Hallway Technologies Pvt. Ltd. ("Hallway," "Company," "we," "us," or "our") respects your privacy and is dedicated to protecting the personal data of verified students. This Privacy Policy details our data governance practices, describing how we collect, process, store, disclose, and secure your personal data in strict compliance with the Digital Personal Data Protection Act, 2023 (DPDPA) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
Under Section 2(i) of the DPDPA, Hallway Technologies Pvt. Ltd. acts as the Data Fiduciary determining the purpose and means of processing personal data. You, as the verified student, are the Data Principal under Section 2(j).
This Policy applies to all digital interactions on hallwaychat.online, our matchmaking infrastructure, and campus verification gateways.
In accordance with data minimization principles, we restrict collection strictly to data necessary for authenticated campus networking:
.ac.in or .edu), verified enrollment domain, and academic department;Sensitive Data Exclusion: Hallway does not collect or process Aadhaar numbers, biometric templates, government IDs, bank details, or payment card numbers.
Pursuant to Section 4 and Section 7 of the DPDPA, processing is grounded on valid, informed, affirmative consent and legitimate operational uses:
| Processing Purpose | Data Elements Involved | Lawful Grounds |
|---|---|---|
| Student Enrollment Authentication | Institutional Email, College Domain | Contractual Necessity & Consent (Sec 4 DPDPA) |
| Peer Vibe Matchmaking | Interests, Year, Online Presence | Contractual Necessity |
| WebRTC Peer Routing | Signaling Tokens, ICE Candidates | Legitimate Use (Sec 7 DPDPA) |
| Moderation & Ban Enforcement | Report Transcripts, Handle Hashes | Compliance with Law & Safety Enforcement |
Hallway is architected on zero-retention principles for real-time media:
Hallway does not sell, license, or monetize student personal data. Data is shared solely with ISO-certified cloud infrastructure processors under strict data protection addenda:
Law Enforcement: Information may be disclosed pursuant to lawful orders issued under Section 91 of the Code of Criminal Procedure, 1973 (or Section 94 of the Bharatiya Nagarik Suraksha Sanhita, 2023) or Section 69 of the Information Technology Act, 2000.
Personal data is retained only for the duration necessary to fulfill verified collegiate networking:
In compliance with Section 8(5) of the DPDPA, Hallway maintains rigorous administrative and technical safeguards, including PostgreSQL Row Level Security (RLS), HTTPS/TLS 1.3 transport encryption, passwordless cryptographic link authentication, and rate-limiting against automated scraping.
Under Chapter III of the Digital Personal Data Protection Act, 2023, you have the right to:
To exercise any statutory right, transmit a verifiable request to privacy@hallwaychat.online.
Pursuant to Section 9 of the DPDPA, Hallway does not process data of individuals under eighteen (18) years of age. Accounts identified as belonging to minors will be permanently purged without notice.
In compliance with Section 13(1) of the DPDPA and Rule 3(2) of the Information Technology Intermediary Rules, 2021, the details of our Grievance Redressal Officer are as follows: