Privacy Policy
Last updated: June 2025 · Written in plain English — no legalese.
🔒 The short version
Your name is never shown anywhere. We only store your email for login purposes. Your reviews appear as "Student at [College]". Even our moderation team only sees a partial, masked version of your email. You can delete your reviews and account at any time.
1. What we collect
We collect the minimum possible to run the platform:
- Your email address — used only for login and account verification. Never shown publicly.
- Your password — stored securely as a one-way hash by Supabase. We never see it in plain text.
- Your reviews — text, ratings, college name, branch, batch year, and enrollment status. These are stored linked to an internal user ID (not your email).
- Helpful votes — which reviews you marked helpful. Not shown publicly; used for sorting only.
2. What we never collect
- Your name, age, gender, or any real-world identity
- Your phone number
- Your college student ID or roll number
- Your location or IP address (beyond what any web server logs)
- Any payment information (the platform is free)
- Device fingerprints or tracking identifiers
3. How reviews are stored
When you submit a review, here's what happens technically:
- Your review is linked to an internal User ID — a random string like
a3f8c2d1-…. This is not your email address.
- The review is stored with the display label "Student at [College]". Your email never touches the review record in any public-facing column.
- Our database (Supabase, hosted on AWS) uses Row Level Security — the database itself enforces who can read what.
- Anyone visiting the site can read public reviews. They only ever see the display label, not who wrote it.
The link between your email and your User ID exists only in the authentication system. In practice, tracing a review back to your email would require combining data from two separate systems — the authentication database and the reviews database — and is only possible by someone with full database admin access.
4. Who can see what
Public visitors (anyone on the site)
- Review text, ratings, branch, batch year, enrollment status
- Display label: "Student at [College]"
- Helpful vote counts
What they cannot see
- Your email, name, or any personal identifier
- Your User ID
- Which reviews are yours
Colleges
Colleges see exactly the same as the public — nothing more. They cannot identify who wrote a review. They can flag reviews for moderation, but flagging does not reveal reviewer identity.
CampusVoice moderation team (admins)
Our moderation team can see:
- Full review text (to check for guideline violations)
- A masked email like
har***@gmail.com — enough to identify repeat abusers, not enough to identify you socially
- Whether a review was flagged and why
Admins can flag, verify, or remove reviews. They cannot share reviewer information externally or with colleges.
5. Your rights
You are in control of your data:
- Edit your review — go to My Reviews to update any review you've written.
- Delete your review — permanently remove any review from our platform from the My Reviews page.
- Delete your account — from My Reviews, request account deletion. Your reviews are removed immediately. To delete your auth credentials, email us at privacy@campusvoice.in.
- Request your data — email us and we'll send you everything we hold about your account in 7 business days.
6. How long we keep data
- Reviews — kept indefinitely unless you delete them or they violate guidelines and are removed by moderators.
- Your account — kept until you request deletion.
- Audit logs — moderation actions are logged for 12 months, then deleted.
- Deleted reviews — permanently removed immediately upon deletion. Not archived, not recoverable.
7. Cookies
We use minimal cookies:
- Session cookie — set by Supabase to keep you logged in. Expires when you sign out.
- Theme preference — stored in
localStorage to remember light/dark mode. No data sent to any server.
We do not use third-party advertising cookies or cross-site trackers.