Privacy notice
What CoBuild records about you, why, and who can see it.
This notice says what CoBuild collects about you, why, who sees it, and what you can ask us to do with it.
CoBuild is run by Indisight ("we"), of Hyderabad, Telangana, India.
Who is responsible for your data
Indisight runs the platform and decides how it works. If you joined through your institution, your institution decided that you could take part, and its staff can see your profile and your team's work.
If you are under 18
You can only have an account through a school that enrolled you, with your parent's or guardian's consent, which the school holds. For you:
- we record that you confirmed your school enrolled you with that consent, and when;
- we do not keep a phone number or a LinkedIn link, even if one is entered;
- an organisation that sets a challenge is never shown your name, your profile, or anything else about you. If your team is shortlisted, it sees the team's name and how many members' details were withheld;
- a mentor who is told your team asked for a call is told the team's name, never yours;
- we do not use your data for advertising, and we do not track what you do on other sites.
A parent or guardian can ask the school, or us at ravi@indisight.com, to see what we hold about their child, to correct it, or to have the account deleted. We may ask the school to confirm who is asking.
What we collect
When you create an account
- your name and email address;
- a password. We store it in a scrambled form that cannot be turned back into the password. Nobody at Indisight can read it;
- which institution, campus and cohort you belong to, from the code you joined with;
- your confirmation that you are 18 or older, or that your school enrolled you with a parent's or guardian's consent, and the date and version of the terms you accepted.
When you fill in your profile. All of these are optional.
- city;
- a short bio;
- programme of study, specialisation and graduation year;
- the areas you are interested in;
- a LinkedIn link and a phone number, only if you are 18 or older.
When you take part
- which team you are in, and whether you lead it;
- the challenge your team chose;
- what your team submits for each round: a document, a link, or both, and a note. Earlier versions are kept when your team replaces a submission;
- your team's confirmation, each time it submits, that the work is its own;
- the scores and feedback your team receives;
- a request for a call with a mentor, and any note you add to it.
Automatically
- A record of activity. When you sign in, and when you or anyone else makes a change (joining a team, submitting, scoring), we record what was done, when, by which account, and the internet address and browser it came from. This is how we investigate a problem or a dispute, and how we limit repeated wrong passwords.
- A record of who opened your team's file. Every time someone outside your team opens a document your team submitted, that is recorded.
What we do not collect
- We do not use advertising or analytics trackers.
- We do not ask for payment details, government identity numbers, or anything about your health, religion or politics. Please do not put any of those in your profile or your submissions.
Cookies
Two, both necessary for the site to work. Neither tracks you across other sites.
| Cookie | What it does | How long it lasts |
|---|---|---|
| Sign-in | Keeps you signed in | 30 days, or until you sign out |
| Form message | Carries a message, and what you typed, back to a form after it is refused | A few minutes |
Why we use it
- To run the programme: put you in a team, take submissions, have them assessed, and show results.
- To let the right people see the right things, and nobody else.
- To send you the emails the platform needs to: confirming your address, resetting a password, an invitation.
- To keep the platform secure and to investigate when something goes wrong.
We do not sell your data, and we do not use it to advertise to you.
Who sees what
| Who | What they can see |
|---|---|
| Your teammates | Your name, and everything your team submits |
| Other participants | Team names and standings on the leaderboard. Not your profile, and not your team's work |
| Your institution's admin and faculty | Your profile and your team's work. Only for their own institution |
| Evaluators (jury) | The work of the teams they have been assigned, and those teams' names. Not who is in the team |
| Mentors with an account | The work of the teams they mentor |
| A mentor you ask for a call | That a team asked, and the team's name. Not your name, and not your note |
| The partner who set your challenge | Your team's work, once it is assigned to them. If your team is shortlisted: each adult member's name, institution, programme, bio and LinkedIn link. Never an email address or phone number, and nothing about a member under 18 |
| Indisight's platform staff | Everything, to run and support the platform |
Participants at one institution cannot see participants or work at another. People who joined through Indisight Open and people who joined through an institution cannot see each other.
Judging is blind: evaluators are shown a team's name and work, not its members. That only holds if your document, its file name and any link you share do not name you, so keep your names, school or college and contact details out of what you submit.
A note on document properties. A Word or PowerPoint file, and sometimes a PDF, carries the name of whoever made it in its properties. Someone who downloads your file can see that. If it matters to you, remove it before uploading, or export to PDF without it.
Companies that handle data for us
They process your data on our instructions, to provide the service named.
| Company | What for | Where |
|---|---|---|
| Vercel | Running the website | Mumbai, India |
| PlanetScale | The database | India |
| Cloudflare (R2) | Storing uploaded documents | Asia-Pacific region |
| Resend | Sending email | United States |
How long we keep it
- Your account, profile and your team's submissions: for as long as your account exists, and for 12 months after the programme you took part in ends. After that we delete them, or remove what identifies you. There is no automatic deletion yet, so this is done by us, and sooner if you ask.
- Records of sign-ins and other activity: kept while they are needed to investigate a problem or a dispute, and removed with the rest.
What you can ask us to do
You can ask us to:
- show you what we hold about you;
- correct something that is wrong. Most of your profile you can change yourself, on the profile page;
- delete your account and your profile. Your team's submissions and their scores stay, because they belong to the whole team and to the programme's record, but your name is removed from them;
- withdraw your agreement to these terms, which means closing your account.
Write to ravi@indisight.com. We will answer within 30 days.
If you are unhappy with how we handled a request, you can complain to the Grievance Officer, Indisight, at ravi@indisight.com, and after that to the Data Protection Board of India.
Security
- Passwords are stored scrambled and cannot be read.
- Each institution's data is kept apart from every other's by the platform itself, not only by which pages people are shown.
- Uploaded documents are private. A link to one is made only for someone allowed to see it, and stops working after a short time.
- Repeated wrong passwords are limited.
No system is perfectly secure. If something happens that affects your data, we will tell you, and your school if you are under 18.
Changes to this notice
If we change it in a way that matters, we will ask you to accept the new version before you carry on using CoBuild.
Contact
Indisight, Hyderabad, Telangana, India.
Email: ravi@indisight.com