1. OVERVIEW

Etherence Technologies Private Limited, trading as Cybercom Labs ("CYBERCOM", "we", "us", "our") respects your privacy. This Privacy Policy explains what data we collect, why we collect it, and how we use and protect it when you use the CYBERCOM platform, website, or any associated services.

This policy applies to all users - CTF participants, institutional admins, professors, students, hiring candidates, and challenge authors. By using our Services, you consent to the practices described here.

2. INFORMATION WE COLLECT

We collect the following categories of data:

Account & Identity

›Name, email address, institution/organization
›Username and password (hashed)
›Role (student, professor, admin, candidate, organizer)

Event & Assessment Data

›CTF submissions, scores, time-stamps
›Lab session logs (commands executed within lab boundaries)
›Hiring assessment responses and skill scores
›Anti-cheat monitoring signals during events and assessments

Usage Data

›Pages visited, features used, time on platform
›Browser, OS, and device type
›IP address and approximate location (country/region)

Payment Data

›Billing contact and invoice details (no card numbers - processed via payment gateway)
›Transaction records for audit and refund purposes

3. HOW WE USE YOUR DATA

We use collected data to:

›Operate and improve the CYBERCOM platform and its three modes (Play, Learn, Assess).
›Run, score, and monitor CTF events and lab sessions.
›Generate skill scorecards and hiring reports for Hiring Infra clients.
›Provide academic grading integration (LTI 1.3) for institutional Labs clients.
›Send event-related communications: registration confirmations, certificates, results.
›Detect and prevent cheating, fraud, and abuse of our platform.
›Comply with legal obligations under applicable Indian law.
›Conduct internal analytics to improve challenge quality and platform performance.

We do not sell your personal data. We do not use your data for advertising targeting or share it with ad networks.

4. DATA SHARING AND DISCLOSURE

We share your data only in these circumstances:

Institutional Admins
If you are a student using CyberCom Labs through your institution, your scores and lab activity are visible to your professor and institutional admin, as contractually agreed.
Hiring Organizations
If you complete a Hiring Infra assessment, your skill scorecard and summary report are shared with the hiring organization that commissioned the assessment. You are informed of this before you start.
Service Providers
We use third-party providers for hosting, email, and payment processing. They access data only to perform services on our behalf and are bound by confidentiality.
Law Enforcement
We may disclose data if required by Indian law, court order, or to protect the safety of users or the public.

5. DATA RETENTION

We retain your data for as long as your account is active or as needed to provide Services. Specific retention windows:

-CTF event data (scores, submissions): retained indefinitely for leaderboard and community history. You may request anonymization.
-Lab session logs: retained for 90 days after session end, then deleted.
-Hiring assessment data: retained for 12 months, then deleted or anonymized per contractual agreement with the hiring organization.
-Account data: retained until you delete your account or request deletion.
-Payment records: retained for 7 years for legal and audit compliance.

6. YOUR RIGHTS

Depending on your jurisdiction, you may have the right to:

›Access the personal data we hold about you.
›Correct inaccurate or outdated information.
›Request deletion of your account and associated data.
›Request anonymization of your CTF event history.
›Object to processing of your data for specific purposes.
›Receive a copy of your data in a portable format.

To exercise any of these rights, email us at contact@cybercomctf.com. We will respond within 30 days.

7. CERTIFICATE VERIFICATION

When CYBERCOM issues a certificate, we keep a record of the details printed on it so that anyone holding the certificate can verify it by scanning its QR code or entering its ID on our website.

The verification page shows the holder's full name and the other details printed on the certificate, and nothing else. It does not show email addresses, phone numbers, or scores unless they are printed on the certificate. Verification pages are excluded from search engine indexing and from our analytics.

To correct your details or ask for them to be removed, email contact@cybercomctf.com with the certificate ID. We review each request and respond within 30 days.

8. COOKIES AND TRACKING

We use minimal cookies - only what is necessary to operate the platform:

-Session cookies: authenticate your login state. Expire when you close your browser or log out.
-Preference cookies: store your display settings (dark mode, etc.). Last 12 months.
-Analytics (self-hosted): page-level usage data to improve the platform. No third-party trackers.

We do not use Google Analytics, Facebook Pixel, or any ad-retargeting cookies.

9. SECURITY

We apply security measures to protect your data. See our Security Policy for the full list:

›Passwords are hashed with bcrypt. We never store plaintext passwords.
›All traffic is encrypted in transit via TLS 1.2+.
›Sensitive data at rest, including credentials, assessment data and anti-cheat monitoring data, is encrypted with AES-256.
›Challenge and lab environments run in isolated, resource-limited containers with reduced privileges.
›Access to production systems is restricted to authorized CYBERCOM engineering team members.

See our Security Policy for more detail on our security posture and responsible disclosure process.

10. CONTACT

Privacy questions, access requests, and deletion requests:

Etherence Technologies Private Limited

Chennai, Tamil Nadu, India

contact@cybercomctf.com