SOC Lab is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights regarding your information.
1. Who We Are
SOC Lab ("we", "us", "our") operates the cybersecurity training platform available at soclab.in and via the SOC Lab Android application. We are the data controller for personal information collected through our Platform.
Contact: support@soclab.in
2. Information We Collect
| Category | Data Collected | Why |
|---|
| Account | Email address, display name, password (hashed) | Account creation and authentication |
| Usage | Scenarios completed, quiz scores, time spent, features used | Track progress and improve content |
| Payment | Transaction ID, plan type, payment status, platform (web or Android) | Subscription management — card/UPI details handled entirely by Razorpay (web) or Google Play (Android), never stored by us |
| Technical | Device type, browser, OS, IP address, crash logs | Security, debugging, and fraud prevention |
| Interview | Mock interview answers (text transcript only) | Scoring and results display — not stored permanently |
We do not collect audio recordings. Mock interview speech is processed locally in your browser using the Web Speech API and never transmitted to our servers.
3. How We Use Your Information
- To provide, operate, and improve the Platform and its features
- To manage your subscription and process payments
- To track your learning progress and provide personalized experience
- To send account-related communications (password resets, billing notices)
- To detect and prevent fraud, abuse, or security incidents
- To comply with legal obligations
We do not use your data for advertising, and we do not sell your personal information to third parties.
4. Data Sharing
We share your data only with trusted service providers necessary to operate the Platform:
- Firebase (Google): Authentication and database hosting — Firebase Privacy
- Razorpay: Payment processing for web subscriptions only (soclab.in). Razorpay handles all card and UPI data — we never receive or store payment card details. Razorpay Privacy Policy
- Google Play Billing: Payment processing for Android app subscriptions only. All billing for Android purchases is managed entirely by Google — we receive only a purchase token to verify subscription status. Google Privacy Policy
- Netlify: Web hosting and content delivery for soclab.in
Android users: SOC Lab does not have access to your payment card details, bank account details, or UPI ID. All payment data for Android subscriptions is held and governed exclusively by Google Play. Please refer to Google's Privacy Policy for how they handle your payment information.
All service providers are contractually bound to protect your data and may only use it for the specified purpose.
We may disclose your information if required by law, court order, or to protect the rights and safety of our users or the public.
5. Data Storage and Security
Your data is stored on secure servers provided by Google Firebase, located in data centres compliant with industry security standards. We implement the following security measures:
- All data transmitted over HTTPS/TLS encryption
- Passwords are hashed using industry-standard algorithms — never stored in plaintext
- Access to user data is restricted to authorised personnel only
- Regular security reviews of our infrastructure
Despite our best efforts, no system is completely secure. In the event of a data breach affecting your personal information, we will notify you within 72 hours as required by applicable law.
6. Cookies and Local Storage
SOC Lab uses browser local storage and session storage to:
- Keep you logged in during your session
- Remember your in-progress scenario and quiz state
- Store your preferences (dark mode, display settings)
We do not use third-party tracking cookies or advertising cookies. You can clear your browser storage at any time, which will log you out of the Platform.
7. Mock Interview Privacy
The mock interview feature uses your device's microphone via the browser's built-in Web Speech API:
- Audio is processed entirely on your device — we never receive or store audio recordings
- Only the text transcript of your answer is used for local scoring
- Interview transcripts are stored in your browser session only and are cleared when you close the browser
- We do not share interview answers with third parties
8. Your Rights
You have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your account and associated data
- Portability: Request your data in a structured, machine-readable format
- Objection: Object to processing of your data in certain circumstances
To exercise any of these rights, email us at support@soclab.in. We will respond within 30 days.
To delete your account, you can use the account settings in the app or email us. Account deletion removes your profile and progress data within 30 days. Payment records may be retained for legal compliance purposes.
9. Data Retention
- Account and usage data: retained while your account is active
- Payment records: retained for 7 years as required by financial regulations
- Technical logs: retained for 90 days for security and debugging purposes
- Deleted accounts: data removed within 30 days of deletion request
10. Children's Privacy
SOC Lab is intended for users 18 years of age and older. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on the Platform. The date at the top of this policy indicates when it was last updated. Continued use after changes constitutes acceptance of the updated policy.
12. Contact & Grievance
For privacy concerns, data requests, or to lodge a complaint:
- Email: support@soclab.in
- Website: soclab.in
- Response time: within 30 days for data requests, within 72 hours for breach notifications