Information We Collect
We collect only information that is necessary to provide the platform. By using CampusCritique, you consent to the collection and use of your data as described here. Here is what we collect and why:
Account Information
When you create an account, we collect your full name, email address, and password (stored as a secure hash — we never see the plaintext). For student accounts, we additionally collect your college name, program/branch, and graduation year to enable verification and badge assignment.
Student Identity Verification
To verify that a student reviewer is genuinely enrolled at a college, we verify account registration against recognized college email domains (e.g., @vedamsot.org). We do not store copies of ID documents. Email domain verification is the sole verification mechanism currently in use.
Reviews & Content You Submit
When you write a review, we store the review text, ratings, the college it pertains to, your account identity, and the submission timestamp. Approved reviews are made publicly visible with your display name (or anonymously, at your discretion, where that option is available).
Usage Data
We collect standard server logs including your IP address, browser type, pages visited, and interaction timestamps. This data is used to maintain platform security and understand aggregate usage patterns. It is not sold or used for behavioral advertising.
How We Use Your Data
We use the information we collect for the following purposes:
- To create and manage your account and authenticate you securely.
- To verify student identity and assign the Verified Student badge.
- To publish your reviews and contributions to the platform.
- To send you transactional emails: email verification, password reset, and moderation notifications.
- To improve the platform through aggregate, anonymized usage analytics.
- To investigate and respond to abuse reports, spam, or violations of our Terms.
- To comply with legal obligations where required.
- We do not sell your personal data, nor do we use it for behavioral advertising.
Sharing With Third Parties
We share data with third parties only when strictly necessary to operate the platform:
Our backend database and auth infrastructure. Your data is stored in Supabase's hosted PostgreSQL and auth services, protected by Row Level Security policies.
Our application server and CDN provider. Processes HTTP requests to serve the application. Logs are retained for a limited period for security purposes.
Beyond the above, we may disclose your information if required to do so by law or in response to a valid legal process (such as a court order or government authority request). We will notify you if such a request is received, to the extent permitted by law.
Data Retention
We retain your data for as long as your account is active or as needed to provide the platform:
- Account data is retained until you request deletion or your account is terminated.
- Published reviews remain on the platform after account deletion by default, attributed anonymously. You may request review deletion via connect@campuscritique.in.
- Server logs are retained for a limited period and then deleted.
- Moderation records may be retained for abuse prevention purposes.
Your Rights
You have the following rights with respect to your personal data:
To exercise any of these rights, contact us at connect@campuscritique.in. We will respond as soon as we can.
Contact & Updates
If you have questions or concerns about this Privacy Policy or our data practices, please reach out:
Contact Us
connect@campuscritique.inFor any privacy-related queries, please use the email above. We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users and/or by posting a notice on the platform at least 14 days in advance of the change taking effect.