We do not process a student’s data in any way likely to have a detrimental effect on their wellbeing.
Verifiable parental consent is obtained before any processing begins, and the consent record is retained so that we can show it was properly obtained.
Our service providers
These are the categories of provider that process personal data on our instructions. They may not use it for their own purposes.
| Purpose | What they receive |
|---|
| Website and application hosting | Whatever is stored in the service, held encrypted |
| Optical character recognition on bills | The bill image only, without student identity |
| Email delivery | Parent email address and message content |
| WhatsApp messaging | Parent mobile number and message content |
To be confirmedNaming each provider is better practice than listing categories, and some regulators expect it. Once the console is built and the providers are fixed, replace the table above with named companies and the country each processes in.
If there is a breach
If personal data is exposed, lost or accessed without authorisation, we will:
- Contain it first, and establish what was affected and whose.
- Notify the Data Protection Board of India, as required.
- Notify every affected parent directly, by email and WhatsApp, telling them what happened, what data was involved, what we have done, and what they should do.
- Publish a summary on this page once the immediate risk has passed.
We will not wait until an investigation is complete before telling people. Being told late is worse than being told twice.
Schools
A participating school does not hold or process student data for the Bootcamp, and carries no responsibility for it. The school shares information and encourages participation. Registration, consent, rewards and all personal data are handled by Silverit directly with the parent.
Changes to this page
Any change is posted here with the version note updated. Where a change is material and affects an active participant, the registered parent is notified by email and WhatsApp before it takes effect.
