Privacy Policy

1. Introduction

The Assam Royal Global University and the Consensio 2026 Organizing Committee are committed to protecting your privacy. This Privacy Policy details how we collect, process, store, and protect information gathered when you visit the Consensio digital portal, register for competitions, claim student or guest passes, or interact with our festival services.

2. Information We Collect

We collect relevant information required to ensure secure campus verification, festival credentialing, and event participation:

• Account & Authentication Credentials: Registered email address and cryptographically salted/hashed passwords created during portal registration for authenticating user sessions and managing festival tickets and competition registrations.
• Personal Identifiers: Full legal name, date of birth, gender, and photograph (for ID badge generation).
• Academic Details: Home college/university name, enrollment/roll number, branch/department, and college ID card scans.
• Accompanying Guest Information: Full legal name, contact number, and government-issued photo ID (Aadhaar / Voter ID / Passport / Driving License) details for the two (2) accompanied guests registered under each student's complimentary Pronites guest pass allocation, solely for gate accreditation and security.
• Contact Information: Active email address, primary mobile number, and emergency contact details.
• Transaction Metadata: Order IDs, registration timestamps, and transaction reference numbers for competitions and official merchandise. Note: Pronites passes are strictly complimentary and never sold. We do not store payment card credentials; competition fee payments are processed directly via PCI-DSS compliant payment gateways (Razorpay).
• Technical Data: Browser user-agent, IP address, and session tokens to maintain portal security and prevent fraudulent access.

3. How We Use Your Information

The data collected is utilized strictly for festival administration:

• Generating digital admission QR badges and issuing official festival passes.
• Accrediting enrolled students and their two (2) accompanied guests for seamless gate clearance into Pronites concert zones.
• Managing competition brackets, judging rosters, certificates, and prize distributions.
• Communicating critical festival announcements, schedule changes, and venue updates.
• Ensuring campus security, emergency preparedness, and crowd management.
• Complying with university governance and statutory safety obligations.

4. Data Sharing & Disclosure

We value your trust and never sell, rent, or trade your personal data to third-party commercial advertisers. Data is shared solely with:

• Payment Aggregators (Razorpay): To securely verify payment authenticity, reconcile transactions, and prevent fraudulent billing for competitive events and merchandise.
• University Administration & Law Enforcement: If mandated by official legal inquiries, campus safety regulations, or medical emergencies.
• Accredited Event Supervisors: Festival heads have access only to participant rosters strictly necessary to administer competitions.

5. Data Security & Technical Safeguards

We implement rigorous security and encryption standards, including encrypted HTTPS/TLS transmissions, salted and cryptographically hashed passwords (passwords are never stored in plain text), tokenized authentication, firewalled databases, and restricted role-based administrative access privileges to prevent unauthorized disclosure, tampering, or loss.

6. Account Creation, Limited Retention & DPDP Act Compliance

In strict compliance with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the statutory principle of storage limitation:

• No Indefinite Storage: Personal information provided during account creation—including your email address, account identifiers, and encrypted passwords—will not be stored indefinitely.
• Defined Post-Event Retention Period: Account data and credentials are created solely for participating in and managing festival activities. This information will be retained only for a reasonable, finite duration (up to 90 days) after the event concludes to facilitate post-festival activities such as certificate issuance, prize disbursal, query resolution, and financial audit reconciliation.
• Permanent & Secure Data Erasure: Upon expiration of the post-event retention window, account credentials (emails, passwords, and related session tokens) will be permanently and securely purged from our production databases and servers.
• Data Principal Rights: Under the DPDP Act, you reserve the right to review your registered data or request earlier deletion of your account and personal details once your participation in the festival has concluded by contacting the organizing team.

7. Photography & Public Event Coverage

Consensio 2026 is a public university event extensively documented by official photographers and media crews. Images and video footage captured during the fest may be shared across university websites, social channels, and media reports.