Privacy Policy

This policy explains how CollegeCBT handles student and operational data. It is a production-ready baseline and should be reviewed with legal counsel before public launch.

1. Data We Collect

We collect account details, academic profile details, exam practice activity, subscription status, payment references, support messages, device/session metadata, and analytics needed to operate the platform.

2. How We Use Data

We use data to authenticate users, generate relevant study experiences, sync real-time dashboards, process subscriptions, provide support, prevent abuse, and improve platform quality.

3. Security

Authentication is handled through Firebase. Application data is handled through Convex. Private routes are excluded from offline caching, and administrative actions require role-based checks.

4. Payments

Payment gateways process card, transfer, and wallet details. CollegeCBT stores payment references, plan status, and verification results, not raw card details.

5. Student Rights

Students may request account review, correction, export, or deletion through support. Some records may be retained where required for security, audit, billing, or legal reasons.