Privacy Policy

01 — Who We Are

• AMS Derive 2026 is organized by the Algorithms and Mathematics Society (AMS), based in India. For privacy-related queries, contact us at admin@amsociety.in.

02 — Data We Collect

• Registration data: Full name, email address, phone number, institution name, year of study, degree program, and Codeforces handle.
• Uploaded documents: Resume (PDF) and academic transcript (PDF), submitted voluntarily during registration.
• Pre-registration data: Email address, submitted via the interest form before registration opens. Associated with a campus ambassador referral code if applicable.
• Technical data: IP address (hashed, not stored in plaintext), used solely for rate-limiting duplicate or abusive submissions.
• We do not use cookies for tracking. We do not run advertising pixels, third-party analytics scripts, or behavioral tracking of any kind on this site.

03 — How We Use Your Data

• To process your registration, verify eligibility, and manage your participation across all three rounds of AMS Derive 2026.
• To send you contest-related communications: round schedules, result announcements, verification session invites, and prize coordination. These are operational emails, not marketing.
• To display your name and institution on internal leaderboards and on the partner firm portal, subject to the data-sharing consent you provide during registration.
• To attribute campus ambassador referrals for leaderboard tracking purposes.
• We do not use your data for any purpose unrelated to the administration of AMS Derive 2026 or Algorithms & Mathematics Society (AMS) communications.

04 — Data Sharing with Partner Firms

• Partner firms access participant data only through the AMS Derive firm portal. Access is tiered and controlled by the AMS organizing team.
• Tier 1 access (all verified sponsors): Participant name and institution only. Visible on the leaderboard-style portal view.
• Tier 2 access (select firms, granted explicitly): Resume and LinkedIn profile URL, if submitted and if the participant has consented to data sharing at registration. This tier is not granted to all sponsors.
• Email address and phone number are never shared with any firm or third party under any circumstances.
• If you did not consent to data sharing during registration, your profile will not be visible on the firm portal beyond what is publicly visible on the contest leaderboard.

05 — Data Storage and Security

• All participant data is stored in Google Firebase (Firestore and Firebase Storage), hosted in the US region. Firebase is operated by Google LLC and subject to Google's security and compliance infrastructure.
• Uploaded files (resume, transcript) are stored in Firebase Storage with access controlled via Firebase Security Rules. Direct public URLs are not generated. Files are accessible only through authenticated admin or firm-portal sessions.
• We enforce rate limiting on all form submissions to prevent abuse. IP addresses used for rate limiting are hashed using SHA-256 before storage and are not stored in plaintext.
• Access to the admin panel is protected by Firebase Authentication with email and password credentials. Admin sessions expire after 8 hours.
• We apply reasonable technical and organizational measures to protect your data. However, no system is entirely secure. In the event of a data breach affecting personal data, we will notify affected participants within 72 hours of becoming aware.

06 — Data Retention

• Registration data for participants who competed in AMS Derive 2026 is retained for a period of 12 months following the conclusion of Round 3 (CONVERGENCE), after which it is deleted from our systems.
• Pre-registration interest data (email only) is retained until 30 days after the close of registration, then deleted.
• You may request deletion of your data at any time before the retention period ends. See Section 07 for how to do this.

07 — Your Rights

• You have the right to request access to the personal data we hold about you, to request correction of inaccurate data, and to request deletion of your data.
• Deletion requests will be processed within 7 business days. Note that deleting your data before the competition concludes will result in your registration being voided and your removal from the contest.
• To exercise any of these rights, email admin@amsociety.in with the subject line "Data Request" and your registered email address.
• We do not sell personal data to any third party, and we never will.

08 — Third-Party Services

• Firebase (Google LLC): Database, file storage, and authentication. Subject to Google's Privacy Policy.
• Resend: Transactional email delivery for registration confirmations and contest communications. Only your email address is passed to Resend for the purpose of sending these emails. Resend does not receive any other personal data.
• Vercel: Hosting and serverless function execution. Vercel may log IP addresses transiently as part of standard request processing. These logs are not retained by AMS.
• We do not use Google Analytics, Meta Pixel, Hotjar, or any other behavioral analytics or advertising platform.

09 — Changes to This Policy

• We may update this Privacy Policy as needed to reflect changes in our practices or applicable law. Updated versions will be posted on this page with a revised date at the top.
• Material changes will be communicated via email to all registered participants.
• Questions about this policy can be sent to admin@amsociety.in.