Privacy Policy

Name: RYHATHON 2026
Start: 2026-10-29
End: 2026-10-30

What we collect when your team registers, why we need it, who processes it, and how you stay in control of it.

Last updated: 29 September 2026. Organised by RYHA Technologies with Francis Xavier Engineering College (FXEC), Tirunelveli.

Scope

This policy explains how RYHA Technologies, together with Francis Xavier Engineering College (FXEC), Tirunelveli handle personal data for RYHATHON 2026 on hackathon.ryha.in and in the participant portal. We process personal data in line with India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable laws.

Team details: team name, team size, team email and a password (stored only as a salted one-way hash; we can never see it).
Member details: full name, email, mobile number, college, department, year of study, UG/PG level and domain of interest.
Optional profile links: GitHub and LinkedIn URLs.
Round 1 submissions: Google Slides link, optional repository and demo links, the selected problem, submission times and review status.
Payment records: order and payment IDs, amount and status received from Razorpay.
Support messages you send us, and basic security logs (such as sign-in attempts) used to prevent abuse.

We use a small set of trusted providers who process data on our behalf, only for the purposes above:
Supabase: our database, where registration and submission data is stored.
Cloudflare: website hosting, security and the server functions that power the portal.
MojoAuth: sends the one-time email codes used to verify your email and sign you in.
Razorpay: processes payments. Card, UPI and bank details are entered on Razorpay’s secure checkout and never touch our servers.
Some providers may store data on servers outside India. Where that happens they are bound by their own security and data-protection commitments.

We use one essential, HttpOnly session cookie to keep you signed in, plus a short-lived cookie during email-code verification. They cannot be read by page scripts and are not used for tracking.
We do not use advertising or third-party analytics cookies. Razorpay’s checkout may set its own cookies while you pay.

We keep registration and submission data until six (6) months after the event ends, then delete or anonymise it, unless we must keep certain records longer by law (for example payment and tax records).

You can ask us to:
give you a summary of the personal data we hold about you;
correct or update inaccurate details;
delete your data (this may withdraw your team from the event);
withdraw consent for optional uses, such as showcasing your project.
Email [email protected] from the address you registered with. We will respond within 30 days. If you are not satisfied, you may raise a grievance with the Data Protection Board of India.

The event is meant for college students. If a participant is under 18, a parent or guardian must consent to their registration. If we learn that a minor registered without that consent, we will delete their data.

Data travels over HTTPS. Passwords are hashed with PBKDF2 and a unique salt, sessions use signed HttpOnly cookies, repeated sign-in failures are rate-limited, and database access is restricted to our server functions. No system is perfectly secure, so please use a strong, unique password and tell us right away if you suspect misuse.

For privacy questions or requests, contact the organisers:
Email: [email protected] (we usually reply within 12–24 hours).
Student volunteers (phone / WhatsApp): Muthu Prabhu (+91 97905 13631) and Mathesh (+91 93606 13901).
Post: RYHATHON 2026, Francis Xavier Engineering College, Vannarpettai, Tirunelveli, Tamil Nadu 627003, India.