Privacy Policy

Last updated: 30 August 2026

Verth Labs Private Limited (CIN U62099TS2026PTC219086), registered at Plot No. 9, Phase-5, KPHB Colony, Kukatpally, Tirumalagiri, Hyderabad – 500072, Telangana, India, is the data fiduciary for the personal data described here. This policy explains what we collect when you use the Verth Labs website and lab platform, why we collect it, who processes it on our behalf, and the rights you have under India's Digital Personal Data Protection Act, 2023 (“DPDP Act”).

Data we collect

Account data. When you create an account we store your email address, your name if you provide one, an internal account identifier, your role on the platform (learner, instructor, or administrator), and the date your account was created and last updated. If your account was created by a training institute, we also store which institute and which batch you belong to.

Sign-in data. You can sign in with Google or with an email address and password. If you sign in with Google, we receive your email address and name from Google — we never receive or store your Google password. If you set a password with us, we store only a one-way cryptographic hash of it (bcrypt); we cannot read your password, and accounts that only ever use Google have no password stored at all. Your signed-in state is held in a session cookie in your browser.

Session and lab-usage telemetry. When you open a lab environment we record which product you opened, the cloud path if the product has one, when the session started, when it was last active, and when it ended. While a session is open, your environment sends a periodic heartbeat (roughly every 30 seconds) so we know it is still in use. We use this to show you your own activity, to let an institute see its learners' usage, to reclaim idle environments, and to plan capacity. It records session timing and which product was used — not the contents of your work.

Work you create. Notebooks, code, and files you save in a lab workspace are stored so they are there when you return. This content is yours; we access it only to operate, support, or secure the service, or where the law requires it.

Purchase data. For each purchase we store the amount, currency, status, and the payment provider's transaction reference, together with what it entitles you to. We do not collect or store your card number, CVV, UPI PIN, or bank credentials — those go directly to our payment gateway, which is responsible for handling them.

Messages you send us. If you use our contact form or email us, we keep your message and contact details so we can reply and keep a record of the correspondence.

Technical data. Our servers and hosting providers process standard request information — IP address, browser user agent, timestamps, and error diagnostics — to serve pages, keep the platform secure, and diagnose faults.

What we do not do

• We do not sell or rent your personal data to anyone.
• We do not run advertising or marketing trackers on this site. There is no Google Analytics, no advertising pixel, and no third-party behavioural-profiling script.
• We do not use your personal data to make automated decisions that affect you.
• We do not read the contents of your lab work for any purpose other than those above.

Why we use it

• To create and secure your account and sign you in.
• To provision and run the lab environments you have purchased or been granted.
• To process payments and confirm what your account is entitled to.
• To send service email — a one-time welcome message, and messages about your account, purchases, or access.
• To answer your support and sales enquiries.
• To keep the platform reliable and secure — monitoring, diagnosing faults, preventing abuse, and enforcing our Terms of Service.
• To report a learner's activity to the institute that enrolled them, where an institute provisioned the account.
• To meet legal, tax, and accounting obligations.

We process this data to perform our contract with you, to pursue our legitimate interest in running a secure and reliable service, to comply with law, and — where the DPDP Act requires it — on the basis of the consent you give when you create an account and use the platform. You can withdraw consent at any time, though we may then be unable to provide the service.

Processors we use

We share personal data only with service providers that help us run the platform, and only as far as they need it. They act on our instructions and may not use your data for their own purposes.

• Microsoft Azure — hosts the web application and its database, sends our transactional email through Azure Communication Services, and collects server performance and error telemetry through Azure Monitor.
• Cloudflare — provides the object storage (Cloudflare R2) that holds lab workspace files and course datasets, and sits in front of the lab platform to route and protect traffic.
• Google — provides Google sign-in when you choose it. Our pages also load fonts from Google's font service, which means Google receives your IP address when a page loads.
• Our payment gateway — processes card, UPI, netbanking, and wallet payments, and handles the payment credentials we never see.

Some of these providers operate infrastructure outside India, so your data may be processed outside India, subject to the transfer restrictions of the DPDP Act. We also disclose data where the law requires it, and to our professional advisers where necessary.

Cookies

We use cookies only where they are needed to make the service work. The main one is the session cookie that keeps you signed in; signing out clears it. We do not set advertising or cross-site tracking cookies. Blocking essential cookies in your browser will prevent you from staying signed in.

How long we keep it

We keep your account and its related records for as long as your account is open. If you ask us to close it, we delete or anonymise your personal data within a reasonable period, except where we must keep records to meet legal, tax, or accounting obligations, or to resolve a dispute — payment records in particular are retained for the period Indian law requires. Lab environments are disposable by design and their contents may be deleted when an access period ends.

Keeping it secure

We protect personal data with encryption in transit, one-way hashing of passwords, role-based access controls, isolation between learners' lab environments, and access limited to the people who need it. Credentials that give access to stored workspace files are held so that the environment's own user cannot read them. No system is completely secure, but if a personal data breach occurs we will notify the Data Protection Board of India and affected users as the DPDP Act requires.

Your rights

Under the DPDP Act you have the right to:

• access a summary of the personal data we hold about you and how we process it;
• have inaccurate or incomplete data corrected, updated, or completed;
• have your data erased, unless we are required to keep it for a legal or business-record purpose;
• withdraw a consent you previously gave;
• nominate someone to exercise these rights on your behalf if you die or are incapacitated;
• raise a grievance with us, and escalate to the Data Protection Board of India.

To exercise any of these, email grievance@verthlabs.com from your registered address. We may need to verify your identity first.

Children

The platform is intended for users aged 18 and over, and for learners aged 13 to 17 enrolled with the consent of a parent, guardian, or their institute. We do not knowingly collect data from children under 13. If you believe a child has given us personal data, contact us and we will delete it.

Grievance redressal

If you have a complaint about how we handle your personal data, contact our Grievance Officer, designated under Section 13 of the DPDP Act:

We acknowledge every grievance and respond within the period prescribed by law. If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India.

Changes to this policy

We may update this policy as the service or the law changes. The revision date at the top of this page shows the current version, and we will give notice of material changes by email or in the product.

Contact

General questions: support@verthlabs.com. Privacy and data-protection matters: grievance@verthlabs.com. Our full registered office address and phone number are on our contact page.

← Back to home