Privacy Policy
Transparent, DPDP Act 2023 Compliant Data Protection Protocols
At MNA Tech Academy, safeguarding your digital privacy is as important to us as the cybersecurity skills we teach.
DPDP Act 2023
Strict Compliance with Indian Data Privacy Law
TLS 1.3 & AES-256
Enterprise Grade Data Encryption at Rest & Transit
Zero Data Selling
We Never Sell or Rent Student Records to Third Parties
72-Hour Grievance SLA
Prompt Resolution for Student Rights Requests
1. Introduction & Scope
Welcome to MNA Tech Academy (“we”, “our”, or “us”). We operate India’s premier Cyber Security and Artificial Intelligence practical training institute, offering offline classroom programs in Jaipur, Rajasthan, and live interactive online training across India and internationally via our official platform at mnatech.in.
As a cybersecurity institution, we hold data privacy and information security to the highest technical and ethical standards. This Privacy Policy outlines our transparent protocols regarding the collection, processing, storage, and safeguarding of personal data belonging to our prospective learners, enrolled students, corporate clients, and website visitors.
This policy is formulated in strict accordance with the Digital Personal Data Protection (DPDP) Act, 2023, the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and relevant international privacy benchmarks.
2. Personal Data We Collect
We collect only the minimum necessary personal data required to deliver high-quality educational programs, configure virtual attack-defense sandboxes, and facilitate career placements:
Direct Identifiers & Contact Details
Full legal name, email address, WhatsApp/mobile telephone number, permanent or current residential city, state, postal code, and emergency contact details for offline classroom batches.
Academic & Enrollment Profile
Highest educational qualification (e.g. 12th pass, BCA, B.Tech, MCA), university/college name, current employment status, program of interest (e.g. Professional Diploma in Cyber Security, AI Specialization), batch time preference, attendance records, capstone project submissions, and internal assessment grades.
Transaction & Fee Receipts
Order identifiers, transaction dates, fee payment installment schedules, and invoice receipts processed via secure, RBI-authorized third-party payment gateways (such as Razorpay, UPI, or Net Banking). We do not store credit/debit card PINs, CVVs, or internet banking login passwords on our servers.
Virtual Cyber Range & Lab Telemetry
VPN connection timestamps, assigned internal IP addresses in our attack-defense sandboxes, terminal session commands executed during practical assessments, and CTF challenge completion flags. This telemetry is strictly used to measure student learning progress and maintain cyber range isolation.
3. Legal Basis & How We Use Your Data
Under the DPDP Act 2023, MNA Tech Academy acts as a Data Fiduciary. We process student data exclusively based on explicit consent, contract performance, or legitimate academic purposes:
- ✓Delivering Training: Allocating cloud lab instances, sharing course repositories, distributing lecture schedules, and coordinating doubt-clearing sessions.
- ✓Credential Verification: Generating tamper-proof digital certificates, verifiable badge QR codes, and issuing official letters of recommendation.
- ✓Placement Facilitation: Submitting candidate resumes to verified corporate hiring partners, arranging interview rounds, and conducting mock technical assessments (conducted strictly with explicit student authorization).
- ✓Infrastructure Integrity & Threat Prevention: Ensuring our virtual penetration testing sandboxes and physical lab switches are not misused for unauthorized external attacks or distributed denial-of-service attempts.
4. Enterprise Cybersecurity Safeguards
Given our role as an offensive and defensive cybersecurity academy, we apply industry-standard defense-in-depth controls across our digital perimeter and physical premises:
Cryptographic Protection
All web sessions enforce TLS 1.3 encryption with Perfect Forward Secrecy. Student databases are secured with AES-256 encryption at rest.
Access Control & MFA
Administrative access to student records requires hardware-backed multi-factor authentication (MFA) under strict Principle of Least Privilege.
Continuous VAPT Auditing
Our internal and student web applications undergo continuous vulnerability assessments and penetration testing (VAPT) to identify and remediate flaws proactively.
Air-Gapped Range Isolation
Student offensive security target networks are segmented behind dedicated hardware firewalls with strict outbound egress filtering to prevent data leakage.
6. Student & Data Principal Rights (DPDP Act 2023)
Under the DPDP Act 2023, you hold the following statutory rights regarding your personal data:
7. Data Retention Periods
We retain personal data strictly for as long as necessary to fulfill academic, accreditation, and legal requirements:
- • Course Inquiry & Demo Data: Retained for 180 days after initial contact, after which inactive leads are automatically purged.
- • Enrolled Student Active Records: Retained during the program duration plus 3 years following completion to support alumni mentorship and placement re-skilling.
- • Certificate & Credential Verification Records: Digital cryptographic certificate hashes and student names are retained indefinitely to enable prospective employers to verify credential validity.
- • Financial & Tax Records: GST invoices and payment transaction vouchers are maintained for 7 years in accordance with Indian tax statutes.
8. Grievance Redressal & Contact Officer
In compliance with the DPDP Act 2023, MNA Tech Academy has designated a Data Protection & Grievance Redressal Officer to resolve student inquiries and data requests within statutory timeframes (SLA: within 72 business hours):