Privacy Policy

This Privacy Policy applies to all personal data collected through the GreenRoot Platform, including data provided by Students, Admins, and Partners. GreenRoot is the technology platform; Go2Agro Services LLP acts as the data fiduciary responsible for determining the purposes and means of processing personal data collected through the Platform.

This Policy covers the GreenRoot web platform only. Offline services provided by Go2Agro staff — such as visa counselling, travel coordination, or in-person training — may involve additional data handling practices communicated separately during those engagements.

By registering on or using the Platform, you consent to the collection and processing of your personal data as described in this Policy. If you do not agree, please do not use the Platform.

We collect the following categories of personal data depending on your role and activity on the Platform:

2.1 Account & Authentication Data

• Email address and password (stored in encrypted form)
• Account role (Student, Admin, or Partner)
• Unique user identifier assigned by the Platform

2.2 Identity & Verification Documents

• Aadhaar number and front/back images
• PAN number and card image
• Passport number, issue/expiry dates, issuing country, and passport images
• Driving licence (where provided)
• Profile photograph and digital signature

2.3 Personal & Contact Information

• Full name (first, middle, last), gender, date of birth, nationality, marital status
• Email address, mobile number, alternate email/phone, WhatsApp number
• Emergency contact name and number
• Residential address (address lines, city, district, state, pincode, country)
• Current residential address (where different from permanent address)

2.4 Academic Information

• University, college, degree, branch/specialisation
• Current academic status and expected graduation year
• Short biography or personal statement

2.5 Health & Eligibility Information

• Medical conditions relevant to international agricultural work
• Allergies and dietary restrictions
• Disabilities or special accommodation needs
• Language proficiency (read, write, speak)

2.6 Application Data

• Responses to internship-specific application questions
• Documents uploaded during the application process
• Application status, stage history, and admin comments
• Declarations and consent records (including agreement to these Terms and this Policy)

2.7 Admin & Partner Profile Data

• Name, contact details, and address for authorised Admins and Partners
• Partner country assignments and organisational details
• Identity documents (Aadhaar, PAN) where collected for Admin profiles

2.8 Technical & Usage Data

• Device type, browser type, operating system, and IP address
• Pages visited, actions taken, and session information
• Error logs and performance data
• Cookies and similar tracking technologies (see Section 10)

We do not currently collect bank account details or payment card information through the GreenRoot Platform. Any fee payments are handled outside the Platform through separate channels communicated by Go2Agro.

We process your personal data for the following purposes and on the following legal bases:

• Account creation and authentication — to provide you access to the Platform (consent and contractual necessity).
• Profile completion and application submission — to enable you to apply for Internships (consent and contractual necessity).
• Identity verification — to verify your identity using Aadhaar, PAN, and passport documents, which is essential for internship placement and visa processing (consent and legitimate use for specified purpose under the DPDP Act).
• Health and eligibility assessment — to determine whether you are medically fit for international agricultural work and to inform host organisations (consent and legitimate use).
• Application review and placement facilitation — to evaluate Applications, communicate with you, and coordinate with Partners (contractual necessity and legitimate use).
• Sharing with programme coordinators and overseas Partners — to enable selection, verification, and placement of eligible candidates (consent, provided at application submission).
• Visa and immigration support — to assist Go2Agro staff in preparing documentation for overseas travel (consent and legitimate use).
• Platform administration — to manage listings, monitor application pipelines, send operational notifications, and maintain records (legitimate use).
• Security and fraud prevention — to detect false documents, unauthorised access, and misuse of the Platform (legitimate use and legal obligation).
• Analytics and platform improvement — to understand usage patterns and improve the Platform experience (consent, where required; legitimate use for aggregated analytics).
• Legal compliance — to comply with applicable laws, respond to lawful requests, and enforce our Terms (legal obligation).

Collection of Aadhaar is important for identity verification in the context of Indian students applying for government-documented international programmes. We collect Aadhaar only with your explicit consent and use it solely for the purposes stated above. We do not use Aadhaar for any purpose not disclosed in this Policy.

We do not sell your personal data. We share personal data only as necessary for the purposes described in this Policy:

4.1 Internship Programme Coordinators & Partners

When you submit an Application, the information visible on your Application form — which includes personal, academic, health, and document data relevant to the Internship — is shared with the respective internship programme coordinators and authorised overseas Partners. Partners do not have access to your complete Platform profile; they see only the Application form and related data necessary for recruitment and selection.

4.2 International Data Transfers

Because Internships are located in countries such as Denmark, Germany, the United States, Israel, Australia, and others, a portion of your Application Data will be transferred outside India to overseas Partners for verification and selection purposes. By submitting an Application and consenting to this Policy, you expressly consent to such cross-border transfers. We take reasonable steps to ensure overseas recipients handle your data responsibly and only for the stated purposes.

4.3 Service Providers

We use trusted third-party service providers to operate the Platform:

• Supabase — cloud database, authentication, and file storage (hosted in India region)
• Email and communication services used by Go2Agro staff (where applicable)

These providers process data on our behalf under contractual obligations to protect your information and use it only for the services they provide to us.

4.4 Legal & Regulatory Disclosures

We may disclose personal data where required by law, court order, government authority, or to protect the rights, safety, and property of Go2Agro, Users, or the public.

