Privacy Policy

1. Introduction

Thread Security Education ("TSE", "we", "our", or "us") operates the training platform, live cyber sandboxed labs, assessment management system, and verified TS-ID credentialing services available at threadsecurity.in. We are committed to safeguarding the privacy and security of our students, applicants, website visitors, and institutional partners.

This Privacy Policy explains how we collect, process, store, and disclose your personal and academic data when you register for courses, attend masterclasses, take assessments, or use our sandboxed environments.

2. Information We Collect

We collect information in the following categories:

• Personal Identification: Full name, email address, phone number, physical address, educational qualifications, and government-issued ID for TS-ID verifiable credentials.
• Account Credentials: Passwords, session tokens, multi-factor authentication (MFA) codes, and clearance roles.
• Academic & Lab Activity: Assessment attempt history, answers, scoring metrics, test completion timers, live lab sandboxed terminal logs, and tamper-audit telemetry.
• Payment & Billing Data: Transaction references, GST invoices, and payment confirmation IDs. Note: Raw credit card/UPI PIN information is processed securely by RBI-licensed payment gateways and is never stored on TSE servers.
• Technical Data: IP addresses, browser types, device fingerprints, operating system details, and session cookies.

3. Purpose of Data Processing

We process your personal information exclusively for legitimate educational and security purposes:

4. Data Protection & Security Standards

As a premier cybersecurity institute, we enforce rigorous technical controls to protect your data against unauthorized access, loss, or manipulation:

• HMAC-SHA256 encrypted session vaults and HttpOnly, Secure, SameSite cookie architectures.
• TLS 1.3 encryption across all communication endpoints in transit and AES-256 for persistent database storage.
• Strict Role-Based Access Control (RBAC) preventing unauthorized student-to-student or student-to-admin data visibility.
• Air-gapped sandboxed virtual machines preventing lab exploits from spilling into identity data stores.

5. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. Data is shared strictly under confidential arrangements with:

• Verified placement partners (only with your explicit opt-in for recruitment drives).
• Authorized cloud infrastructure providers hosting our sandboxed compute labs.
• Statutory or law enforcement authorities when mandated under applicable Indian legal statutes.

6. Student Rights

Under the Digital Personal Data Protection (DPDP) Act, you possess the right to:

• Access a summary of personal data held about you.
• Request correction or rectification of outdated contact or educational details.
• Request erasure of your non-regulatory personal data upon program completion.
• Withdraw consent for non-essential communications at any time.