Privacy Policy

1. Who we are

Uni-Verse (uni-verse.co.in) is a student-powered college accountability platform operated by Nipun Sujesh, Bengaluru, India. Data Protection Officer: nipun@uni-verse.co.in.

2. Data we collect

Waitlist form: Your name and email address, submitted voluntarily. We use this only to notify you when Uni-Verse launches and to send you waitlist-position updates.

Analytics: We use Umami, a cookieless, privacy-first analytics tool. Umami does not set cookies, does not track you across websites, and does not collect personally identifiable information. Page views and referrers are aggregated and anonymised.

Referral parameter: If you arrive via a referral link, we record the referral code in your browser session to credit your referrer. No personal data is linked to this code.

3. How we use your data

• Send you a launch notification when Uni-Verse goes live.
• Send waitlist position updates (infrequent, no marketing without separate consent).
• Improve the product via aggregated, anonymised analytics.

We do not sell your data. We do not run ads targeting students.

4. Legal basis (DPDP Act 2023)

We process your personal data under the Digital Personal Data Protection Act, 2023 (India). The lawful basis for processing waitlist data is your explicit consent, given when you submit the waitlist form. You may withdraw consent at any time by emailing nipun@uni-verse.co.in.

5. Data storage

Waitlist data is stored in Supabase (PostgreSQL), hosted on AWS Mumbai (ap-south-1). Data is encrypted at rest and in transit. Supabase is SOC 2 Type II certified.

6. Retention

We retain waitlist data until you request deletion or until 12 months after Uni-Verse launches publicly, whichever comes first. Anonymised analytics data has no retention limit.

7. Your rights

Under the DPDP Act 2023 you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Erase your data (right to be forgotten).
• Withdraw consent at any time.
• Nominate a person to exercise these rights on your behalf.

To exercise any right, email nipun@uni-verse.co.in. We respond within 72 hours.

8. Cookies

We do not set cookies for analytics or tracking. We use a single session-storage key (uv-theme) to remember your theme preference. This key never leaves your browser.

9. Third-party services

• Supabase — database (AWS ap-south-1). Privacy policy.
• Umami — cookieless analytics. No PII collected. Privacy policy.
• Vercel — hosting. Request logs retained per Vercel's policy. Privacy policy.

10. Changes to this policy

Material changes will be notified via the email address you provided on the waitlist. Continued use of Uni-Verse after notification constitutes acceptance.

11. Contact

Data Protection Officer: Nipun Sujesh
nipun@uni-verse.co.in