4.5 Admins

Authorised Go2Agro Admins have access to Student profiles, Applications, and associated documents for operational purposes including review, status updates, data correction, and forwarding to Partners.

Your personal data and uploaded documents are stored on Supabase cloud infrastructure in the India region. We implement reasonable technical and organisational security measures including:

• Encrypted data transmission (HTTPS/TLS) for all Platform communications
• Secure authentication with password hashing
• Role-based access controls limiting data visibility by user type
• Restricted Admin and Partner access on a need-to-know basis
• Secure file storage with access policies for uploaded documents

While we take reasonable precautions, no method of transmission or electronic storage is completely secure. We cannot guarantee absolute security of your data. You are responsible for keeping your login credentials confidential.

Uploaded documents are subject to a maximum file size of 5 MB per file as configured on the Platform.

We retain your personal data for as long as your account is active and for a reasonable period thereafter. Currently, we do not automatically delete personal data upon application withdrawal, rejection, or completion. Data associated with withdrawn, rejected, or completed Applications remains stored on the Platform for record-keeping, audit, and potential future reference purposes.

We may retain certain data for longer periods where required by applicable law, to resolve disputes, enforce our agreements, or maintain business records. When data is no longer needed, we will take reasonable steps to delete or anonymise it.

If you wish to request deletion of your account and associated data, please contact us at support@greenroot.in. Deletion requests will be processed subject to legal retention requirements and ongoing application or placement obligations.

Under the DPDP Act and applicable law, you have the following rights regarding your personal data:

• Right to access — request information about the personal data we hold about you.
• Right to correction — request correction of inaccurate or incomplete personal data. Currently, data corrections on the Platform are performed by authorised Admins upon your request.
• Right to erasure — request deletion of your personal data, subject to legal and contractual limitations.
• Right to withdraw consent — withdraw consent for processing that is based on consent, without affecting the lawfulness of processing before withdrawal.
• Right to grievance redressal — raise a complaint regarding our data handling practices.
• Right to nominate — nominate another individual to exercise your rights in the event of your death or incapacity, as provided under the DPDP Act.

To exercise any of these rights, contact us at support@greenroot.in with your registered email address and a description of your request. We will respond within the timeframe required by applicable law (generally within thirty (30) days under the DPDP Act). We may request identity verification before processing your request.

Please note that Students cannot directly edit certain verified data fields on the Platform after submission. Admin-assisted correction is available upon request.

The Platform is designed for agriculture students, who may include individuals under the age of eighteen (18). Where a User is a minor under applicable law, registration and use of the Platform should be undertaken with the knowledge and consent of a parent or legal guardian. Go2Agro reserves the right to request parental or guardian consent where required.

We do not knowingly collect personal data from children without appropriate consent. If you believe we have collected data from a minor without proper authorisation, please contact us immediately.

We do not send promotional marketing emails, SMS, or WhatsApp messages. Communications you receive from us are limited to operational and service-related messages, such as application status updates, account notifications, and responses to your enquiries.

The Platform uses cookies and similar technologies to maintain your login session, remember preferences, and understand how the Platform is used.

10.1 Essential Cookies

These cookies are necessary for the Platform to function, including authentication session cookies. They cannot be disabled without affecting Platform functionality.

10.2 Third-Party Embeds

Certain pages (such as the Contact page) may embed third-party content such as Google Maps. These services may collect data according to their own privacy policies.

You can control cookies through your browser settings. Disabling certain cookies may limit Platform functionality.

In the event of a personal data breach that is likely to affect your rights, we will take reasonable steps to investigate, contain, and remediate the breach. Where required by the DPDP Act and applicable rules, we will notify the Data Protection Board of India and affected Data Principals (Users) in accordance with legal requirements.

If you become aware of any unauthorised access to your account or suspect a security incident, please contact us immediately at support@greenroot.in.

In accordance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the DPDP Act, Go2Agro Services LLP has designated the following contact for privacy and data protection grievances. The Grievance Officer will be formally appointed and their details updated on this page:

• Name: [To Be Appointed]
• Designation: Grievance Officer / Data Protection Contact
• Email: support@greenroot.in
• Phone: +91 79729 37388
• Address: 42 Agro Business Park, Baner Road, Baner, Pune, Maharashtra 411045, India
• Office hours: Monday to Friday, 10:00 AM to 6:00 PM IST

We will acknowledge grievances within twenty-four (24) hours and endeavour to resolve them within fifteen (15) days, or within the timeframe prescribed by applicable law.

If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India as provided under the DPDP Act.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The "Last updated" date at the top of this page indicates when the Policy was last revised. Material changes will be communicated through the Platform or by email where appropriate. Continued use of the Platform after changes constitutes acceptance of the updated Policy.

For privacy-related questions, data access requests, or concerns about this Policy:

• Platform: GreenRoot — greenroot.co.in
• Data Fiduciary: Go2Agro Services LLP
• Privacy contact: support@greenroot.in
• General enquiries: info@greenroot.in
• Phone: +91 79729 37388
• Correspondence address: 42 Agro Business Park, Baner Road, Baner, Pune, Maharashtra 411045, India
• Registered office: [Registered Office Address — To Be Updated]
• LLPIN: [Registered Office Address — To Be Updated]