Privacy Policy

1. Overview & Identity

ECSC Resources Drive(“we”, “our”, or “the Portal”), accessible at https://edu.ecsc-uok.com, is an academic resource management system operated by the Electronics & Computer Science Club (ECSC), Department of Electronic and Computer Science, Faculty of Science, University of Kelaniya, Sri Lanka.

This Privacy Policy describes how we collect, handle, protect, and process user data, including information accessed via third-party services such as the Google Drive API.

2. Information We Collect

We only collect and process information necessary to provide students and faculty with academic resources:

• Student Account Information: Student registration number, hashed credentials, and display name.
• Academic Profile Data: Year of study and enrolled semester, used solely to present relevant course materials.
• Authentication & Session Data: Secure HTTP-only cookies and JSON Web Tokens (JWT) used to verify active login sessions.
• Submissions & Uploads: Academic files submitted by students for review and publication (e.g., lecture notes, past exam papers, reference documents).

3. Google Drive API & User Data Policy

ECSC Resources Drive connects to the Google Drive API (https://www.googleapis.com/auth/drive) to store, organize, and deliver approved educational materials to enrolled students.

What Google Data We Access:

• Folder hierarchies and folder names corresponding to academic years and semesters.
• File metadata including file name, file ID, MIME type, file size, and last modified date.
• File content streams strictly to proxy file previews and downloads to authenticated students.

Specifically, regarding Google User Data:

• No Data Selling or Advertising: We do not sell, rent, or monetize any Google user data, nor do we share it with advertising platforms or data brokers.
• No AI Training: Google user data and Drive contents are never used to train generalized artificial intelligence (AI) or machine learning models.
• Human Access Restrictions: No human administrator accesses your private files without explicit permission, except where strictly required for technical troubleshooting, cybersecurity investigation, or compliance with applicable laws.

4. How We Use and Share Information

All information collected is used exclusively for:

• Authenticating registered students into the course portal.
• Retrieving and organizing academic materials categorized by academic year and semester.
• Facilitating the submission and administrative moderation of student-contributed study materials.
• Ensuring portal security, preventing unauthorized access, and maintaining system integrity.

We never sell, lease, or distribute personal information or Google Drive data to any external commercial entities.

5. Data Storage, Security & Retention

We implement industry-standard administrative, physical, and technical safeguards to ensure data security:

• All network communications are encrypted in transit using Transport Layer Security (TLS/HTTPS).
• User passwords are protected with strong cryptographic one-way hashing (bcrypt).
• Google OAuth access and refresh credentials are kept encrypted within secure server-side environment variables and are never exposed to client browsers.
• Academic files are securely stored within designated institutional Google Drive repositories.

User accounts and data are retained only as long as necessary to provide academic services throughout the student's enrollment period.

6. User Rights & Google Access Revocation

You have the following rights regarding your data:

• Access and Rectification: You can review and update your profile display name and password from your dashboard.
• Account Deletion: You may request the removal of your account or submitted materials by contacting the administrators.
• Revoking Google Access: Google account owners can revoke our application's permissions at any time via Google Account Security Settings.

7. Contact Information

If you have questions, feedback, or data privacy requests regarding this Privacy Policy or our Google Drive integration, please contact:

• Email: ecsc.resources.uok@gmail.com
• Organization: Electronics & Computer Science Club (ECSC)
• Department: Department of Electronic and Computer Science
• Institution: Faculty of Science, University of Kelaniya, Dalugama, Kelaniya 11600, Sri Lanka