Privacy Policy

1. Information We Collect

To deliver VTU study materials, show your CGPA and result sheets, run referrals and verification, process mentorship requests, and organise skill workshops, FutureWell collects the following categories of data:

• Account & Sign-in: Full name, email address, optional mobile/WhatsApp number, and a securely hashed password. If you sign in with Google, we receive your basic Google account details (name and email) through our authentication provider. Email OTP codes used for registration and password reset are stored only as hashes and expire quickly.
• Academic Profile: University Seat Number (USN), college, engineering branch, current semester, syllabus scheme (e.g., 2022, 2024 Scheme), state, and city. Your USN is optional at sign-up but is needed for result sheet services and referral credit.
• CGPA & Result Records: Your CGPA, which may be entered by you or set by our academic team after checking your results, and the semester marks card links our team assigns to your account.
• Account Status & Activity: The date you accepted our Terms and Privacy Policy, your verification status, bookmarked notes, in-app notifications, your referral code and who referred you, your last-active time, and security records such as failed login attempts, temporary lockouts, and any suspension reason.
• Form Submissions: Details you submit through Live Workshop registrations, 1-on-1 Career Mentorship requests, project guidance and internship inquiries, contact forms, and newsletter subscriptions (typically name, email, phone, college, branch, and your message).

2. How We Use Your Information

Your records are processed to deliver educational enablement tools and student career support:

• Delivering branch-tailored and module-wise VTU study notes (M1–M5), model question papers, and lab manuals.
• Using your USN to check your published VTU results, set your CGPA, and publish your semester marks cards in the Result Sheet tab of your dashboard (see Section 3).
• Counting referrals: an invited friend is counted once they complete their profile with USN, college and branch. Admin verification can unlock features such as Passing Packages.
• Preventing duplicate or fake accounts, for example by allowing each USN to be linked to only one account.
• Sending workshop confirmations, meeting links, and reminders via WhatsApp and email, and delivering notifications inside your account.
• Assigning mentors for major and mini-project guidance, IEEE papers, and viva prep, based on the details you submit.
• Facilitating internship discovery and campus placement preparation.
• Understanding platform usage through aggregate statistics, such as student counts or average CGPA by branch or college, to improve our services.

3. USN, CGPA & Result Sheet Sync

When you add your USN to your profile, you authorize FutureWell to use it to check your results and show them on your account. Official examination results and synchronized CGPA records are stored only for students who explicitly opt in to the "Keep my CGPA updated by FutureWell" feature, and you can turn this sync off at any time directly from your account dashboard. Please note: Result and CGPA sync is available only for students from VTU-affiliated colleges; autonomous colleges conduct examinations and publish results independently and are not supported by this sync feature. This works as follows:

• Team-assisted process: Our academic team uses your USN to look up your published results from the official VTU results source, then updates your CGPA and assigns your semester marks card link. This is done by our team rather than being an instant automatic lookup, so results may appear after a delay.
• Semester by semester: Marks cards appear in the Result Sheet tab as they are released. Until a semester's marks card is published, it shows as processing.
• Your own USN only: Please submit only your own USN. Each USN can be linked to one account.
• Who can see it: Your result sheet is shown in your own logged-in dashboard. Authorized FutureWell administrators can see your USN, CGPA, and marks card links in order to manage accounts. We do not publish your results publicly.
• Marks card links: Marks cards are shared as links. Please keep them private and do not forward them, as anyone who holds a link may be able to open the document.
• Accuracy: CGPA and marks cards are informational and may contain errors or lag behind official releases or revaluations. Always verify against your official VTU grade card, and tell us if something looks wrong so we can correct it.
• Self-entered CGPA: A CGPA you enter yourself is treated as self-reported. It may be replaced by the value our team sets after checking your results.

4. Data Storage & Security

Student data is stored in a Supabase PostgreSQL database with Row Level Security (RLS) policies and encryption in transit (TLS). Additional safeguards include:

• Passwords are hashed with bcrypt, and we never store them in readable form.
• Profile requests are authenticated with signed session tokens that are valid for up to 2 hours, and they stop working if your password changes.
• You are logged out automatically after 30 minutes of inactivity.
• Accounts are temporarily locked after repeated failed login attempts, and OTP codes allow only a limited number of attempts.
• Administrative actions require a separately authenticated admin account.

No online system is completely risk-free, so please use a strong, unique password and log out on shared devices.

5. Information Sharing & Third Parties

We never sell, rent, or monetize student personal records, USNs, or results to third-party marketing companies. Data is shared only with service providers and sources needed to run the platform:

• Cloud Database & Authentication: Supabase (hosted data, sessions, and Google sign-in).
• Hosting: Vercel, which serves the website and runs our server functions.
• Email: Gmail, used to deliver OTP and account emails to you.
• Official Result Source: The VTU results portal, where our team enters your USN to look up your own published results.
• Communications: WhatsApp Business / student community channels for workshop links and alerts.
• Fonts & File Hosting: Google Fonts loads typefaces on our pages, and some downloadable resources are hosted on cloud storage such as Google Drive. These providers may receive standard connection data such as your IP address.

We may also disclose information if required by law or to protect the safety and security of our students and platform.

6. Storage Tokens & Local Cache

FutureWell does not use advertising or invasive tracking cookies. We use your browser's sessionStorage and localStorage only for essential site functions:

• sessionStorage: your login session and profile (fw_user_session, fw_user_profile), the dashboard tab you were on (fw_active_tab), and an action to resume after login (fw_pending_action). These clear when you close the browser or log out.
• localStorage: a referral code from an invite link (fw_ref), kept for up to 30 days so your friend gets credit when you register.

7. Student Data Rights & Profile Control

You stay in control of your academic profile:

• Instant Updates: Edit your name, phone, USN, college, branch, semester, scheme, city, state, and CGPA in the Student Dashboard. If you correct your USN, tell our team so your results can be re-checked against the new USN.
• Results & Verification: Marks cards, team-set CGPA, and verified status are managed by our administrators. Contact us if any of them is wrong or you want a marks card link removed.
• Password Management: Update your password anytime via the Change Password page.
• Withdrawing USN Permission: You can ask us to stop using your USN for result checks and to clear your USN, CGPA, and marks card links. Note that result sheet features will then no longer be available.
• Data Deletion: Request full erasure of your account, USN, CGPA and marks cards, mentorship history, and submissions by contacting us at the email below. We keep account data while your account is active and delete it on request, except where we must retain limited records for security or legal reasons.

8. Consent & Policy Updates

By registering and accepting the Terms of Service and this Privacy Policy, you consent to the data practices described here, including the use of your USN for result checking. We record when you accept. If we make material changes, we will update the date at the top of this page and may ask you to accept the updated version.

9. Notifications & Phone Alerts

If you choose to turn on phone alerts, your browser gives us a push address (an endpoint and encryption keys) for that device. We store it together with your email, a short device description (for example Android, iPhone or computer) and the time it was last used. We use it only to deliver alerts you can receive, such as new notes, streak reminders and messages from FutureWell. We do not sell it or share it with advertisers; delivery passes through your browser's push service (for example Google, Apple or Mozilla).

Authorised administrators can see which students have phone alerts turned on, with their name, email, branch, semester, number of devices and when they were last active, so that a message can be sent to one student or a group. You can turn alerts off at any time in your account page or browser settings; this deletes the stored device address. Addresses that stop working are removed automatically. Your alert choices (new notes and streak reminders) are saved on your profile.

10. Contact Privacy Support

For questions about this policy, data correction, result corrections, or student record removal, reach out to our administration team: