Privacy Policy

1. Introduction

Welcome to DataraFlow, a completely free intensive 6-month internship program focused on Data Science, Machine Learning, and Generative AI. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you apply to, participate in, or interact with our program.

By accessing our website, submitting an application, or participating in the DataraFlow program, you agree to the terms outlined in this Privacy Policy. If you do not agree with these terms, please do not use our services or provide us with your personal information.

2. Information We Collect

We collect various types of information to provide and improve our program services:

2.1 Application Information

• Personal Identification: Full name, email address, phone number, physical address
• Professional Information: GitHub profile, LinkedIn profile, educational background, work experience
• Application Materials: Resume, cover letter, portfolio links, motivation statement
• Technical Information: Technical skills, programming experience, project descriptions
• Financial Information: Bank account details (only if selected for merit-based cash awards or scholarships)

2.2 Program Participation Data

• Attendance Records: Daily and weekly attendance tracking, roll call participation
• Assignment Submissions: Weekly tasks, projects, code submissions, publications
• Performance Metrics: Task completion rates, assignment grades, project assessments, quiz results, competition rankings
• Peer Interactions: Accountability pod discussions, peer feedback, collaboration records
• Publications: Blog posts, articles, GitHub repositories, technical writings
• Achievement Data: Competition wins, milestone completions, badges earned

2.3 Communication Data

• Contact Form Submissions: Messages sent through our contact form
• Email Communications: Correspondence between participants, mentors, and administrators
• Platform Messages: In-platform notifications, announcements, and direct messages

2.4 Technical and Usage Data

• Device Information: IP address, browser type, device type, operating system
• Usage Analytics: Pages visited, time spent on platform, feature usage patterns
• Login Information: Login times, authentication logs, session data
• Cookies and Tracking: Session cookies, preference cookies, analytics cookies

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Program Administration

• Processing and evaluating applications
• Managing participant enrollment and program logistics
• Tracking attendance, assignments, and performance
• Facilitating peer accountability groups and collaborations
• Enforcing program policies, including removal for non-performance
• Evaluating participants for merit-based awards and scholarships

3.2 Merit-Based Awards and Scholarships

• Reviewing applications to identify candidates for laptop scholarships
• Evaluating performance data to determine eligibility for cash awards
• Processing and distributing merit-based gifts and recognitions
• Verifying identity and bank information for cash award disbursement
• Tracking and reporting award distributions
• Communicating with award recipients regarding logistics

3.3 Educational Services

• Delivering daily learning milestones and weekly assignments
• Providing personalized feedback and guidance
• Organizing competitions, assessments, and evaluations
• Generating performance reports and progress tracking
• Creating and maintaining your learning portfolio

3.4 Communication

• Sending program updates, announcements, and reminders
• Responding to inquiries, support requests, and feedback
• Facilitating peer-to-peer and mentor-participant communications
• Notifying about important deadlines and milestones
• Sharing program achievements and success stories
• Announcing award recipients and celebrating achievements

3.5 Platform Improvement

• Analyzing usage patterns to improve user experience
• Developing new features and educational content
• Conducting research on learning effectiveness
• Troubleshooting technical issues and bugs
• Optimizing platform performance and security

3.6 Compliance and Safety

• Preventing fraud, abuse, and unauthorized access
• Ensuring compliance with program policies and guidelines
• Meeting legal obligations and responding to legal requests
• Protecting the rights and safety of participants and staff
• Maintaining financial records for scholarship and award distributions

4. Information Sharing and Disclosure

We are committed to protecting your privacy. We do not sell your personal information. However, we may share your information in the following circumstances:

4.1 With Other Participants

• Public Profile Information: Name, bio, GitHub profile, LinkedIn profile (with your consent)
• Published Content: Your weekly publications, articles, and projects (as required by program)
• Leaderboard Data: Performance rankings, achievement badges (anonymized or with consent)
• Peer Feedback: Shared within accountability pods for learning purposes
• Award Recognition: Names of scholarship, cash award, and gift recipients (with consent)

