Privacy & Data Protection Policy
Comprehensive details regarding how student identifiers, PRNs, contact emails, and venture data are processed in compliance with the DPDP Act 2023.
1. Information We Collect & Process
Academic & Identity Data: Full name, official institutional email, mobile number, engineering department, graduation year, and verified Student Permanent Registration Number (PRN).
Venture Submissions: Pitch decks, business model canvas entries, prototype demonstrations, and financial forecasts submitted for competitions or incubation.
Security Telemetry: Cryptographically hashed session identifiers, login timestamps, and security headers collected solely for intrusion detection and account safety.
2. Zero-Monetization Mandate & Institutional Privacy
Absolute Non-Commercial Guarantee: KKWIEER E-Cell NEVER sells, rents, monetizes, or shares student records with third-party marketing companies, recruiters, or data syndicates.
Isolated Schemas: All tenant data is isolated in secure PostgreSQL clusters with encrypted TLS 1.3 transport. Chat logs and internal pitch materials are shielded from external web indexers.
3. Compliance with India's DPDP Act 2023
In full compliance with India's Digital Personal Data Protection Act (DPDP Act 2023), students and founders are recognized as Data Principals with fundamental rights:
• Right to Access: Request a digital export of all stored personal records and competition submissions.
• Right to Correction: Request instant updates to outdated or inaccurate academic and contact information.
• Right to Erasure: Exercise the 'Right to be Forgotten' to permanently purge account history upon graduation.
• Grievance Officer: Connect directly with our designated Data Protection Officer at admin@ecellkwwieer.page.
4. Cryptographic Security Standards
User credentials are protected using salted scrypt key-derivation routines, effectively neutralizing dictionary and offline hash-cracking attacks.
Active sessions utilize cryptographically secure 32-byte pseudo-random tokens stored exclusively in HttpOnly, SameSite=Lax cookies.

