PROJECT JEE • MANAGED BY GLITCH GALAXY • BENGALURU, INDIA

Privacy Policy

Welcome to Project JEE. This Privacy Policy explains how we collect, use, store, and protect your information when you use our educational community platform. We are committed to maintaining your privacy and ensuring your data is handled securely.

LAST UPDATED & EFFECTIVE DATE: OCTOBER 2, 2026
SECTION 1

Information We Collect

  • Account Information: When you sign in, we collect basic profile details such as your email address. To maintain student privacy and safety, we encourage selecting a pseudonym handle and a custom visual avatar.
  • User-Generated Academic Content: We store question prompts, LaTeX equations, comments, solution explanations, and compressed images (<50KB) that you submit to the community doubts hub.
  • AI Doubt Solver Queries & Chat History: When you submit questions to the AI Doubt Solver (/ai), we store question prompts, uploaded textbook problem images, and generated step-by-step solutions to provide conversational continuity, multi-device synchronization, and to calculate your daily quota (20 doubts/day, resetting at 00:00 UTC).
  • Platform Activity & Credit Wallet: We record virtual credit balances (daily rollover, session deductions, and earned study rewards), post reactions, bookmarked folders, and topic followings.
  • Study Timer Visibility Metrics: To enforce academic focus and anti-cheating rules, our client monitors tab visibility and window minimization states strictly during active timer sessions.
  • Technical Diagnostics & Problem Tickets: When you use the 'Report Problem' window, our technical diagnostics system logs client environment context (browser version, route URL, timestamp) to investigate bugs and arbitrate content flags.
  • Financial Transaction Metadata: When you voluntarily contribute via Razorpay, we receive only transaction confirmation metadata (Payment ID, amount, timestamp, payment method type, and donor-provided contact for receipt generation). We never receive or store your card numbers, CVVs, or UPI PINs.
SECTION 2

Cookies, Local Storage & Session State

Project JEE utilizes browser cookies and local storage exclusively for functional authentication and site personalization. We do not operate advertising pixels or cross-site tracking networks:

  • Essential Session Cookie (Session Token): Encrypted cryptographic token that securely maintains your login session across page transitions.
  • Theme Preference Cookie (theme): Remembers your chosen aesthetic mode (Dark Mode vs. Light Mode) to prevent screen flickering on startup.
  • Consent State (projectjee_cookie_consent_v2): Remembers your privacy choices and cookie toggles across visits.
  • Study Timer Anti-Cheat State (strict_timer_state): Preserves your study session progress and earned focus credits against accidental browser refreshes.
  • Optional Analytics (ga_*): Anonymized Google Analytics telemetry used solely to monitor infrastructure performance, page load times, and peak entrance exam server load. You can toggle analytics on or off at any time via the Cookie Preferences link in the footer.
SECTION 3

Why We Collect It & How We Use It

All collected information is utilized strictly to provide, maintain, and protect our free educational platform:

  • Authenticating your identity and safeguarding your account against unauthorized access.
  • Operating the virtual credit wallet and rewarding students who complete disciplined focus study sessions.
  • Processing textbook images with local OCR and AI solvers to provide step-by-step problem derivations. (Note: AI can make mistakes; always cross-verify results with standard textbooks).
  • Enforcing fair AI solver access: tracking the daily 20-doubt academic quota to guarantee high-performance availability for all students without service disruptions.
  • Enforcing fair engagement: preventing artificial vote/view manipulation and excluding post author self-views from view counters.
  • Protecting the student community against automated bot attacks using Cloudflare Turnstile cryptographic challenges.
  • Triaging reported software bugs and enforcing community guidelines through automated arbitration.
SECTION 4

Payment Security & Razorpay Isolation

Financial integrity and payment data confidentiality are strictly guaranteed:

  • Zero Financial Data Retention: Project JEE never collects, processes, or stores your credit/debit card numbers, CVV codes, netbanking passwords, or UPI MPINs.
  • PCI-DSS Level 1 Compliance: All payment transactions are executed directly within Razorpay's RBI-regulated, 256-bit encrypted checkout iframe.
  • Receipts & Audit Trails: Razorpay issues automated digital payment confirmation receipts to your email and phone for total transparency.
  • Donation Anonymity: Supporters appearing on the 'Our Family' contributor wall may choose to remain completely anonymous or display only a custom study pseudonym.
SECTION 5

How We Store and Protect Your Data

Security is built into every layer of the platform architecture:

  • Encrypted Data Isolation: Secure database infrastructure enforces strict access control policies, ensuring accounts can access only their own private data and settings.
  • TLS 1.3 Transport Encryption: All network communications between your browser, edge nodes, and database servers are encrypted using modern HTTPS protocols.
  • Optimized Media Pipeline: Uploaded question photos are compressed on the client (<50KB WebP) and served through an isolated high-performance CDN.
  • Cloudflare Turnstile Protection: Cryptographic bot deterrence protects community forms without frustrating CAPTCHA puzzles.
SECTION 6