4.2 With Service Providers

We work with third-party service providers who assist us in operating the program:

• Cloud Hosting: Microsoft Azure (for data storage and application hosting)
• Email Services: Email delivery platforms for program communications
• Analytics Tools: Usage analytics and performance monitoring services
• AI Services: Azure OpenAI for providing AI-powered features and assistance
• Financial Services: Banks or payment processors for disbursing cash awards and scholarships (only when applicable)

All service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.3 For Legal Reasons

We may disclose your information when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with legal obligations, court orders, or government requests
• Enforce our Terms of Service and other agreements
• Protect the rights, property, or safety of DataraFlow, participants, or others
• Investigate and prevent fraud, security issues, or technical problems
• Respond to emergencies that threaten the health or safety of any person
• Maintain records for tax reporting or financial compliance related to awards

4.4 Business Transfers

If DataraFlow is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our website of any change in ownership or control of your personal information.

4.5 With Your Consent

We may share your information with other parties when you give us explicit consent to do so, such as when featuring your success story, award recognition, or project in our marketing materials.

5. Data Security

We implement industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

• Encryption: Data transmission is protected using SSL/TLS encryption; sensitive financial data is encrypted at rest
• Access Controls: Role-based access restrictions limit who can view your data
• Secure Storage: Data is stored on secure Azure cloud servers with backup systems
• Authentication: Strong password requirements and secure login mechanisms
• Monitoring: Regular security audits and monitoring for suspicious activities
• Staff Training: All team members are trained on data protection best practices
• Financial Data Protection: Bank account information is handled with heightened security measures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Application Data: Retained for 2 years after application submission or rejection
• Participant Records: Retained for 5 years after program completion or departure
• Performance Data: Retained for 5 years for evaluation and improvement purposes
• Published Content: Retained indefinitely as part of program archives (with attribution)
• Communication Records: Retained for 3 years or as required by law
• Technical Logs: Retained for 90 days for security and troubleshooting purposes
• Award Records: Retained for 7 years for financial compliance and tax reporting purposes
• Financial Information: Securely deleted immediately after award disbursement unless legally required

After the retention period expires, we will securely delete or anonymize your personal information. You may request earlier deletion by contacting us (see Section 10), subject to legal retention requirements.

7. Your Rights and Choices

You have the following rights regarding your personal information:

7.1 Access and Portability

• Access: Request a copy of the personal information we hold about you
• Data Export: Download your application data, submissions, and publications
• Dashboard Access: View your performance metrics, attendance, and submissions through your participant dashboard
• Award Information: Request information about awards and scholarships you've received

7.2 Correction and Updates

• Profile Updates: Update your contact information, bio, and profile links
• Corrections: Request corrections to inaccurate or incomplete information
• Self-Service: Many updates can be made directly through your account settings

7.3 Deletion

• Account Deletion: Request deletion of your account and associated data
• Right to be Forgotten: Request removal of your personal information (subject to legal exceptions)
• Limitations: Some data may be retained for legal compliance (e.g., award records for tax purposes), archives, or when deletion would impair others' rights

7.4 Objection and Restriction

• Marketing Opt-Out: Unsubscribe from promotional emails (program-essential communications will continue)
• Processing Objection: Object to certain uses of your data
• Restriction Request: Request limitation on how we process your information
• Award Recognition Opt-Out: Choose not to be publicly recognized for awards received

7.5 Withdrawal of Consent

Where we process your information based on your consent, you may withdraw that consent at any time. This will not affect the lawfulness of processing before your withdrawal.

8. Children's Privacy

The DataraFlow program is designed for adults aged 18 and older. We do not knowingly collect personal information from individuals under 18 years of age. If you are under 18, please do not submit an application or provide any information to us.

If we become aware that we have collected personal information from someone under 18 without parental consent, we will take steps to delete that information as quickly as possible. If you believe we have collected information from a minor, please contact us immediately at info@dataraflow.org.

