Partner Program Privacy Policy

This notice explains how Fodavin Technologies, Sree Saraswathi Thyagaraja College (STC), Palani Road, Thippampatti, Pollachi, Coimbatore District, Tamil Nadu 642110, India ("Fodavin", "we"), handles personal data in the Fodavin Partner Program at partner.fodavin.in, and the rights you have. For this data Fodavin is the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (the "DPDP Act") and the rules made under it. We also follow the Information Technology Act, 2000 and its rules on reasonable security practices for sensitive personal data. The general privacy policy at fodavin.in/privacy-policy covers the main Fodavin website.

1. What we collect and why

If you are a partner:

• Account details: name, email, mobile number, city, state, country and how you heard about us. Used to create and run your account and to contact you about it.
• Sign-in and security data: your password, stored only as a one-way hash (we never see or store the password itself); sign-in times; your browser type; and a one-way coded form of your IP address. Used to keep your account secure, stop abuse and investigate problems.
• Consent records: which version of the terms and this notice you accepted, and when.
• Program records: your referral code, the referrals credited to you, commissions, payout requests and our decisions about them. Used to credit referrals, calculate and pay commissions, and resolve disputes.
• Payout details (only when you add them): UPI ID, or bank account number, account holder name, IFSC and bank name. The UPI ID and account number are stored encrypted. Used only to pay you.
• Tax details (only when needed): your PAN and, if you are registered, your GSTIN. Used only to meet tax law (see the Partner Terms, section 10).

If you enquire through a partner's link:

• Enquiry details you type in: name, email, phone number, company or college, the service you want, your requirement, budget range and preferred way of contact. Used to respond to your enquiry and provide the service you ask about.
• Referral data: the partner code, the page you arrived on, the site that sent you, campaign tags in the link, your browser type and a one-way coded form of your IP address. Used to credit the right partner and to detect fake or duplicate referrals. Partners see only a shortened form of your name (for example "An*** R."), the service and the progress of the enquiry, never your contact details or message.
• Consent record: that you agreed to be contacted, which consent text you saw (version 2026-10-draft) and when.

We do not use this data for advertising, do not sell it, and do not make decisions about you by automated means alone. Referral checks can flag an enquiry for review, but a Fodavin staff member makes the decision.

2. Our legal basis

• Consent: you give consent when you register as a partner or submit an enquiry, after being shown this notice. You can withdraw it at any time (section 6).
• Legitimate uses allowed by section 7 of the DPDP Act: for data you have voluntarily given us for a specific purpose (such as paying you), and to comply with laws such as the Income-tax and GST laws, court orders, or requests from authorities empowered by law.

3. Cookies and similar storage

• Session cookie (__Host-fdv_session): keeps you signed in. It can't be read by scripts, and ends when you sign out, after 3 days without use, or after 7 days at most (for Fodavin staff: 2 hours without use, 12 hours at most). Strictly necessary.
• Referral cookie (__Host-fdv_ref here, and fdv_ref on fodavin.in): records which partner referred you, for up to 60 days. It contains a signed reference to the referral visit, not your personal details.
• Bot protection: sign-up and enquiry forms use Cloudflare Turnstile, which processes technical signals from your browser to tell people from bots.

The partner site uses no analytics or advertising cookies.

4. Who we share it with

Only with service providers that process data on our behalf, under contract, to run the Program:

• Supabase: database hosting, in the Mumbai (India) region.
• Hostinger: the server that runs the application [LEGAL REVIEW: confirm server location].
• Cloudflare: domain name services and bot protection (Turnstile).
• Our email provider: sends account and referral emails [LEGAL REVIEW: name of the email provider].
• GitHub: stores encrypted database backups (servers outside India; the backup cannot be read without a passphrase held only by Fodavin).
• Our bank or UPI provider, to make payouts, and tax authorities where the law requires (for example TDS filings).

Some providers process data outside India. We transfer data abroad only as permitted by the DPDP Act, and never to a country the Government of India has restricted. We may also disclose data when required by law, or to protect Fodavin, its partners or customers against fraud.

5. How long we keep it

• Partner account data: while your account is open. After you close it, we erase or anonymise it unless we must keep it for one of the reasons below.
• Commission, payout and tax records: for as long as Indian tax and accounting laws require us to keep books and records (generally about 8 years), and for longer if needed for a dispute or legal proceeding.
• Enquiries that did not become customers: for as long as needed to respond and to check for duplicate referrals, after which we erase them on request or in our periodic reviews [LEGAL REVIEW: fixed retention period for non-converted enquiries].
• Security logs (with coded IP addresses): as long as needed to investigate abuse and keep an audit trail of decisions about money.

6. Your rights

Under the DPDP Act you can:

• access a summary of the personal data we hold about you and how we use it, and the names of those we have shared it with;
• correct, complete or update inaccurate or incomplete data (partners can update payout details themselves in the dashboard);
• erase data that is no longer needed for its purpose, unless the law requires us to keep it;
• withdraw consent at any time. This doesn't affect anything done before you withdrew. Withdrawing consent as a partner means closing your account (see the Partner Terms);
• nominate someone to exercise these rights for you if you die or become unable to; and
• raise a grievance with us, and if you are not satisfied with our response, complain to the Data Protection Board of India.

To use any of these rights, write to contact@fodavin.in from the email address linked to your account or enquiry, so we can confirm it's you. We respond as soon as we can, and in any case within the time the law requires.

7. Grievance Officer

[LEGAL REVIEW: name and designation of the Grievance Officer]
Fodavin Technologies, Sree Saraswathi Thyagaraja College (STC), Palani Road, Thippampatti, Pollachi, Coimbatore District, Tamil Nadu 642110, India
Email: contact@fodavin.in · Phone: +91 84388 77646

8. Children

The Partner Program is only for people aged 18 or over. Enquiries about courses or internships for someone under 18 should be made by their parent or lawful guardian, who consents on the child's behalf. If we learn that we hold a child's data without that consent, we will delete it.

9. How we protect your data

• Encrypted connections (HTTPS) everywhere; passwords stored only as strong one-way hashes; payout account numbers and UPI IDs encrypted in the database.
• IP addresses are stored only in a one-way coded form.
• Access is limited to authorised Fodavin staff, and viewing a partner's full payout details is recorded each time.
• Every administrative and financial action is recorded in a log that cannot be edited.
• Database backups are encrypted.

If a personal data breach happens, we will inform the people affected and the Data Protection Board of India as the law requires, and take steps to contain it.

10. Changes to this notice

We will post any change here with a new version number, and email partners about important changes before they take effect. See also the Partner Terms.