Privacy Policy

1. Who We Are

The CJPS Alumni Portal (“Portal”) is a private community platform for verified alumni and teachers of Christu Jyothi Public School, Rajakkad, Kerala, India. The Portal is operated in association with the school.

2. Data We Collect

• Account data: Name, email address, password (hashed), batch year, school attended.
• Profile data: Location, profession, qualification, social media links, bio, profile photo.
• Content data: Posts, comments, stories, and job listings you create.
• Usage data: Login activity, actions taken within the Portal (for moderation and security).
• Technical data: IP address, browser type (collected via server logs).

3. How We Use Your Data

• To create and manage your account.
• To verify your identity as a genuine CJPS alumnus or teacher.
• To display your profile to other verified members of the community.
• To send transactional emails (account verification, approval notifications).
• To moderate content and maintain community safety.
• To improve platform features and performance.

We do not sell your data to third parties. We do not use your data for advertising.

4. Data Storage and Security

Your account and profile data is stored in a secure PostgreSQL database on servers located in India. Profile photos and media are stored using Amazon Web Services (AWS S3), in AWS's Mumbai (ap-south-1) region — your uploaded photos and content stay within India. We use industry-standard encryption (bcrypt for passwords, HTTPS for data in transit) and access controls to protect your information.

5. Data Sharing

Your data is shared only:

• With other verified Portal members (profile, posts, stories — as per your activity).
• With school administrators for account verification and moderation purposes.
• With infrastructure providers (server hosting, email service, cloud storage) strictly for operating the Portal.
• When required by Indian law or a lawful government order.

6. Your Rights

Under the Digital Personal Data Protection Act, 2023 (India), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data via your profile settings.
• Erase your account and associated personal data — instantly, yourself, from Edit Profile → Delete Account. No need to email anyone.
• Withdraw consent at any time by deleting your account.
• Nominate a person to exercise your rights in the event of your death or incapacity.

For access, correction, or nomination requests, or any right you can't exercise yourself in-app, contact our Grievance Officer (details in Section 10).

7. Data Retention

We retain your data for as long as your account is active. Deleting your account from Edit Profile erases your personal data immediately. Some anonymised usage logs may be retained for security purposes.

8. Data Breach Notification

In the unlikely event of a personal data breach, we will notify the Data Protection Board of India and affected members as required under the Digital Personal Data Protection Act, 2023, describing what happened, the likely consequences, and the steps we are taking in response.

9. Cookies

We use session cookies strictly necessary for authentication (NextAuth.js session token). We do not use tracking cookies, analytics cookies, or third-party advertising cookies.

10. Grievance Officer

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the details of the Grievance Officer are:

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the Portal after changes constitutes acceptance.