Privacy Policy

1. Introduction & Consent

Welcome to IITR Hub. By using this platform, you explicitly consent to the collection, use, and processing of your personal data as outlined in this Privacy Policy. This document is published in accordance with the Information Technology Act, 2000 and the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and aligns with the Digital Personal Data Protection (DPDP) Act, 2023.

2. Information We Collect

To provide and operate the platform, we collect the following information when you log in and interact with IITR Hub:

• Profile Data: Your name, email address (specifically your iitr.ac.in or verified email), and profile picture (via Google Authentication).
• Usage Data: Application usage data, logs, and interaction history on the platform.

3. How We Use Your Information

We use your collected data strictly for the following purposes:

• To verify your identity as an enrolled student or alumni of IIT Roorkee.
• To provide, operate, and maintain the IITR Hub platform and its features.
• To improve user experience and troubleshoot issues.

4. Third-Party Data Sharing

We do not sell your personal data. However, to operate the platform effectively, your data is processed using trusted third-party infrastructure under strict confidentiality agreements. These include:

• Supabase: For secure database hosting and data management.
• Vercel: For platform hosting and serverless functions.
• Google OAuth: For secure authentication and login.

5. Cookies and Tracking

We use essential cookies and local storage mechanisms necessary for the platform to function properly, such as maintaining your authentication session. By using IITR Hub, you consent to the use of these strictly necessary operational cookies.

6. Data Security & Breach Notification

We implement industry-standard security measures, including encryption and secure access controls, to protect your personal data from unauthorized access, alteration, or destruction. In the unlikely event of a data breach affecting your personal information, we will notify you via email in accordance with applicable laws.

7. Your Data Rights (DPDP Act, 2023)

Under the DPDP Act 2023, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete data.
• Right to Portability: Receive your data in a structured, commonly used format.
• Right to Erasure (Right to be Forgotten): Request the deletion of your personal data.

8. Data Deletion Flow & Retention

To request deletion of your personal data, email iitrhub@gmail.com from your registered email address with the subject "Data Deletion Request". We will verify your identity, process the request, and confirm deletion via email within 30 days.

Upon account termination or deletion, your profile data and user-generated content will be removed. However, certain anonymized security and system logs may be retained for up to 180 days to comply with CERT-In Directions 2022.

9. Minor Data Protection

The platform is strictly intended for individuals who are 17 years of age or older. We do not knowingly collect personal data from anyone under this age without verifiable parental consent.

10. Policy Updates

We may update this Privacy Policy from time to time. When we make material changes, we will actively notify you via an email notification to your registered address.

11. Governing Law & Jurisdiction

This Privacy Policy is governed by the laws of India. Any disputes arising in relation to this policy shall be subject to the exclusive jurisdiction of the courts in Roorkee, Uttarakhand.

12. Grievance Officer

In accordance with the Information Technology Act, 2000, and the DPDP Act, 2023, the details of the Grievance Officer are provided below. If you have any concerns regarding data privacy, please contact:

We will acknowledge your grievance and resolve it in a timely manner as stipulated by law.