Your Privacy Matters

Account Information

When you register, we collect your name, email address, and password. If you sign in via Google OAuth, we receive your name, email, and profile picture from Google.

Profile Data

Depending on your role (student, teacher, employer, organization admin, parent), you may provide additional information such as educational qualifications, subjects, languages, bio, KYC documents, company details, and profile images.

Usage Data

We automatically collect IP address, browser type, device information, operating system, country of origin, and timestamps when you sign in or interact with the platform. This is stored in auth event logs for security.

Payment Information

Payment transactions are processed through Cashfree payment gateway. We store transaction IDs, payment status, amounts, and fee plan details. We do not store full credit card or bank account numbers on our servers.

Content & Communications

Posts, comments, course content, class recordings, uploaded files, messages, and any other content you create on the platform is stored on our servers and Cloudflare R2 storage.

Service Delivery

To provide and maintain the platform — including course enrollment, batch management, live classrooms, job board, wallet transactions, social feed, promotions, and organizational workspaces.

Personalization

To personalize your feed, recommend courses, match job opportunities, and auto-suggest audience targeting for promotions based on your profile and activity.

Communication

To send transactional emails (verification, password reset, payment receipts) via Resend, and push notifications for platform events. We do not send marketing emails without your opt-in consent.

Security

To detect and prevent fraud, unauthorized access, and abuse. We use Arcjet for rate limiting and bot protection. Auth event logs (IP, country, user-agent) are retained for security auditing.

Analytics & Improvement

Aggregated and anonymized usage data helps us understand how features are used and where to improve the platform. We do not sell individual user data to third parties.

With Other Users

Your public profile (name, avatar, role badge) is visible to other platform users. Post visibility is controlled by your chosen scope: public (followers only), organization (members only), or private (only you).

With Organizations

If you join an organization workspace, your profile information and role within that organization are visible to org admins and members with appropriate permissions.

With Service Providers

We share data with third-party service providers strictly to operate the platform: Cashfree (payments), Stream.io (video classrooms), Resend (email), Cloudflare (storage), and Google (OAuth). These providers are bound by their own privacy policies.

Legal Requirements

We may disclose information if required by law, regulation, or legal process, or to protect the rights, safety, or property of Smart Campus, our users, or the public.

Encryption

All data in transit is encrypted via HTTPS/TLS. Passwords are hashed using industry-standard algorithms. Two-factor authentication (TOTP) is available for all accounts.

Access Controls

Platform access is governed by role-based access control (RBAC) at both the platform level and organization level. Custom roles with granular module-level permissions ensure least-privilege access.

Infrastructure

Our platform runs on secured infrastructure with automated backups, monitoring, and incident response procedures. File storage uses Cloudflare R2 with signed URLs for access control.

Access & Portability

You can view and download your profile data, posts, and transaction history at any time from your account settings.

Correction

You can update your profile information, email, and other personal details from your profile page.

Deletion

You may request account deletion by contacting support. This will remove your personal data, though some records (financial transactions, audit logs) may be retained as required by law.

Consent Withdrawal

You can disable push notifications, opt out of non-essential communications, and revoke third-party OAuth connections at any time.

Active Accounts

Your data is retained as long as your account is active. Course content, posts, and financial records persist while the account exists.

Deleted Accounts

Upon account deletion, personal data is removed within 30 days. Financial records and audit logs may be retained for up to 7 years as required by Indian tax and financial regulations.

Auth Logs

Sign-in/sign-up event logs (IP, country, user-agent) are retained for 12 months for security auditing purposes.

Essential

We use session cookies for authentication and local storage for theme preferences (color theme, accent color). These are necessary for the platform to function.

Analytics

We may use anonymized analytics to understand usage patterns. No third-party advertising trackers are used on the platform.

We may update this privacy policy from time to time. Material changes will be communicated via platform notification or email. Continued use of the platform after changes constitutes acceptance of the updated policy.

If you have questions about this privacy policy or your data, contact us at [email protected] or visit our Contact page.