Offcampuz Privacy Policy

Effective date: 14 July 2026 · Last updated: 14 July 2026

This Privacy Policy explains how Offcampuz ("Offcampuz," "we," "us," or "our") collects, uses, shares, and protects information when you use the Offcampuz mobile applications, websites, and related services (the "Service"). It also explains your privacy rights under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act") and how to exercise them. The Service is currently offered in India.

By using the Service, you acknowledge this Privacy Policy. Where we rely on your consent, we ask for it separately, and you may withdraw it at any time.

1. A note on anonymity — please read first

Offcampuz lets you post anonymously to other users. That means your display identity can be hidden from other members. Anonymous does not mean untraceable.

Offcampuz may retain account, device, network, and activity information for safety, security, fraud prevention, moderation, legal compliance, and law enforcement requests. Even when a post is anonymous to other users, it remains associated with your account in our systems, and we may preserve, access, review, and disclose related information as described in this Policy and in our Law Enforcement Request Policy.

2. Information we collect

(a) Information you provide.

• Registration and verification: your name or chosen username, email address (including your college/university email), and information used to verify your student status and age.
• Profile and content: your profile details and the content you create — posts, polls, comments, reactions, event details, community experiences, messages (when messaging is available), and reports you submit.
• Communications: information you provide when you contact support, give feedback, or respond to surveys.
• Payment information, if and when paid features exist (typically processed by a third-party payment processor; we do not store full card numbers).

(b) Information we collect automatically.

• Device and app identifiers: device model, operating system, app version, language, mobile network, and unique identifiers (such as advertising identifiers and our own app/install identifiers).
• Network and log data: IP address, access times, pages/screens viewed, features used, referring/exit information, crash logs, and diagnostic data.
• Usage and interaction data: how you navigate and interact with the Service, including content you view, votes/reactions, and search activity.
• Approximate location derived from your IP address or device settings. We collect precise location only with your permission.
• Cookies and similar technologies as described in our Cookie Policy.

(c) Information from others.

• Verification or anti-fraud signals from service providers; information from your school where you use a school-issued credential; and information from integrated services you choose to connect.

We do not intentionally collect more personal data than needed to run the Service. Where you choose to include sensitive information in your content, you do so at your own discretion.

3. How we use information and our lawful basis

We use information to:

• Provide and operate the Service, including authentication, verified-identity checks, displaying content, and enabling community features;
• Keep the Service safe and secure — detect, investigate, and prevent fraud, abuse, spam, harassment, threats, security incidents, and violations of our Terms and Community Guidelines;
• Moderate content through automated systems and human review (see our Content & Moderation Policy);
• Improve the Service, including troubleshooting, analytics, research, and developing new features;
• Communicate with you about updates, security alerts, and support;
• Comply with law and respond to valid legal requests and legal claims; and
• Enforce our Terms and protect the rights, safety, and property of users, the public, and Offcampuz.

Lawful basis (DPDP Act). Under the DPDP Act, we process your personal data on the basis of your consent, given after the notice we provide, and on the basis of certain "legitimate uses" permitted by the Act (for example, where you voluntarily provide data for a specified purpose, and for purposes such as security and compliance with law). You may withdraw consent at any time, which will not affect processing already carried out; withdrawing consent for processing necessary to provide the Service may mean we can no longer provide it.

We do not use your content to train automated systems beyond what is necessary to operate safety, moderation, recommendation, and product features, except as separately disclosed and, where required, with your consent.

4. How we share information

We do not sell your personal data. We share information only as described here:

• With other users: content you post is visible to your community as you choose (including anonymously to other users). Remember that other users can see, screenshot, and re-share content.
• Service providers (Data Processors): vendors who host, support, secure, analyze, and operate the Service on our behalf, under contracts that restrict their use of the data (for example, cloud hosting, analytics, crash reporting, customer support, identity verification, and content-moderation tooling).
• Safety and legal: with law enforcement, regulators, courts, or other parties when we believe in good faith it is reasonably necessary to comply with law or a valid legal request, to enforce our Terms, or to protect the rights, safety, and property of users, the public, or Offcampuz. See the Law Enforcement Request Policy.
• Corporate transactions: in connection with a merger, acquisition, financing, reorganization, or sale of assets — including a transfer to a company we later form to operate the Service — subject to this Policy.
• With your direction or consent: when you ask us to share, or otherwise with your consent.
• Aggregated/de-identified information that cannot reasonably identify you.

5. Anonymous content and internal records

When you post anonymously, we hide your display identity from other users, but we maintain internal records linking content to accounts, along with logs, device identifiers, IP/network data, and activity records, which we retain and may use for security, abuse prevention, moderation, legal compliance, and investigations. We may preserve and disclose this information when we believe it is reasonably necessary or legally required. This is essential to keeping the community safe and is not optional to the Service.

6. Data retention

We keep personal data only as long as needed for the purposes in this Policy, then delete or de-identify it, unless a longer period is required or permitted by law (for example, for security, legal, tax, or dispute-resolution purposes, or to comply with directions issued by CERT-In or other authorities). Retention varies by data type — for example, account records, content, moderation and safety logs, and verification data may have different retention periods. As a guide: account and profile data is kept for the life of your account and up to 90 days after you delete it; network and access logs (including IP) for about 180 days; and moderation, safety, and consent records for up to 3 years for dispute handling and repeat-offender enforcement. We may retain information longer where required or permitted by law.

Even after you delete content or your account, copies may persist in backups for a limited time, in others' interactions with your content, and where retention is necessary for safety, security, legal, or law-enforcement purposes.

7. Security

We use administrative, technical, and physical safeguards designed to protect personal data, such as encryption in transit, access controls, and monitoring. No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a personal-data breach, we will notify the Data Protection Board of India and affected users as required by the DPDP Act, and we will comply with applicable CERT-In incident-reporting directions.

8. Where we process information

We operate in India and primarily process information in India and, where applicable, with service providers in other countries, subject to the cross-border transfer rules under the DPDP Act and any restrictions notified by the Government of India. Where we transfer data outside India, we use contractual and technical safeguards designed to protect it.

9. Your rights as a Data Principal (DPDP Act)

Subject to the DPDP Act, you have the right to:

• Access a summary of the personal data we process about you and our processing activities;
• Correction, completion, updating, and erasure of your personal data;
• Nominate another individual to exercise your rights in the event of your death or incapacity;
• Grievance redress — raise a grievance with us before approaching the Data Protection Board; and
• Withdraw consent at any time.

To exercise these rights, contact privacy@offcampuz.com or use in-app controls. We will verify your request and respond within the timeframe required by law. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

You also have duties under the DPDP Act, including not impersonating others and not submitting false or frivolous information or grievances.

10. Children and younger users

The Service is intended for users 18 and older, and we do not permit users under 18. We do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has provided us personal data, contact privacy@offcampuz.com and we will take appropriate steps to delete it.

11. Cookies and similar technologies

We and our partners use cookies, SDKs, and similar technologies for essential operations, security, analytics, and (where you allow it) personalization. See our Cookie Policy for details and choices.

12. Grievance Officer / Data Protection Officer

For privacy questions, to exercise your rights, or to raise a grievance:

Grievance Officer / Data Protection Officer — contact us at privacy@offcampuz.com / grievance@offcampuz.com We acknowledge grievances within 24 hours and aim to resolve them within the timelines required under applicable law.

13. Changes to this Policy

We may update this Policy. If changes are material, we will provide notice (for example, in-app or by email) and update the "Last updated" date. Your continued use after the effective date means you acknowledge the updated Policy.