Privacy Policy

1. Information we collect

We collect only the data needed to run the features you use. We do not run advertising SDKs, third-party analytics SDKs or crash-reporting SDKs in the current version of the app.

2. How we use your information

• Create and secure your account, and sign you in.
• Personalise the projects, notes and content shown to you based on your course, branch and year.
• Operate the project marketplace, Custom Project Builder, jobs, placement preparation, practice tests and resume builder.
• Process payments, Premium subscriptions, wallet top-ups and withdrawal requests, and record your order and purchase history.
• Run the referral programme and credit rewards.
• Send you in-app notifications you have not switched off.
• Respond to your support requests.
• Detect, investigate and prevent fraud, abuse, security incidents and violations of our Terms.
• Comply with legal, tax and accounting obligations.
• Fix bugs, monitor stability and improve the app.
• We do NOT use your personal data for third-party advertising, and we do NOT sell your personal data.

3. Legal bases and consent

We process your personal data on the basis of the consent you give when you create an account and use a feature, to perform the service you have asked for, to comply with law, and for our legitimate interest in keeping the service safe and functional.

You can withdraw consent by deleting your account (see section 9). Withdrawing consent does not affect processing already carried out, and some records may be retained where the law requires (see section 8).

4. Payment processing

Payments in CampusEduX are processed by Razorpay Software Private Limited ("the payment gateway"). When you pay, the payment gateway's own checkout collects your card, UPI, net-banking or wallet details directly. CampusEduX does not receive or store those payment credentials.

After a payment, the gateway returns to CampusEduX a payment ID, an order ID, a cryptographic signature and the payment status. We verify the signature on our server before granting anything, and we store those identifiers together with the amount and the item purchased so we can show your order history and handle support and refunds.

The payment gateway processes your payment information under its own privacy policy: https://razorpay.com/privacy/.

5. Cloud infrastructure and storage

CampusEduX runs on cloud infrastructure provided by Supabase. Your account data, profile, resume content, applications, orders and other records are stored in a managed database; files you upload (profile photos, resumes, custom-project reference files) are stored in cloud file storage; and some server logic runs as serverless functions on this infrastructure.

Resume files and custom-project files are stored in private storage and are served to you through short-lived signed links. Profile photos are stored in a bucket that is readable by the app so your picture can be shown.

Supabase processes this data as our service provider under its privacy policy: https://supabase.com/privacy.

6. User-generated content

Reviews and ratings you post are visible to other users along with your profile name and photo. Resume content, Custom Project Builder requests and uploaded files are visible to you and to our staff who operate and support the service (for example, to prepare a custom project or review a job application). Do not include sensitive personal information in free-text fields that a feature does not ask for.

7. How we share information

We share personal data only in these situations:

• Service providers: the payment gateway (to process payments and refunds), the cloud infrastructure provider (to host the database, storage and functions), and Google (only if you use Google sign-in). These providers act on our instructions.
• Legal and safety: with courts, law-enforcement or regulators when required by law, and where necessary to enforce our Terms or protect the rights, safety and property of users or the public.
• Business transfer: if the operation of CampusEduX is transferred to another entity, your data may be transferred as part of that change, subject to this policy.
• We do not sell your personal data and we do not share it with third parties for their own advertising.

8. Data retention

• Account and profile data: kept while your account exists.
• Transaction, payment and invoice records: retained after account deletion for as long as tax, accounting and audit laws in India require.
• Support correspondence: kept for a reasonable period to handle follow-ups and disputes.
• Security and fraud-prevention records: kept as long as needed for that purpose.
• Backups: routine encrypted backups are cycled on a rolling schedule, so a deleted record may persist in a backup for a short period before it is overwritten.

9. Account deletion

You can delete your account from inside the app: Profile → Settings → Legal & Privacy → Delete Account (also reachable from Privacy → Delete Account). This runs a secure server function that deletes your profile and your personal records — purchases, applications, resumes, wallet ledger, referrals, reviews, notifications, preferences and custom-project requests — removes your uploaded files, and deletes your login so you can no longer sign in.

Some records are retained as described in section 8 (for example, transaction records the law requires us to keep), and deleted data may remain briefly in encrypted backups before they cycle.

If you cannot access the app, you can email privacy@campusedux.app from your registered email address to request deletion. See the Delete Account page for details.

10. Security

We use reasonable technical and organisational measures to protect your data: encryption in transit (HTTPS/TLS), row-level access rules in the database so one account cannot read another's data, private storage with signed links for resumes and custom-project files, server-side verification of payments, server-held secrets that never ship in the app, and rate limiting on sensitive actions.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a personal-data breach that affects you, we will act in line with applicable law.

11. Children's privacy

CampusEduX is intended for users aged 13 and above. It is not directed to children under 13, and we do not knowingly collect personal data from them. Users between 13 and 18 should use CampusEduX only with the involvement of a parent or legal guardian, who accepts these terms on their behalf.

If you believe a child under 13 has given us personal data, contact privacy@campusedux.app and we will delete it.

12. Your rights

Subject to applicable law, you can:

• Access the personal data we hold about you and get a summary of how it is processed.
• Correct or update inaccurate or incomplete data — most fields are editable on the Profile and Edit Profile screens.
• Delete your account and personal data (section 9).
• Withdraw consent for processing by deleting your account.
• Nominate another individual to exercise your rights in the event of death or incapacity, as provided under the Digital Personal Data Protection Act, 2023.
• Raise a grievance with our Grievance Officer (section 14) and, if unresolved, with the Data Protection Board of India.

13. Changes to this Privacy Policy

We may update this policy from time to time. The current version number and effective date are shown at the top of this document in the app and on our website. For material changes we will provide a more prominent notice, such as an in-app message. Continuing to use CampusEduX after an update means you accept the revised policy.

14. Contact us

• General / privacy questions: privacy@campusedux.app
• Grievance Officer: [GRIEVANCE OFFICER NAME], grievance@campusedux.app
• Support: support@campusedux.app
• Operator: CampusEduX — an individual operating under the unregistered trading name “CampusEduX” in India
• Registered address: [REGISTERED BUSINESS ADDRESS]