This policy explains what personal information Springfield Olympiads collects, how we use it, and what rights you have over it. Questions? Email privacy@springfieldolympiads.com.
Information we collect
During registration we collect the student's name, email, phone, city, pincode, class/qualification, and segment (school/graduate/professional). For school bulk registrations we also collect institute name, coordinator details, and a batch student list (via Excel upload).
Payment metadata (order ID, payment ID, amount, status) is returned by Razorpay and stored for reconciliation and audit purposes. We never see or store your card number, CVV, or UPI PIN.
Exam performance data (answers, score) is collected on our secure examination portal and synchronized to our servers after the exam window closes.
How we use your data
- To process registrations, issue roll numbers, and administer the Olympiad.
- To send admit cards, result notifications, and certificate download links via email.
- To issue certificates with ranks and enable public verification via certificate number.
- To respond to support queries and share Olympiad-related updates.
We never sell personal data. We never share it with third parties for marketing.
Data retention
We retain registration and payment records for at least 7 years to comply with Indian tax regulations and certificate verification requirements. Contact messages are retained for 2 years. Newsletter subscriptions are retained until you unsubscribe.
Your rights
You have the right to request access, correction, or deletion of your personal data. Email privacy@springfieldolympiads.comwith your request and we'll respond within 30 days.
Security
Passwords (where applicable) are stored hashed with bcrypt. OTPs are stored hashed, never in plaintext. Access tokens are short-lived JWTs. Data at rest is encrypted on AWS RDS; data in transit uses TLS 1.2+. Payment webhooks are HMAC-verified for authenticity.
Cookies & tracking
We use a minimal set of first-party cookies for login sessions. We do not set marketing or cross-site tracking cookies. If Google Analytics is enabled, it runs in anonymized mode.
Changes to this policy
We'll notify registered users of significant changes via email. The "Last updated" date above reflects the most recent revision.