ISO 9001:2015 Certified
MSME Registered
OFFICIAL LEGAL POLICY

Privacy Policy

This document explains how NXT GEN Skill Development Institute (associated with Bit Byte Fly Private Limited) collects, stores, processes, and protects your personal data when using our website, student portal, and vocational certification services.

Last RevisedOctober 20, 2025
ComplianceDPDPA & IT Act 2000

Privacy At A Glance

At NXT GEN Skill Development Institute, we value the trust you place in us. Here is our fundamental commitment to your privacy:

No Sale of Data: We never sell, rent, or trade your personal records.
Secure Transactions: 100% PCI-DSS compliant via Razorpay. We do not store card credentials.
Tamper-Proof Verification: Only verified academic status and credentials are verifiable by employers.
Full Control: You can review, update, or request corrections to your student record at any time.

1. Introduction & Overview

Welcome to NXT GEN Skill Development Institute (“NXT GEN SDI”, “we”, “us”, or “our”), operated in association with Bit Byte Fly Private Limited. We offer accredited technical diplomas, vocational certifications, industry trade labs, online learning management systems, and public credential verification registries.

This Privacy Policy applies to our website (nxtgensdi.com), our Student Portal, our Partner/Affiliated Institute Portal, our Administrator and Examination systems, and any related applications or services (collectively, the “Platform”).

By accessing or registering on our Platform, enrolling in our courses, submitting an inquiry, or interacting with our verification systems, you acknowledge that you have read, understood, and consented to the practices described in this Privacy Policy.

2. Information We Collect

We collect personal and academic information necessary to fulfill our educational, certification, and verification duties:

A. Student Information

  • Full Legal Name, Date of Birth, Gender, and Guardian/Father's Name.
  • Contact details: Primary email address, mobile telephone number, and postal address.
  • Academic background: Highest qualification, previous board/university, and stream.
  • Student profile photo / mandatory avatar for identification on identity cards, certificates, and marksheets.
  • Course enrollment history, attendance records, practical lab submissions, examination scores, and grade details.

B. Affiliated Institute & Center Partner Information

  • Institute / Center legal business name, registration certificate number, and tax ID (GST/PAN).
  • Center Director / Head of Institution name, verified phone number, email, and identity proof.
  • Center physical premises address, pin code, state, geo-coordinates, and classroom/lab photos.
  • Faculty rosters, enrolled student allocations, fee invoices, and authorization certificates.

C. Transactional & Billing Data

  • Payment transaction IDs, Razorpay order IDs, timestamps, payment status, and amounts paid.
  • GST billing address and invoice details.
  • Note: We do not collect or store credit card numbers, debit card PINs, CVV codes, or net banking passwords. These are directly captured and processed by RBI-licensed payment gateways.

D. Device & Technical Usage Data

  • Internet Protocol (IP) address, browser version, operating system, and screen resolution.
  • Pages visited, time spent per session, referring URLs, and error diagnostics.

3. How We Collect Information

We gather data through transparent and lawful channels:

  • Direct Submission: When you register an account, enroll in a course, request a callback, fill in our contact form, or upload your verification avatar.
  • Affiliated Centers: When an authorized partner institute registers you as an enrolled student in our central accreditation database.
  • Automated Academic Activity: When you take online practice quizzes, complete project modules, or participate in practical trade labs.
  • System Logs & Cookies: Essential session cookies maintained during your active portal login session.

4. How We Use Your Data

NXT GEN SDI processes your personal information exclusively for educational, operational, and verification purposes:

Course Delivery & Mentorship

Scheduling classes, distributing curriculum resources, grading assignments, and tracking syllabus progress.

Credential Issuance

Generating authentic marksheets, diplomas, and certificates embedded with tamper-proof QR verification codes.

Student & Center Support

Answering inquiries, resolving technical issues, processing callback requests, and sending critical notifications.

Security & Fraud Prevention

Detecting unauthorized certificate alterations, illegal center duplication, and securing accounts against breach.

5. Public Credential Verification Registry

Important Notice on Educational Verification: To protect our graduates against forged credentials, NXT GEN SDI maintains an open verification portal for genuine employers, universities, and government bodies.

When an employer scans the QR code on an official certificate or inputs a valid Certificate/Marksheet number into our verification tool (/verify-certificate or /verify-marksheet), the system displays the following public academic verification attributes:

  • Student Full Name and Enrollment / Roll Number.
  • Course Title, Duration, and Authorized Affiliated Center Name.
  • Grade / Percentage, Issuing Date, and Credential Status (Active / Revoked).

Private Data Protection: Personal contact info (phone number, home address, email, payment specifics) is never disclosed on public verification pages.

6. Payment & Financial Data Security

All payments made for course enrollments, examination forms, center affiliations, or marksheet re-issues are processed through Razorpay (or designated RBI-licensed payment intermediaries).

  • Payment processing conforms to PCI-DSS Level 1 compliance standards.
  • We transmit transaction requests via 256-bit TLS encrypted tunnels.
  • We store only the payment reference ID, timestamp, amount, and receipt status for bookkeeping, GST audit compliance, and accounting.

7. Information Sharing & Third Parties

We do not sell, rent, or trade your personal information. We may share data only under strictly regulated conditions:

  • Authorized Affiliated Centers: Centers receive access to academic details of students physically enrolled at their branch.
  • Service Providers: Cloud hosting (AWS S3, MongoDB, Cloudinary) and email notification gateways (Nodemailer/SMTP) operating under confidentiality agreements.
  • Corporate Placement Partners: If you explicitly opt in for placement support, your resume and verified certificate are shared with prospective employers.
  • Legal & Regulatory Authorities: Where mandated by a court order, government investigation, or statutory directive under Indian law.

8. Data Security & Retention

We implement robust technical and organizational safeguards including bcrypt password hashing, encrypted SSL/HTTPS endpoints, rate-limited APIs, and role-based access control (RBAC).

Retention Period: Because academic degrees and trade certifications serve a lifetime professional purpose for alumni, certification verification records are retained indefinitely to ensure students can verify credentials throughout their careers. Non-academic operational logs are purged periodically.

9. Cookies & Analytics

Our website uses strictly necessary session cookies and token-based storage (JWT / LocalStorage) to keep you authenticated across page refreshes and remember your theme preferences (Light / Dark mode).

You may choose to disable cookies through your browser settings, though doing so may limit your ability to access protected student or institute portal dashboards.

10. Your Rights & Choices

Under Indian data protection standards, students and users enjoy several fundamental rights:

  • Right to Review & Access: You can view all personal details stored in your student dashboard.
  • Right to Correction: If your name, photo, or phone number has a typo, you can request an update before final certificate generation.
  • Right to Inquire: You can ask our team how your data has been handled or shared.
  • Account Deactivation: You may request suspension of your portal account, subject to mandatory archival of certified educational credentials.

11. Children & Minors' Privacy

While our trade and IT skills training is open to young learners seeking vocational qualifications, individuals under 18 years of age (“Minors”) must enroll with the explicit knowledge and consent of their parent or legal guardian. We do not knowingly collect personal information from children without parental authorization.

12. Updates to This Policy

We may periodically modify this Privacy Policy to reflect enhancements in technology, statutory amendments in education laws, or improvements to our portal features. When revisions occur, the “Last Revised” timestamp at the top will be updated. Continued use of our Platform following posted changes constitutes your acceptance of the updated policy.

13. Grievance Officer & Contact Details

In compliance with the Information Technology Act, 2000 and rules made thereunder, any queries, feedback, or grievances regarding this Privacy Policy should be addressed to our designated Grievance Officer:

NXT GEN Skill Development InstituteIn Association With Bit Byte Fly Private Limited

2nd Floor, Agrasen Market, New Patliputra Colony, Beur, Anishabad, Patna - 800002, Bihar, India