Privacy Policy

1. Who We Are

The CJPS Alumni Portal (“Portal”) is a private community platform for verified alumni and teachers of Christu Jyothi Public School, Rajakkad, Kerala, India. The Portal is operated in association with the school.

2. Data We Collect

• Account data: Name, email address, password (hashed), batch year, school attended.
• Profile data: Location, profession, qualification, social media links, bio, profile photo.
• Content data: Posts, comments, stories, and job listings you create.
• Usage data: Login activity, actions taken within the Portal (for moderation and security).
• Technical data: IP address, browser type (collected via server logs).

3. How We Use Your Data

• To create and manage your account.
• To verify your identity as a genuine CJPS alumnus or teacher.
• To display your profile to other verified members of the community.
• To send transactional emails (account verification, approval notifications).
• To moderate content and maintain community safety.
• To improve platform features and performance.

We do not sell your data to third parties. We do not use your data for advertising.

4. Data Storage and Security

Your account and profile data is stored in a secure PostgreSQL database on servers located in India. Profile photos and media are stored using Cloudflare R2 (US-based cloud storage). We use industry-standard encryption (bcrypt for passwords, HTTPS for data in transit) and access controls to protect your information.

5. Data Sharing

Your data is shared only:

• With other verified Portal members (profile, posts, stories — as per your activity).
• With school administrators for account verification and moderation purposes.
• With infrastructure providers (server hosting, email service, cloud storage) strictly for operating the Portal.
• When required by Indian law or a lawful government order.

6. Your Rights

Under the Digital Personal Data Protection Act, 2023 (India), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data via your profile settings.
• Erase your account and associated personal data.
• Withdraw consent at any time by deleting your account.
• Nominate a person to exercise your rights in the event of your death or incapacity.

To exercise any of these rights, contact our Grievance Officer (details in Section 9).

7. Data Retention

We retain your data for as long as your account is active. If you request deletion, we will erase your personal data within 30 days, except where retention is required by law. Some anonymised usage logs may be retained for security purposes.

8. Cookies

We use session cookies strictly necessary for authentication (NextAuth.js session token). We do not use tracking cookies, analytics cookies, or third-party advertising cookies.

9. Grievance Officer

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the details of the Grievance Officer are:

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the Portal after changes constitutes acceptance.