Privacy policy
Effective 17 October 2026
This policy explains what personal data the Calibrex OSINT Academy collects, why, and the choices you have. We collect only what we need to run the Academy, and we never sell your data.
What we collect
- Account: your name, email address, and your password and recovery code — both stored only as one-way cryptographic hashes that we cannot read.
- Admission requests: the details you give us — name, phone number, city, role or organisation, and your reasons for applying.
- Learning records: mission attempts and results, programmes you are admitted to, and certificates issued.
- Security data: your IP address, used briefly to limit repeated sign-in attempts and protect accounts.
How we use it
To run your account, judge your missions and assessments, process your admission, contact you about your request, issue and verify certificates, and keep the Academy secure. We do not use your data for advertising and we do not profile you.
Who we share it with
Only with the service providers that run the Academy for us: Cloudflare (hosting and database) and FormSubmit, which delivers each admission request to Calibrex’s admissions inbox. A certificate’s holder name, title and issue date are shown publicly on its verification page — that is what makes it verifiable. We disclose data to authorities only where the law requires it.
Cookies
We use one essential cookie to keep you signed in. There are no advertising or tracking cookies.
On calibrex.org we also count anonymous daily totals, such as how many missions were started or how many demo requests were sent, to improve the site. These counts carry no cookie and no identifier and cannot be linked to you. If your browser sends Do Not Track, nothing is counted.
How long we keep it
Account and learning records are kept while your account exists. Records of admissions and fees are kept as long as the law requires. Security data is kept for a short period.
Your rights
Under India’s Digital Personal Data Protection Act, 2023, you may ask to access, correct or erase your personal data, withdraw consent, or raise a grievance. Send requests through the contact form at calibrex.org; we will verify your identity before acting. Certificates already issued may be marked revoked rather than deleted, so that verification stays truthful.
Security
Passwords are hashed with PBKDF2; connections are encrypted; sessions use secure, HTTP-only cookies; sign-in attempts are rate-limited; and administrative access requires two factors. No system is perfectly secure, but we take every reasonable step.
Children
The Academy is intended for learners aged 18 and over. Learners under 18 need the consent of a parent or guardian.
Changes
We will post any changes to this policy here.