Privacy & Data Protection

Privacy Policy

Your privacy matters to us. This policy explains how IEEE CIS Student Branch, Chandigarh University collects, uses, and safeguards your personal information when you use our platform.

Last Updated: April 2026
1

Introduction

IEEE CIS Student Branch, Chandigarh University ("IEEE CIS CU", "we", "our", "us") operates an educational Learning Management System (LMS) platform accessible at https://www.culko.in. This Privacy Policy describes how we collect, use, store, and protect your personal data when you use our platform.

By accessing or using our services, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our platform.

Scope: This policy applies to all users of the IEEE CIS CU platform — students, teachers, and administrators — across all devices and access methods.
2

Data We Collect

We collect only the data necessary to provide and improve our educational services. This includes the following categories:

2.1 Personal Information

  • Full name (as provided during enrollment)
  • Email address (used for Firebase authentication)
  • Student ID (institute-assigned identifier)
  • Profile information such as phone number and address — if provided

2.2 Academic Data

  • Course enrollments and learning progress
  • Assignment submissions and grades
  • Exam records and results
  • Attendance records

2.3 Certificate Data

We store only minimal certificate information: certificateId, studentName, courseName, and dateIssued. No additional personal data is embedded in certificates.

2.4 Technical Data

  • IP address and browser information
  • Device type and operating system
  • Usage patterns and analytics (via Vercel Analytics)
  • Cookies and session tokens
3

Firebase & Infrastructure

Our platform uses Google Firebase for authentication, database storage (Firestore), and cloud functions. Firebase is a Google Cloud service that complies with industry-standard security practices.

  • Firebase Authentication: Handles user login securely using email/password and OAuth providers.
  • Cloud Firestore: Stores user profiles, course data, and academic records with encryption at rest.
  • Firebase Security Rules: Enforce strict access control so users can only access their own data.
All data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security). Your data is never transmitted in plain text.
4

Google AdSense & Cookies

We use Google AdSense to display advertisements on certain pages. Google AdSense may use cookies and web beacons to serve ads based on your prior visits to our website or other websites.

  • Serve ads relevant to your interests based on browsing history
  • Measure ad performance, impressions, and click-through rates
  • Limit how frequently the same ad is shown to you

You may opt out of personalised advertising by visiting Google Ads Settings. For full details on how cookies are used, see our Cookie Policy.

5

How We Use Your Data

We use your data exclusively for the following purposes — never for anything beyond what is described here:

  • Providing and managing educational services on the platform
  • Authenticating your identity and securing your account
  • Generating academic results, reports, and certificates
  • Sending important notifications about courses, exams, and deadlines
  • Improving platform performance through anonymised analytics
  • Displaying relevant advertisements via Google AdSense
  • Responding to your support requests and enquiries
6

We Do Not Sell Your Data

IEEE CIS Student Branch, Chandigarh University does not sell, rent, or trade your personal data to any third party. Your information is used solely for the purposes described in this policy.

We may share data with trusted service providers only to the extent necessary to operate our platform:

  • Firebase (Google): Authentication, database storage, and cloud infrastructure.
  • Vercel: Hosting, deployment, and anonymous performance analytics.
  • Razorpay: Secure payment processing for course fees and transactions.
Each of these providers is bound by their own privacy policies and data protection agreements, and may not use your data for any purpose beyond delivering their services to us.
7

Student Data Protection

We take student data protection seriously. Student personal information — name, email, and Student ID — is accessible only to authorised institute administrators and the student themselves.

  • Student data is stored in isolated, access-controlled Firestore collections
  • Teachers can only access data for students enrolled in their own courses
  • All API endpoints enforce role-based access control (RBAC)
  • Sensitive fields are never exposed in client-side code or public APIs
8

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy:

  • Active accounts: Data is retained throughout your enrollment and active usage of the platform.
  • Post-enrollment: Student and course data is retained for 2 years after the end of enrollment, unless deletion is requested earlier.
  • Certificate data: Minimal certificate records are retained indefinitely for verification purposes.
  • Account deletion: Upon request, personal data is deleted within 30 days, except where retention is required by law.
9

Your Rights

You have the following rights regarding your personal data. To exercise any of these rights, contact us at the address below — we will respond within 30 days.

  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Correction: Request correction of inaccurate or incomplete data.
  • Right to Deletion: Request deletion of your personal data, subject to legal retention requirements.
  • Right to Restrict Processing: Request that we limit the processing of your data in certain circumstances.
  • Right to Data Portability: Request your data in a structured, machine-readable format.
To exercise any of these rights, email us at admissions@culko.in. We aim to respond to all requests within 30 days.
10

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations.

  • The 'Last Updated' date at the top of this page will reflect any changes
  • Significant changes will be communicated to registered users via email
  • Continued use of the platform after an update constitutes acceptance of the revised policy
11

Contact Us

If you have any questions about this Privacy Policy or our data practices, please reach out — we're happy to help.