Careviews ("we", "our") is a student-run platform for CA faculty reviews. This policy explains what data we collect, why, and how we protect it.
What we collect
Review data
When you submit a review, we store your Supabase user ID, faculty slug, all rating fields, course metadata, pros, cons, and your written review text. Reviews are moderated before going live.
Authentication
We use Supabase Auth. When you sign in with Google or email, your email address is stored in Supabase. We do not store passwords.
Analytics
We record anonymised events (page views, review submissions, search queries) with no personally identifiable information. Your IP address is hashed using SHA-256 with a rotating salt and is never stored in plain text. We use Vercel Analytics and our own event table.
Email newsletter
If you subscribe, we store only your email address and the source of signup. You can ask us to remove it at any time.
Technical metadata
For spam prevention, we store a hashed user-agent string, browser name, device type, country (from IP lookup), and time taken to complete the review form. This data is not linked to your identity outside Supabase Auth.
How we use your data
- To display moderated reviews to other students.
- To detect and prevent spam, fake reviews, and abuse.
- To understand how students use the platform so we can improve it.
- To send product updates if you subscribed.
What we do not do
- We do not sell your data to any third party.
- We do not serve advertising.
- We do not share your review with the faculty you reviewed without your consent.
- We do not use your data to train AI models.
Data storage
All data is stored in Supabase (managed PostgreSQL, hosted on AWS). Supabase is our data processor and operates under its own privacy policy. Data may be hosted in ap-south-1 (Mumbai) or us-east-1 regions.
Your rights
You can request deletion of your account, email subscription, or any review you submitted. Email us at rohangarg@careviews.in with the subject "Delete my data". We will process requests within 14 days.
Cookies
We use essential cookies for authentication (Supabase Auth session). We use localStorage (not cookies) for dismissing the community float and storing vote session tokens. We do not use tracking cookies or third-party ad cookies.
Changes to this policy
We may update this policy. Material changes will be announced via our community channels. Continued use of Careviews after changes constitutes acceptance.
Contact
Questions? Email rohangarg@careviews.in.