Privacy Policy

1. Introduction

This Privacy Policy explains how Student Hub (ATDRx) ("we", "us", "our") collects, uses, stores, and protects personal information when you use our platform at atdrx.me. We are committed to handling your data responsibly and transparently, in compliance with applicable data protection laws including the Information Technology Act, 2000 (India) and the Digital Personal Data Protection Act, 2023 (DPDPA).

By creating an account or using any part of the platform, you consent to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

• Account registration: name, email address, phone number, date of birth, college/university, degree, employment status
• Profile details: CGPA (optional, used for eligibility filtering), LinkedIn/GitHub links
• Content submissions: opportunity listings, blog posts, study guide topics, chat messages
• Newsletter preferences: interest categories (internships, hackathons, etc.) and frequency
• Platform ratings: design, ease of use, and accessibility scores you submit

2.2 Information Collected Automatically

• Log data: IP address, browser type, device type, operating system, pages visited, timestamps
• Usage analytics: features accessed, opportunities clicked or bookmarked, search queries
• Authentication events: login method used, failed login attempts (for security audit logging)
• Download tracking: which study guides or resources were downloaded

2.3 Information from Third Parties

• OAuth providers (Google, GitHub, Microsoft): name, email, and profile photo as shared by the provider
• Firebase Phone OTP: phone number verified through Firebase Authentication
• External job APIs (e.g., Adzuna): publicly listed opportunity data — no personal user data is sourced from these
• News APIs: content only — no personal data

3. How We Use Your Information

We use your information to:

• Provide, operate, and improve the platform and its features
• Personalise your experience (opportunity recommendations, 'For You' feed based on your profile)
• Send you newsletters, opportunity alerts, and deadline reminders per your preferences
• Process opportunity submissions through the moderation queue
• Award gamification badges based on your activity
• Detect, investigate, and prevent fraud, abuse, and security threats
• Conduct platform analytics to understand usage trends and improve content curation
• Comply with legal obligations

4. Data Sharing & Disclosure

We do not sell your personal data. We may share data in the following circumstances:

• Service providers: trusted third-party processors (hosting, email delivery, analytics) who process data on our behalf under strict confidentiality agreements
• Legal requirement: when required by law, court order, or government authority
• Safety: when necessary to protect the rights, property, or safety of users or the public
• Business transfer: in the event of a merger, acquisition, or asset sale, your data may be transferred — you will be notified in advance

Future features such as peer resume review and company-facing portals may involve additional data sharing with your explicit consent, which will be disclosed separately at that time.

5. Data Retention

• Active accounts: data retained for as long as your account exists
• Deleted accounts: most personal data deleted within 30 days of account deletion; anonymised analytics data may be retained longer
• Audit logs: security event logs retained for up to 12 months
• Community content (blogs, study guides): may be retained in anonymised form to preserve community knowledge

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated personal data
• Withdraw consent for newsletter communications at any time
• Object to or restrict certain types of data processing

To exercise any of these rights, contact us at legal@atdrx.me. We will respond within 30 days.

7. Cookies & Local Storage

We use cookies and browser local storage to:

• Maintain your login session (JWT authentication)
• Remember your dark/light mode preference
• Store newsletter subscription preferences

We do not use third-party advertising cookies. You may disable cookies in your browser settings, though some platform features may not function correctly as a result.

8. Security

We implement industry-standard security measures including JWT-based authentication, role-based access control, IP-tracked audit logging, and encrypted data transmission (HTTPS). However, no system is completely immune to security risks. We encourage users to use strong passwords and report suspected security issues immediately.

9. Children's Privacy

Student Hub is intended for users aged 13 and above. We do not knowingly collect personal data from children under 13. If we discover such data has been collected, we will delete it promptly. If you believe a minor has created an account, please contact us.

10. Future Features & Data Practices

As we expand the platform — including peer resume review (which involves document uploads), university-specific content personalisation, competitive exam tracking, and company-facing portals — additional data may be collected. Any new category of personal data collection will be disclosed through an updated Privacy Policy, and where required by law, will require fresh consent.

11. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or in-app notification at least 7 days before they take effect. The date at the top of this document reflects the most recent revision.

12. Contact

For privacy-related enquiries or data requests: legal@atdrx.me