Privacy notice

1. Who we are

MESIC (Medak Employment, Skills & Industry Connect) is run by the District Administration, Medak, Government of Telangana. For the personal data on MESIC, the District Administration is the data fiduciary under the Digital Personal Data Protection Act, 2023 (the DPDP Act).

This notice explains what we collect, why, who can see it, how long we keep it, and how you use your rights. You can ask for it in Telugu or any language in the Eighth Schedule of the Constitution by writing to the Grievance Officer.

2. What we collect

Everyone

Name, email address, mobile number, your role, and a record of sign-ins (time, IP address and device) kept for security

Students

Roll number, college, course, branch, year of passing, marks (aggregate, CGPA, backlogs, 10th and 12th), date of birth and gender if you add them, photo, resume, skills, languages, experience, projects, where you live and would work, the jobs you apply to and your answers, interview attendance, offers, placements you report, and your reason if you opt out of placements

Students filling a college's collection link

The details above, before you have a MESIC account: your name, email address, mobile number, roll number, course, branch, year of passing and marks (aggregate, CGPA, backlogs, 10th and 12th), as you enter them. They are held for your college to check, and become your account only when a placement coordinator approves them

Students under 18

Your parent or guardian's name, relationship and mobile number, recorded with their agreement — on a collection link too, before any account exists

College coordinators

Your designation and college

Recruiters

Your designation and company

3. Why we use it

• To confirm who you are and let you sign in with a code sent to your email.
• To check your academic record with your college and show you only the jobs you're eligible for.
• To send your profile, resume and answers to the employer when you apply — and only then.
• To let your college run placements: release jobs, schedule interviews, apply its placement policy and verify placements.
• To tell you what happens next, in the app, by push notification and by email.
• To publish district placement numbers. These are counts and averages; they never name you.
• To keep MESIC secure and keep a record of who changed what.

We do not sell your data, show advertising, or use your data to profile or track you for anything other than placements.

4. Who can see it

Your college

Your profile and academic record, your applications, offers, interviews and placements

A college whose collection link you fill

What you entered on that form, and whether a parent or guardian agreed, so its placement cell can check it against their records and add you

An employer

Only students who applied to its jobs: their profile, resume, answers and progress in that job

District Administration, Medak

Everything, to verify accounts, resolve problems and oversee placements

Service providers

Neon (database, Singapore), Vercel (hosting), Cloudflare R2 (files), Resend (email, USA) and your browser's push service store or carry data for us under contract, and may not use it for themselves

Some of these providers keep data outside India. The DPDP Act allows this except to countries the Government restricts; we will move it if a country we use is restricted.

5. How long we keep it

• While your account is open.
• When you delete your account, we erase your personal data 7 days later (you can cancel until then). Your resume, photo and documents are deleted, and your name, email, phone and profile are removed.
• We keep a record with no name on it that an application or placement happened, so your college's placement numbers stay correct; the security log of actions on your account, without your name; and the record that you agreed to this notice.
• Sign-in codes are deleted within a day. Database backups roll over within 30 days.
• What you fill on a college's collection link, before you have an account: a form you started and left is deleted after 30 days, one your college sent back to you 30 days after their decision, and one they approved 90 days after that — by then your account is the record. A form you sent and your college has not decided on is never deleted automatically; we remind them instead, because deleting a real student's details over a slow week would be the worse mistake.

6. Your rights

See your data

Settings → Download my data gives you everything MESIC holds about you in one file

Correct it

Edit your profile. Details your college verified — roll number, marks, course — you ask your college to correct from your profile

Delete it

Settings → Delete my account. We erase your data after 7 days

Withdraw consent

The same as deleting your account: MESIC cannot run placements for you without using your data. Withdrawing does not undo what was lawfully done before

Nominate someone

Write to the Grievance Officer to name a person who can use these rights if you cannot

Complain

Write to the Grievance Officer first. We reply within 30 days. If you are not satisfied, you can complain to the Data Protection Board of India

7. Students under 18

Many ITI students are under 18. Under the DPDP Act a parent or guardian must agree before we use a child's data, so MESIC asks for their details and their agreement before a student under 18 can continue. Your college keeps guardian details from admission and may check them.

This includes a college's collection link, which a student fills before they have an account: the same question is asked there, and the agreement is recorded with the answers rather than against an account that does not exist yet.

We never show advertising to anyone, and we do not track or monitor children’s behaviour.

8. Cookies and your device

MESIC sets one cookie to keep you signed in, and stores a few settings on your device (such as whether notifications are off). There are no advertising or analytics trackers.

9. Keeping it safe

Data travels encrypted. Files are never public: every download checks that you are allowed to see it. Sign-in codes are stored only as a one-way hash. If a breach affects you, we will tell you and the Data Protection Board as the law requires.

10. Changes to this notice

If we change what we collect or why, we will ask you to agree again the next time you open MESIC.