Privacy Policy

Last updated: May 2026

1. What We Collect

When you sign up, we collect your KIIT email address and display name. When you use the platform, we store your posts, claims, verification answers, uploaded images, handoff messages, and notification history. We also collect basic usage data through Vercel Analytics (page views, referrers — no personal identifiers).

2. How We Use Your Data

Your data is used solely to operate Vaapsi: displaying posts, processing claims, sending notifications, coordinating handoffs, and improving the platform. We do not sell, rent, or share your personal information with third parties.

3. Data Storage

All data is stored on Supabase (hosted on AWS). Post images are stored in Supabase Storage. Claim proof images are stored in a private bucket — only the post owner can view them via time-limited signed URLs. Your password is hashed by Supabase Auth and never stored in plain text.

4. Data Retention

Your data is retained as long as your account is active. Posts marked as resolved are preserved for statistics but hidden from the public feed. If you wish to delete your account or data, contact us and we will process your request.

5. Cookies

Vaapsi uses essential cookies for authentication (Supabase session tokens). We do not use advertising or tracking cookies. Vercel Analytics uses privacy-friendly, cookieless tracking.

6. Security

We implement rate limiting, CSRF protection, input sanitization, magic byte file validation, Row Level Security on all database tables, and security headers on all responses. Proof images are stored in private buckets with signed URL access only.

7. Your Rights

You can view, edit, or delete your posts and claims at any time through the app. For account deletion or data export requests, contact us at the email below.

8. Contact

Privacy questions? Reach out at 2330427@kiit.ac.in.