9. International Data Transfers

DataraFlow operates online and may be accessed from anywhere in the world. Your information may be transferred to and processed in countries other than your country of residence, including the United States and countries where our service providers operate.

These countries may have data protection laws that differ from those in your country. By using our services, you consent to the transfer of your information to countries outside your country of residence. We will take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy.

10. Third-Party Links and Services

Our platform may contain links to third-party websites, services, or resources (such as GitHub, LinkedIn, or external learning resources). This Privacy Policy does not apply to those third-party sites or services.

We are not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of any third-party sites you visit. When you share your publications or projects on external platforms, those platforms' privacy policies will apply to that content.

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our platform:

11.1 Types of Cookies We Use

• Essential Cookies: Required for platform functionality, authentication, and security
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Help us understand how you use the platform and improve it
• Performance Cookies: Monitor platform performance and user experience

11.2 Managing Cookies

You can control cookies through your browser settings. However, disabling certain cookies may limit your ability to use some features of our platform. Most browsers allow you to refuse cookies or delete cookies that have already been set.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify active participants via email if changes are material
• Post a notice on our platform highlighting the changes
• Maintain an archive of previous versions for reference

Your continued use of our services after changes become effective constitutes your acceptance of the revised Privacy Policy. We encourage you to review this policy periodically.

13. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about categories and specific pieces of personal information collected
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the sale of personal information (Note: We do not sell personal information)
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, contact us at info@dataraflow.org. We will verify your identity before processing your request.

14. European Union (GDPR) Rights

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Legal Basis for Processing: We process your data based on consent, contractual necessity, legitimate interests, or legal obligations
• Data Protection Officer: You may contact our Data Protection Officer at info@dataraflow.org
• Supervisory Authority: You have the right to lodge a complaint with your local data protection authority
• Cross-Border Data Transfers: We use appropriate safeguards for international transfers

15. Program-Specific Privacy Considerations

15.1 Accountability and Performance Tracking

As part of our intensive program structure, we track detailed performance metrics, attendance, and deliverables. This data is essential for:

• Ensuring program quality and maintaining high standards
• Facilitating peer accountability systems
• Making decisions about participant continuation or removal
• Providing personalized feedback and support
• Evaluating merit for scholarships, cash awards, and gifts

15.2 Merit-Based Awards and Scholarships

DataraFlow occasionally provides merit-based benefits to participants, including:

• Laptop Scholarships: Awarded based on application review, financial need, and commitment level
• Cash Awards: Granted based on exceptional performance, competition wins, and milestone achievements
• Gifts: Provided to recognize outstanding contributions, publications, or community engagement

Privacy Considerations for Awards:

• We collect additional information (e.g., bank account details) only from award recipients
• Financial information is encrypted and securely stored
• Award recipients may be publicly recognized unless they opt out
• Award records are maintained for tax and compliance purposes
• Selection criteria and processes are transparent and merit-based

15.3 Public Publications

The program requires weekly public publications. Please note:

• Published content (articles, blog posts, projects) will be publicly accessible
• You retain copyright to your original work
• DataraFlow may showcase exemplary publications for promotional purposes
• You are responsible for not including sensitive or confidential information in public posts

15.4 Peer Interactions

Accountability pods and peer feedback systems involve sharing certain information with fellow participants:

• Progress updates and task completion status
• Peer reviews and constructive feedback
• Collaborative project information

All participants are expected to respect each other's privacy and maintain confidentiality of sensitive information shared within pods.

15.5 Removal and Records

The program has a strict policy of removing participants who consistently fail to meet requirements. If you are removed:

• Your access to the platform will be terminated
• Your participation records will be retained per our retention policy
• Published content you created will remain publicly available (as it's already public)
• You may request deletion of non-public personal data per Section 7.3
• Any awards or scholarships received will remain valid (non-refundable)

15.6 No Program Fees

Important: DataraFlow is a completely free program. We will never ask participants to pay any fees, tuition, or charges. We do not collect payment information from participants. If anyone requests payment claiming to represent DataraFlow, please report it immediately to info@dataraflow.org.