Data Sharing and Third Parties

We enforce an absolute zero-advertiser policy. We never sell, monetize, or lease your personal data. We interact only with trusted infrastructure providers strictly essential to platform delivery:

  • Payment Processing: Razorpay Software Private Limited for processing voluntary donations under RBI regulations.
  • Database & Cloud Hosting: Enterprise-grade cloud infrastructure for secure, encrypted data storage and distributed compute.
  • AI Inference & Solution Generation (Google): Because the AI Doubt Solver is provided to students completely free of charge, the question queries, text prompts, and problem images you submit directly within the AI solver are transmitted to and processed by Google to generate step-by-step solutions. Only what you chat or ask as a doubt with the AI is sent to Google. Your account details, passwords, email, credit balances, timer sessions, and community posts are strictly excluded.
  • Anti-Bot Shield: Cloudflare Inc. for non-intrusive Turnstile verification and DDoS protection.
SECTION 7

Your Rights, Controls & Data Erasure

You maintain full sovereignty over your academic identity and personal information:

  • Profile Customization: Update your avatar, handle, bio, and study goals anytime through User Settings.
  • AI Chat History Management: You can view, search, review, or permanently delete your previous AI doubt sessions at any time from Settings > AI Chat History.
  • Cookie Preference Management: Toggle non-essential analytics cookies on or off at any moment via the footer Cookie Preferences panel.
  • Support & Account Verification: Submit privacy questions, request data summaries, or verify restricted credentials directly via our automated Support Helpdesk (/support) or email projectjee.glitchgalaxy@gmail.com.
  • Account Deletion & Data Scrubbing: You may request complete account deletion, removal of user-uploaded community posts, or anonymization by emailing our support team at projectjee.glitchgalaxy@gmail.com.
SECTION 8

Contact Information & Grievances

If you have any questions, privacy inquiries, or data protection concerns regarding this Policy, please reach out to our team at:

📧 Email: projectjee.glitchgalaxy@gmail.com

📍 Location: Bengaluru, Karnataka, India

SECTION 9

AI Processing Partners & Data Minimization

Project JEE connects students with state-of-the-art AI doubt solving models. In strict accordance with the DPDP Act, 2023, data transmission is strictly minimized:

  • Primary Inference (Google Gemini): Questions and problem snapshot images submitted directly within the AI doubt solver are transmitted to Google Gemini for step-by-step reasoning and solution synthesis. Account details, passwords, email, credit balances, and community posts are strictly excluded.
  • Fallback Inference (Groq Inc.): If Google Gemini endpoints face regional latency or temporary outages, queries are routed to Groq's high-speed LPU infrastructure (text-only; images are never sent to fallback providers).
  • Zero Model Training: Both Google and Groq process your queries as enterprise API consumers — neither provider uses student doubt queries or uploaded question images to train public AI models.
SECTION 10

Data Retention Schedules & Automated Purging

We enforce strict automated data retention ceilings to comply with DPDP principles of purpose limitation and storage minimization:

  • Account Profiles & Badges: Retained while your account is active. Immediately and irreversibly purged upon voluntary account deletion.
  • Community Posts & Comments: Retained until deleted by author or account deletion. Post views IP hashes are purged automatically after 30 days.
  • Active Login Sessions: Automated daily database purge removes session tokens inactive for more than 90 days.
  • Cloudinary Media Assets: Post images and avatar photos are permanently destroyed via Cloudinary API immediately when an account is deleted.
  • Consent Audit Records: Hashed consent audit logs are maintained for statutory proof of compliance under Sections 6 & 9 of the DPDP Act, 2023.
SECTION 11

DPDP Act Rights, Grievance Officer & Escalation

Under the Digital Personal Data Protection Act, 2023 (India), you enjoy comprehensive rights over your personal data:

  • Right to Access & Portability: You can download a complete, machine-readable JSON export of all your personal data at any time from Settings > Privacy & Data.
  • Right to Correction & Erasure: Update your profile data or trigger self-service account deletion anytime in Settings. Account deletion triggers a complete database cascade and Cloudinary media wipe.
  • Right to Withdraw Consent: You may withdraw consent for optional analytics tracking at any time using the Cookie Preferences manager in the footer.
  • Designated Grievance Officer: Bhuvan J G (Email: projectjee.glitchgalaxy@gmail.com). Acknowledgment within 48 hours; resolution within 30 days.
  • Escalation to Data Protection Board of India (DPBI): If your grievance is unresolved within 30 days, you have the statutory right to register a formal complaint with the Data Protection Board of India (https://www.meity.gov.in/data-protection-board).