Overview
ShieldSync Labs (“ShieldSync,” “we,” “us”) is operated by ShieldSync Security Private Limited, whose tagline is “Empowering Cybersecurity Futures.” The platform lets a learner launch a real, hands-on cloud-security lab in a throwaway AWS account that runs in the browser and is automatically destroyed when the lab ends. This policy covers the personal data we process to make that work.
Data we collect
- Account & identity.Your name and email address. You sign in with Google, so we receive the basic profile (name, email) that Google returns through our sign-in provider — we never see your Google password.
- Lab activity.Which labs you launch, your progress and results when you run “Check my work,” launch counts, and the completion status used to issue your certificate.
- Order records.For paid labs, the record of a purchase — amount, status, and a payment reference — needed to grant access and for accounting. We do not receive or store your full card details (see Payments).
- Usage data. Basic, privacy-respecting information about how the platform is used (such as pages visited and device type), to keep it working and improve it.
How we use it
We use this data only to operate the labs platform:
- Authenticating your sign-in and maintaining your account.
- Provisioning your lab environment, tracking your progress, grading your work, and enforcing per-lab launch limits.
- Granting access to paid labs and the monthly pass, and keeping the order records needed for accounting.
- Issuing your digitally signed completion certificate and letting anyone you share its link with verify it.
- Keeping the platform secure, reliable, and improving over time.
We do not sell your personal data, and we do not use it for advertising.
How data is handled
- Sign-in and account authentication are handled by Amazon Cognito.
- Each lab runs inside a dedicated, isolated AWS account that is automatically wiped — every resource in it destroyed — once the lab ends or its timer expires. You never connect your own AWS account, and your work is not retained in that live environment.
- Account, order, and entitlement records are stored in AWS (Amazon DynamoDB, us-east-1) with backups enabled.
- Completion certificates are verified through private, unguessable links that are not publicly listed or searchable.
Payments
Paid labs are processed by Paytm (Paytm Payments Services Ltd.), an RBI-authorised payment aggregator. Your card, UPI, and bank details are entered on Paytm's secure checkout and handled by Paytm — ShieldSync never sees or stores your full card details. We keep only the order records (such as amount, status, and a payment reference) needed to grant access and for accounting. Payment data handled by Paytm is stored in India in line with RBI requirements.
Sub-processors
We rely on the following sub-processors to run the platform:
- Amazon Web Services (AWS)— compute and storage, the isolated lab accounts, and authentication (Amazon Cognito).
- Cloudflare— application hosting and content delivery.
- Google— sign-in, when you choose to authenticate with your Google account.
- Paytm— payment processing for paid labs.
ShieldSync Labs is built on AWS and Cloudflare infrastructure and is designed with security best practices in mind.
Hosting & data transfer
The application itself runs on Cloudflare's global network. Lab provisioning, account data, and order records are processed and stored on AWS infrastructure in the us-east-1 (Northern Virginia, United States) region. If you are located outside the United States, this means personal data is transferred to, and processed in, the United States as part of using the platform. Payment data handled by Paytm is stored in India. Where personal data crosses borders, we rely on appropriate safeguards and process it in accordance with India's DPDP Act, 2023.
Retention & deletion
We keep personal information only as long as needed for the purposes above — such as maintaining your account, honouring paid access, and keeping order records for accounting — or as required by law, after which it is deleted or anonymised. You may request deletion of your account and data at any time by emailing privacy@shieldsyncsecurity.com.
Your rights
Depending on your location (including under India's DPDP Act, 2023 and the GDPR), you may have rights to access, correct, delete, or restrict use of your information, and to withdraw consent. To make a request, email privacy@shieldsyncsecurity.com.
Security
We rely on AWS and Cloudflare's infrastructure controls, per-lab account isolation with automatic teardown, and unguessable, non-indexed certificate links as core parts of how we protect data. The platform is designed with security best practices in mind. No method of transmission or storage is perfectly secure, but we work to keep your data safe. If you believe you've found a security issue, see our security.txt or email security@shieldsyncsecurity.com.
Children's data
ShieldSync Labs is a professional learning tool intended for use by adults building cloud-security skills. It is not directed at, and should not be used by, children.
Changes to this policy
We may update this policy as the platform evolves. We'll update the “Last updated” date above when we do.
Contact
General questions: info@shieldsyncsecurity.com. Privacy and data requests: privacy@shieldsyncsecurity.com. Security reports: security@shieldsyncsecurity.com. ShieldSync Security Private Limited, Noida, Uttar Pradesh, India.
See also our Terms of Service.