acredemia.Privacy Policy
Last updated 29 June 2026
Acredemia is a verification layer for individual merit. We check the claims on a person's profile against the source that issued them, so the people who did the work can be believed, and found. This policy explains what we collect, why, and the rights you have over it under India's Digital Personal Data Protection Act, 2023 (DPDP).
What we collect
- Account data: your email and password (passwords are stored hashed by our authentication provider, never in plain text), and your name.
- Profile and claims: the achievements you choose to add (education, work, code, research, certifications, honours), and any supporting documents or links you attach as evidence.
- Connected sources: when you connect GitHub, ORCID, or similar, we receive the identifiers needed to confirm ownership. We do not receive your passwords for those services.
- Usage data: basic logs needed to operate and secure the service.
How we use it
- To verify your claims against their issuing sources and assign each an honest state (self-reported, pending, verified, or could-not-verify).
- To show your verified claims to recruiters when, and only when, you choose to make your record visible.
- To operate, secure, and improve the service.
What we do not do
- We do not sell your personal data.
- We do not produce a person-level competence score or ranking. We verify claims, we do not rank people. Recruiters see verified evidence and make their own judgment.
- Pending and self-reported items stay private to you. Recruiters only ever see what is verified, and only with your consent.
Your rights (DPDP)
You may request access to, correction of, or erasure of your personal data, and you may withdraw consent at any time. To exercise any of these, or to raise a grievance, contact our Data Protection point of contact below. We will respond within the timelines required by law.
Storage and security
Your data is hosted in India (our database runs in the Mumbai region). Access is restricted by row-level security so that you can read and write only your own records. Data in transit is encrypted. We retain your data for as long as your account is active, and delete it on request or a reasonable period after account closure.
Sharing
We share verified claims with recruiters only with your consent. We query issuing sources (for example a code host, a researcher registry, or, in future, government-backed verification rails through a regulated gateway) solely to confirm the claims you submit. We may use processors such as our hosting and email providers under appropriate data-processing terms.
Contact
Data Protection point of contact: privacy@acredemia.com. Grievances: founder@acredemia.com.
Changes
We may update this policy and will revise the date above. Material changes will be notified within the service.