Privacy Policy

This policy explains what personal data Campus Connect collects, why, who sees it, and what control you have. It goes together with our Terms & Conditions.

1. What we collect

• Account details: name, e-mail address, password (stored only as a hash).
• Student details: university, field of study, enrolment number, semester, expected graduation year, GPA, date of birth, optional phone number, bio, LinkedIn link and profile picture.
• Student ID card: an image or PDF you upload so we can confirm you are a student.
• Your activity: courses and rooms you join, messages, notes, votes, reports, appeals and the merit points history.
• Security data: your IP address and a random browser identifier (cookie), stored only as irreversible hashes, plus audit logs of moderation actions.

2. Why we use it

• To create and run your account and show your contributions to other students.
• ID card: only to verify that you are a real student. It is visible to authorised staff only, is not shown to other students, and is deleted automatically 30 days after your account is approved.
• To keep the Platform safe: detecting fake accounts and vote manipulation, investigating harassment and other violations, and enforcing our Terms. The hashed IP and browser identifier are used for this purpose only.
• To send service e-mails (for example e-mail verification and password reset).
• To comply with the law and to protect our rights, including reporting crimes to the authorities.

3. Who sees your data

• Other students see your name, university, field, level, merit points, bio and profile picture, and the notes and messages you post in shared rooms. Your phone number, date of birth, GPA, e-mail address and ID card are not shown to other students.
• Moderators and admins see what they need to do their job and every action they take is logged.
• Service providers (hosting, e-mail delivery and, if enabled, image safety checking of profile pictures and note images) process data on our behalf. We never send ID cards to a third party. We do not sell your data and we do not show advertising.
• Authorities and universities: we disclose data, including content and security data, when the law requires it, and on our own initiative when we have reason to believe a crime or a serious violation of our Terms has taken place (see Terms, section 5).

4. How long we keep it

• Account and activity data: while your account exists and until you delete it.
• ID card: deleted 30 days after approval, or earlier if you delete your account.
• Audit logs and records needed for investigations or legal claims: kept as long as necessary for that purpose, even after account deletion. They do not contain the text of your messages.
• Notes and merit history are removed when your account is deleted.

5. Your rights

Sign in and open Privacy & data to download a copy of your data or to delete your account. You can correct your profile information at any time under My Profile. For anything else, such as a question about how your data is used, contact us at the address below.

6. Cookies

We use only what is necessary: a session cookie to keep you signed in, a security token (CSRF) to protect your forms, and a long-lived random browser identifier that helps us spot multiple accounts used by one person. We do not use advertising or tracking cookies.

7. Security

Passwords are hashed, connections are encrypted, ID cards and notes are stored privately and only served to people who are allowed to see them, uploads are checked for malware, and staff access is logged. No system is perfectly secure, so please use a strong, unique password.

8. Age

The Platform is for adults who are enrolled at a university. We do not knowingly collect data from anyone under 18 and will delete it if we learn we have.

9. Changes and contact

We will tell you in the Platform if this policy changes in a significant way. Questions: info@azarkdigitalsolutions.com.