Privacy Policy | Adhithyan.dev

Effective Date

August 1, 2025 - adhithyan.dev ("we", "our", "us") respects your privacy and is committed to protecting it in accordance with the Indian Information Technology Act, 2000 and the Digital Personal Data Protection (DPDP) Act, 2023.

1 Information We Collect

We collect minimal data necessary for platform functionality and user experience:

Name and institutional email (e.g., 2028@bca.ajce.in)
Phone number (if voluntarily provided)
Account activity logs and usage analytics
Device/browser metadata (IP address, user agent)
Voluntary payment metadata (via Razorpay/UPI)
No financial credentials are stored on our servers

2 Purpose of Data Collection

Your data is used exclusively for legitimate purposes:

To provide secure login and personalized access to platform features
To enable admin-managed interactions and event participation
To track voluntary contributions and generate usage insights
To communicate important notices, updates, and platform changes
To ensure platform security and prevent unauthorized access

3 Consent and Lawful Use

By creating an account on adhithyan.dev, you provide explicit consent to our collection and use of your data as outlined in this policy.

Legal Basis

We process your data under legitimate interest and explicit user consent as per DPDP Act 2023 provisions. You may withdraw consent at any time through your account settings or by contacting us.

4 Data Sharing Policy

We never sell your personal data. Limited data sharing occurs only in these scenarios:

Payment Processing: Minimal data shared with Razorpay for payment verification
Institutional Coordination: Basic details shared with authorized AJCE administrators
Legal Compliance: Data disclosure to legal authorities when legally required
Service Providers: Essential data shared with trusted third-party services under strict confidentiality agreements

5 Data Security Measures

We implement industry-standard security measures to protect your information:

Password Security: All passwords are hashed using bcrypt encryption
Session Protection: CSRF protection and secure session management
Secure Transmission: HTTPS encryption recommended for all subdomains
Access Control: Role-based access with minimal privilege principles
Regular Audits: Periodic security assessments and updates

6 Your Rights Under DPDP Act 2023

As a data principal, you have the following rights:

Right to Access: Request a copy of all personal data we hold about you
Right to Correction: Request correction of inaccurate or incomplete data
Right to Erasure: Request deletion of your personal data (subject to legal obligations)
Right to Data Portability: Request your data in a structured, machine-readable format
Right to Grievance Redressal: File complaints through our designated contact channels
Right to Withdraw Consent: Withdraw consent at any time without affecting lawfulness of prior processing

7 Data Retention Policy

We retain your data only as long as necessary for the purposes outlined in this policy:

                            
                            Retention Periods
                        
Active Accounts: Data retained while account remains active
Inactive Accounts: Data purged after 2 years of inactivity
Payment Records: Retained for 7 years as per Indian tax regulations
Security Logs: Retained for 1 year for security monitoring

8 Changes to This Policy

This privacy policy may be updated periodically to reflect changes in our practices, legal requirements, or platform features. We will notify users of significant changes through:

Email notifications to registered users
Prominent notices on the platform dashboard
Updated "Last Modified" date at the top of this policy

Continued use of the platform after policy updates constitutes acceptance of the revised terms.

Contact for Privacy Matters

For any privacy-related queries, data requests, or grievances:

admin@adhithyan.dev

Response within 72 hours as per DPDP Act requirements