Skip to main content
Return to Portal

Institutional Privacy Policy

Last Revised: October 2026
Notice to System Operators:This document outlines the real technical data collection mechanisms enforced by this application codebase in accordance with India's Information Technology Act, 2000 and Digital Personal Data Protection Act, 2023 (DPDP Act). A qualified institutional legal counsel must review and ratify this policy prior to production accreditation.

1. Institutional Scope & Purpose

This Privacy Policy governs the processing of operational, academic, and identity data collected by the Acropolis Institute Of Technology And Research - AITR — Department of Information Technology Student Headcount & Academic Operations System ("the System"). Access is restricted exclusively to authorized faculty members, class coordinators, placement officers, heads of department, and designated institutional administrators.

2. Inventory of Collected Data

Faculty & Staff Identity Data

  • Full Name and Institutional Email (e.g. @acropolis.in)
  • Hashed Passwords (salted bcrypt, rounds ≥ 10; plaintext never stored)
  • Faculty Code, Designation, and Department Assignment
  • Optional phone numbers and alternate communication emails
  • Client-compressed profile avatars

Academic Headcount & Verification Data

  • Twice-daily aggregate physical student counts (Morning ~8:30 AM, Afternoon ~4:00 PM IST)
  • Classroom section assignments and coordinator verification statuses
  • Submission timestamps and faculty author attributions

Placement Directory Data

  • Student Enrollment Numbers, Full Names, and Academic Years
  • Aggregate CGPA and placement recruitment statuses
  • Company recruitment offers and salary packages (LPA)

Security & Device Surveillance Logs

  • Device user-agent strings and connecting IP addresses
  • Active session records and last-seen timestamps
  • Immutable audit trails of privileged operations (password resets, role changes)

3. Data Retention & Automated Pruning Policy

In compliance with storage limitation principles, the System enforces an automated rolling retention scheduler:

  • Daily Attendance Headcounts: Automatically purged after 180 days (6 calendar months) to prevent unnecessary accumulation of operational records.
  • Session Records: Active device session tokens expire according to security policies (default 12 hours) and are instantly revocable via session incrementation.
  • Audit Logs: Retained for regulatory institutional review; upon faculty member offboarding, audit entries are anonymized (actorId: null) while maintaining immutable operational records.

4. Security Safeguards

The System applies technical security safeguards including:

  • Database connection pooling with parameterized SQL (zero raw query concatenation).
  • Role-Based Access Control (RBAC) enforced on the server for all protected routes.
  • Strict rate limiting on authentication and sensitive modification endpoints.
  • Zero third-party commercial advertising, trackers, or marketing analytics embeds.

5. Institutional Data Officer & Grievance Redressal

For inquiries regarding academic data processing, correction of faculty records, or institutional audit requests, contact:

Department: Department of Information Technology

Institution: Acropolis Institute Of Technology And Research - AITR

Campus Address: Bypass Road, Manglia Square, Indore, Madhya Pradesh 453771, India

Designated Administrator: [Registrar / Head of Department Contact Email: hodit@acropolis.in]