Privacy Policy

CampusOverflow ("we," "us," or "our") operates the CampusOverflow.com platform. This Privacy Policy describes how we collect, use, and handle your information when you use our services. By using the platform, you agree to the collection and use of information in accordance with this policy.

1. Information Collection and Use

To provide a verified and secure environment for faculty communication, we collect the following information via Google Single Sign-On (SSO):

• Identity Data: Full name and email address.
• Profile Data: Profile picture (if applicable) used for internal identification.
• Organizational Data: School district affiliation and department assignment as provided by your local campus administrative sheets.

2. Use of Google User Data

CampusOverflow's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use your Google data solely to authenticate your identity and ensure you are an authorized staff member of your specific campus.

3. Data Storage and Security

We implement industry-standard security measures to protect your data. We do not store passwords, as authentication is handled entirely by Google. Post data and department affiliation are stored on secure SQL servers. Access to the raw database is restricted to authorized technical administrators.

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. Data is shared only in the following contexts:

• Campus Administrators: Designated school leaders may view authorship of posts for safety and accountability purposes.
• Legal Requirements: We may disclose information if required to do so by law or in response to valid requests by public authorities.

5. Data Retention & Archival

To maintain platform performance and relevance, CampusOverflow utilizes a seasonal data retention policy. All user-generated posts and departmental data are actively purged annually during the summer break (typically by July 31st). Authorized administrators may request an export of their campus data prior to this date; otherwise, data is permanently deleted from active servers to ensure a clean slate for the following academic year.