Privacy Policy

Information we collect

Depending on how you interact with us, we may collect:

Account information

Name, email address, phone number, login details and account identifiers.

Student information

College/university, department, course or programme information and student verification details.

College ID

The ID image or document uploaded to verify current student status.

Team information

Team name, teammate details, Team ID and team status.

Payment information

Payment status, transaction ID, amount and related billing information. Full card or banking credentials are processed by our payment provider rather than by SecureMojo directly.

Competition information

Challenge submissions, reports, evidence, screenshots, source URLs, tool-use disclosures, scores, rankings and appeal information.

Workshop information

Registration or participation records relating to the OSINT Foundations Workshop.

Finalist information

Information reasonably necessary to organise the Bengaluru Final and finalist accommodation.

Communications

Emails, enquiries, complaints, support tickets and other correspondence.

Technical information

IP address, browser type, device information, login activity, timestamps, security logs and similar information required to operate and secure the platform.

Cookie information

As described in our Cookie Policy.

Why we use your information

We may process personal information to:

• create and administer participant accounts;
• register and manage teams;
• confirm participant eligibility;
• verify college/university status;
• process registration payments;
• conduct the Preliminary and Final rounds;
• operate scoring, judging and appeals;
• investigate potential integrity violations;
• communicate schedules, results and important competition information;
• deliver the OSINT Foundations Workshop;
• arrange finalist accommodation;
• issue certificates and prizes;
• respond to participant enquiries;
• operate, secure and improve our website and competition systems;
• maintain records required for legal, financial, fraud-prevention or security purposes;
• comply with applicable law.

Where applicable, we process personal data on the basis of consent or another lawful basis permitted by applicable law.

College ID verification

College and university ID cards are collected solely to verify participant eligibility and identity for the Challenge.

Access to these records is restricted to personnel or service providers who require access for verification or security purposes.

We retain college-ID verification documents for three months from the date the document is uploaded, after which they are securely deleted unless retention is required by law or is reasonably necessary to resolve an active dispute or investigation.

Payment processing

Registration payments are processed through Razorpay.

Payment providers may collect and process card, UPI, banking or other financial information under their own privacy terms.

SecureMojo does not store full payment-card credentials. We hold the payment status, amount and the provider's transaction and order references.

How we share information

We may share personal information where reasonably necessary with:

Service providers

Supporting hosting, cloud infrastructure, email, authentication, payment processing, analytics and technical operations.

Judges and competition staff

For scoring, verification, appeals and integrity review.

Accommodation providers

Where necessary to arrange accommodation for Finalists.

Professional advisers

Including legal, accounting or security advisers.

Authorities

Government or regulatory authorities where disclosure is required by applicable law.

We do not sell participant personal information.

Public competition information

Where SecureMojo displays a public leaderboard, finalist announcement or winner announcement, the information displayed is limited to information disclosed to participants in advance, such as team name, institution, rank and score.

Individual participant names are published only where appropriate and where participants have been informed.

Marketing and communications

We may send registered participants operational communications relating to registration, verification, workshop information, competition schedules, rules, technical notices, results, finalist information, certificates and prizes.

Where promotional communications are optional, recipients may unsubscribe using the mechanism provided.

Unsubscribing from promotional messages will not necessarily stop essential competition-related communications.

Cookies and analytics

We use cookies and similar technologies for purposes such as authentication, security, preferences and, where enabled, website analytics.

Further information is available in our Cookie Policy.

Data retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including competition administration, dispute resolution, security, accounting and legal compliance.

Different categories of information may have different retention periods. College-ID verification material is subject to the specific three-month policy described above.

Financial or transaction records may be retained for longer where required by law.

Security

SecureMojo implements reasonable technical and organisational safeguards designed to protect participant information against unauthorized access, disclosure, alteration, loss or misuse.

However, no online service or storage system can guarantee absolute security.

International processing

Some technology or cloud service providers may process information outside India.

Where personal data is transferred or processed internationally, SecureMojo will take the steps required under applicable Indian law and any applicable governmental restrictions.

The DPDP Act permits the Central Government to restrict transfers to notified countries or territories.

Your privacy choices and rights

Subject to applicable law and the relevant provisions being in force, you may be able to:

• request information about your personal data;
• request correction, completion or updating of inaccurate data;
• request erasure where retention is no longer required;
• withdraw consent where processing relies on consent;
• raise a grievance about our handling of your personal information.

The DPDP Act expressly provides for access, correction and erasure, and grievance mechanisms, subject to its commencement and applicable procedures.

Requests may be sent to privacy@smosint26.com. We may need to verify your identity before acting on a request.

Participants under 18

Indian data-protection legislation defines a child as an individual below 18 years of age.

Where participants under 18 are permitted to register, SecureMojo may require parent or lawful-guardian consent and any additional steps required by applicable law.

Third-party websites

Challenge tasks and website content may link to external websites and OSINT services.

SecureMojo does not control the privacy practices of those third parties.

Participants should review third-party privacy policies before providing information to external services.

Changes to this policy

We may update this Privacy Policy where our practices, technology or legal obligations change.

Material updates will be reflected by changing the Last Updated date and, where appropriate, by notifying registered participants.

Contact and grievances

For privacy questions, requests or grievances:

Entity

Securemojo Consulting Private Limited

Address

4th Floor, 133/2, Residency Road, Bangalore — 560025

Privacy / grievance email

privacy@smosint26.com