Privacy Policy

1Information We Collect

We collect only the minimum necessary information required to authenticate students, personalize curriculum navigation, and provide study tools:

• Contact Information: Phone number and/or email address provided during login to deliver verification codes (OTP).
• Academic Profile: Student full name, selected university (SPPU), enrolled program (MCA), and current active semester (Semesters 1 through 4).
• User-Uploaded Study Documents: Academic lecture notes, reference PDFs, slides, and revision documents (PDF, PPT, PPTX, DOC, DOCX up to 5 MB per file, capped at 15 documents per user account).
• Practice Paper & Study Activity: Requested practice paper parameters (selected course, e.g., ADB503MJ, target marks, timestamp), and generated mock papers stored for revision history.
• Technical Session Data: Ephemeral HTTP-only session cookies (SameSite=Lax, Secure in production), IP addresses, and rate-limit tracking metadata used strictly for security and abuse prevention.

2How We Use Your Information

Your information is processed strictly for educational functionality:

• To verify your identity via passwordless OTP and maintain your secure session.
• To tailor syllabus navigation and question paper blueprints to your enrolled semester.
• To extract, segment, and index your personal study vault notes so you can review them alongside curriculum topics.
• To enforce automated relevance guardrails (ensuring uploaded files correspond to valid academic coursework).
• To protect platform stability through Redis-backed rate limiting (limiting OTP requests, document uploads, and generation jobs to prevent system exhaustion).

3Storage, Databases & Technical Infrastructure

JZunto implements defense-in-depth data architecture across dedicated technical layers:

4Third-Party Sub-Processors & Service Providers

We partner with trusted technical providers solely to deliver core infrastructure services. We require all sub-processors to maintain confidentiality and security standards:

• SMS Gateway (MSG91): Used exclusively to deliver transactional 6-digit verification codes to mobile devices.
• Email Delivery (SendGrid / SMTP): Used to deliver authentication codes and system notices.
• AI & LLM Inference (Groq / OpenRouter / OpenAI): Used strictly for academic candidate question drafting, formatting validation, and automated academic judge scoring. We do not use student personal profile data for model training.
• Hosting & Edge Infrastructure (Vercel): Delivers front-end web assets, static pages, and SSL encryption.

5Data Retention & User Deletion Rights

You maintain complete sovereignty over your study materials and personal information:

• Document Self-Deletion: When you delete a document from your vault via the platform interface, our backend initiates an immediate multi-system purge:
  • The file is deleted from encrypted cloud object storage (AWS S3).
  • Vector embeddings are purged from the Qdrant vector database.
  • Conceptual graph nodes are disconnected and removed from Neo4j.
  • Metadata and database chunk rows are deleted from PostgreSQL.
• OTP Expiration: One-Time Passwords automatically expire after 300 seconds (5 minutes) and cannot be reused.
• Session Lifecycles: Access tokens expire after 30 minutes; refresh tokens expire after 30 days.
• Account Deletion: Students may request full account removal and data erasure by contacting our privacy team at privacy@jzunto.app.

6Cookies & Local Storage

JZunto uses essential, strictly functional cookies only:

• Session Authentication Cookie: An HTTP-only, secure cookie that maintains your login status without exposing authorization tokens to client-side scripts.
• CSRF Token: Cryptographic token to protect against cross-site request forgery attacks.

We do not deploy third-party advertising trackers, cross-site behavioral trackers, or marketing analytics cookies.

7Legal Status & Contact Information

JZunto is an independent student academic resource currently in active product development. For privacy questions, data deletion requests, or technical inquiries, please contact our team: