Legal
Privacy Policy
Last updated: July 2026
This policy explains how FirstShift ("we", "us") collects, uses, and protects your personal data. We operate in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act).
1. Data we collect
- Identity: full name.
- Contact: email and phone (WhatsApp).
- Education: college, year of study, city.
- Application data: chosen role, portfolio link, your "why" statement, chosen start date and duration, career-break status, and your resume (PDF).
- Payment data: UPI transaction reference you share with us. We do not store card or bank details. We do not process payments on this site; you pay us directly via UPI.
- Work submissions: assignments and deliverables you submit for review.
- Technical: IP address, browser type, and usage data via cookies and analytics.
2. Why we process your data (purposes)
- To process your application and match you to a partner firm.
- To review your work and issue a certificate and experience letter if you meet the bar.
- To communicate with you about your engagement, feedback, and payment.
- To respond to background verification requests from employers about your engagement (we confirm the engagement, dates, and firm; we do not share your resume or other applications without your consent).
- To improve our programs and website.
- To comply with legal obligations.
3. Consent
By submitting an application you give explicit, informed consent for us to process the personal data you provide for the purposes listed above. You may withdraw consent at any time by emailing support@firstshift.in; withdrawal does not affect processing already completed.
4. Data retention
We retain application data and certificates for as long as needed to provide our services and to maintain a verifiable certificate record. You may request deletion of your application data (other than the public certificate record, which is retained for verification) at any time.
5. Your rights under the DPDP Act
- Access and correction of your personal data.
- Erasure of your personal data (subject to verification-record retention).
- Grievance redressal (see below).
- Nomination of another individual to exercise your rights in case of death or incapacity.
6. Sharing of data
We do not sell your personal data. We share data only with processors required to deliver the service (e.g. a payment provider and an email provider), under contract and with appropriate safeguards. Reviewers see your submission content but not your payment data.
7. Security
We use reasonable technical and organisational measures to protect your data. No method of transmission or storage is fully secure, but we work to protect your data using industry-standard practices.
8. Grievance Officer
For privacy concerns or to exercise your rights, contact our Grievance Officer at support@firstshift.in. We will acknowledge complaints within 24 hours and resolve them within the timelines set by the DPDP Act.
9. Children
Our internships are intended for college students aged 18 and above. We do not knowingly collect data from anyone under 18. If you believe a minor has submitted data, contact us and we will delete it.
10. Changes to this policy
We may update this policy from time to time. Material changes will be communicated by email or a notice on this page with an updated "last updated" date.
Questions about this policy? Email support@firstshift.in.