Privacy Policy

CampusCollab (“we”, “us”) is a student collaboration platform that helps verified students find teammates, coordinate schedules, and post or claim short-term paid bounties. This policy explains what we collect and how we use it. It applies to the CampusCollab website and dashboard.

We do not operate our own password system. You sign in exclusively through Google OAuth or GitHub OAuth. When you authenticate, the provider shares a limited profile with us: your name, email address, avatar image, and (for GitHub) your username. We use this solely to create and secure your account.

We request the minimum OAuth scopes needed to sign you in and read that basic profile. We never receive your Google or GitHub password, and we do not post to your accounts or read your private repositories. You can revoke CampusCollab’s access at any time from your Google Account or GitHub settings. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• Profile information: Your name, handle, bio, university/college, year of study, skills and tech stack, and links you provide (GitHub, LinkedIn, personal website).
• Schedule data: Busy and free blocks you enter into the schedule overlap tool, used only to calculate mutual availability with potential teammates.
• Bounties & messages: Bounty titles, descriptions, reward amounts, and direct messages you send to other students on the platform.
• Technical & session data: IP address, user-agent string, and essential session cookies needed to keep you signed in and protect against CSRF attacks.

• To provide the service: displaying your profile, computing schedule overlaps, and facilitating peer bounties.
• To verify student identity and maintain trust across university networks.
• To secure the platform against abuse, fraud, and unauthorised access.
• We do not sell your personal data or use your project code to train advertising models.

We retain your account data for as long as your account is active. You can request deletion of your account and associated profile data at any time by contacting privacy@campuscollab.internal. Bounties you posted that have completed payouts may be retained in anonymised form for accounting and dispute records.

Your data is stored in PostgreSQL databases protected by Row-Level Security (RLS), meaning access is enforced at the database layer based on your authenticated session. All traffic is encrypted in transit using TLS 1.3. While no system is impenetrable, we follow security best practices to protect your data.

We use strictly necessary cookies to maintain your authenticated session and store your dark/light theme preference. We do not use third-party tracking cookies or advertising pixels.

If you have questions about this policy, want to export your data, or wish to exercise any privacy rights available in your jurisdiction, email privacy@campuscollab.internal.