Privacy Policy

NitaCampus respects the privacy of every student, faculty member, and campus resident at NIT Agartala. To provide a secure, verified hyper-local campus platform, we collect specific categories of personal and technical data:

• Account & Profile Information: Full name, student email address (preferably @nita.ac.in or personal email), profile photo, username, academic branch, enrolled degree program, and graduation year.
• Student Verification Information: Enrollment/Roll Number, student ID proof document (college ID card or fee receipt uploaded during onboarding) used strictly to verify authentic student status and prevent unauthorized platform access.
• Contact Details: Phone number and hostel address (hostel block, room number, or faculty quarter) required for parcel, delivery, and marketplace fulfillment.
• Transaction Information: Order history, delivery pickup/drop receipts, peer marketplace listing details, complaints lodged, study material uploads, and payment verification records.
• Device & Usage Information: IP address, browser type, operating system version, app interactions, crash logs, and session timestamps collected automatically for system performance optimization.
• Cookies & Local Data: Session tokens, authentication cookies (via Clerk Auth), and local storage preference keys to keep you logged in securely and maintain theme preferences.
• Location Data: Geolocation coordinates are requested ONLY when explicit permission is granted on mobile/web browsers. Location data is used solely to pin accurate intra-campus pickup/drop points at NIT Agartala.
• Payment Information: All financial payments are processed through PCI-DSS Level 1 compliant payment gateways (e.g. Razorpay). NitaCampus never stores or processes raw credit/debit card numbers, UPI PINs, or banking passwords on its servers.

The information collected by NitaCampus is utilized strictly for campus operational, safety, and functional purposes:

1. To verify authentic student identity and maintain a safe, troll-free campus community.
2. To facilitate intra-campus parcel, food, and document deliveries between student runners and buyers.
3. To connect student buyers and sellers on the NitaCampus peer marketplace.
4. To display relevant academic class timetables, NITA notices, and study resource access.
5. To process delivery runner payouts, order refunds, and resolve student grievances.
6. To send critical push notifications regarding notice alerts, delivery status updates, and emergency medical alerts.
7. To detect and prevent fraudulent orders, fake listings, harassment, or unauthorized access.

NitaCampus takes reasonable technical, administrative, and organizational measures to safeguard user data against unauthorized access, loss, misuse, or alteration:

• Encryption in Transit & at Rest: All web traffic is encrypted using industry-standard Transport Layer Security (TLS 1.3/HTTPS). Student verification documents are stored securely in encrypted Cloudflare R2 bucket storage with presigned access controls.
• Database Security & Access Controls: Database infrastructure (Supabase PostgreSQL) is protected by strict Row-Level Security (RLS) policies, ensuring users can only access their authorized data records.
• Role-Based Admin Access: Internal administrative dashboards require multi-factor authentication and role-based clearance (ADMIN / SUPER_ADMIN) to audit records.

NitaCampus integrates with trusted enterprise infrastructure providers to deliver platform capabilities. These third-party services process data strictly under confidentiality agreements:

• Clerk Auth: Secure user authentication, OAuth login, and session token management.
• Razorpay: Secure payment processing, UPI checkout, and refund dispatches.
• Cloudflare R2 Storage: Secure storage of user profile images, marketplace product photos, and verified student ID proofs.
• Supabase / PostgreSQL: Cloud database infrastructure for campus records.
• Vercel & Cloudflare: Web application hosting, edge CDN caching, and DDoS mitigation.

Data Retention: We retain account and transaction records for as long as your student account remains active on NitaCampus, or as necessary to fulfill legal obligations and dispute resolution.

Your Rights: As a user of NitaCampus, you possess the right to:

• Access and review the personal information associated with your profile.
• Correct or update inaccurate profile, hostel, or contact details via the Account Settings page.
• Request deletion of your NitaCampus account and personal data upon graduation or leaving NIT Agartala by contacting supportnitacampus@gmail.com.
• Withdraw location permission at any time through your web browser or device settings.

NitaCampus reserves the right to update this Privacy Policy periodically to reflect technological advancements, operational changes, or legal requirements. Material updates will be notified via in-app banner announcements or student notice alerts.