Privacy Policy | SRM Academia Bot

Architecture of Trust

Our bot is designed with a Zero-Persistence philosophy regarding credentials. We believe that security is best achieved by not holding sensitive keys longer than strictly necessary.

The bot acts as a specialized bridge between the SRM Academic Portal and the Telegram ecosystem, ensuring that your data is accessible only to you through your verified Telegram session.

Handling of Credentials

Unlike traditional applications, we do not store your SRM portal password.

Pass-through State Passwords are processed in volatile memory for a single authentication handshake and are never written to any database.

Session Tokens Upon success, we store an encrypted session token (JSESSIONID) in our database. This allows the bot to fetch your data without asking for credentials every time.

Auto-Invalidation Tokens are periodically validated every 30 minutes. Inactive or expired tokens are purged immediately from our active records.

What We Store

To provide a seamless experience (features like Attendance & Marks Notifications), we store the following data points in our secure MongoDB infrastructure:

Identity

• Telegram UID & Username
• Registration Number
• Verified Email Address
• Full Legal Name

Academic Cache

• Course Marks Record
• Real-time Attendance %
• Program & Semester Info
• Department & School

Your Digital Rights

You maintain full sovereignty over your data.

Immediate Erasure: Using the /logout command instantly destroys your session token and marks your profile as inactive.
Account Purging: You may request a complete hard-deletion of your academic cache from our database by contacting support.

Initiate Support

If you have discovered a security concern or have questions about how your data is being used, please reach out to our core team.

support@srminsider.live

Response window: 24h