Privacy Policy

We only collect data you actively submit through the site's forms:

Like almost every website, our infrastructure provider (Cloudflare) also processes technical data — your IP address and browser details — transiently, to serve the site, block bots and enforce rate limits. We do not use this to profile you.

• No selling or renting of your data to anyone, ever.
• No advertising or marketing use — your email gets event-related mail only (verification results, credentials, password resets, essential event updates).
• No analytics or tracking scripts — the site runs no Google Analytics, no ad pixels, no fingerprinting.
• No reading your password — passwords are stored only as salted cryptographic hashes; nobody on the team can see them.
• No collecting bank or card details — payment happens inside your own UPI app; we only ever see the proof screenshot you choose to upload.

• Running registration — recording your team, checking event capacity, and manually verifying your payment proof.
• Account & communication — emailing the captain the verification result and login credentials (from noreply@roborush.in), password-reset links on request, and essential event-day updates by email, phone or WhatsApp.
• Running the event — check-in on event days, match scheduling, publishing team names, institutions, scores and results.
• Support — responding to messages you send through the contact form.
• Security — Cloudflare Turnstile verifies form submissions are human, and per-IP rate limits protect the login and password-reset endpoints against abuse.

We process this data with your consent, given when you submit each form, and as needed to provide the event you registered for — consistent with India's Digital Personal Data Protection Act, 2023.

• Registration and enquiry data is stored in a database, and payment screenshots in file storage, on Cloudflare's infrastructure.
• All traffic between your browser and the site is encrypted (HTTPS).
• Passwords are stored as salted PBKDF2 hashes — never in plain text. Password-reset links are single-use and expire after one hour.
• Access to registration data and payment proofs is restricted to the organising team's authenticated administrators; payment screenshots are never exposed at a public URL.
• Login and password-reset endpoints are rate-limited and all public forms are protected by Cloudflare Turnstile.

We use a small set of service providers, each only for its stated job. They act on our behalf and do not get to use your data for their own purposes:

Some of these providers may process data on servers outside India as part of their normal global operation.

• The site sets no tracking or advertising cookies.
• After login, your session token is kept in your browser's local storage so you stay signed in; logging out clears it. It never leaves your browser except to authenticate your own requests to our API.
• The registration form auto-saves your draft locally in your own browser so a refresh doesn't wipe your progress — this draft is not sent to us until you submit.
• Cloudflare (including Turnstile) may set strictly functional cookies needed for security challenges to work.

• Registration data and payment proofs are kept for the ROBO RUSH AI 2026 event cycle and a reasonable record-keeping period afterwards (accounts, prize disbursement, institutional reporting), then deleted.
• Payment screenshots have no use after verification is settled and are among the first data removed post-event.
• Enquiries are deleted once resolved and no longer needed.
• Published results (team names, institutions, placements) may remain online as the event's public record.

For any data we hold about you, you can:

• Access — ask what we hold about you or your team.
• Correct — fix wrong or outdated details (e.g. a mistyped email or member name).
• Delete — ask for your data to be erased. Note that deleting a verified registration's data before the event means withdrawing from it (the refund terms in the Terms & Conditions apply).
• Withdraw consent — for non-essential communication at any time.

Make any of these requests through the query form from the captain's registered email — we verify it's really you before acting, and respond as soon as possible. If you're unsatisfied with our response, you may escalate under the Digital Personal Data Protection Act, 2023.

• The event is open to school students, so some participants may be under 18. If you are, register and participate with the consent of a parent or guardian — they can contact us via the query form about any data concerning their child.
• We collect the same minimal data for all participants and never use any of it for advertising, profiling or tracking — for minors or anyone else.

• If our data practices change, this page will be updated with a new effective date, and material changes will be notified to registered captains by email.
• This policy works together with the Terms & Conditions; on privacy matters, this policy is the more detailed and controlling document.

• Privacy questions, data requests, or anything unclear in this policy: the query form reaches the organising team directly.
• Data controller: AI Robo Lab × CINTEL, SRM Institute of Science and Technology, Kattankulathur, Chengalpattu District, Tamil Nadu 603203, India.