Privacy policy

Who is responsible

Technical Support Unit (TSU), CEPT Research and Development Foundation (CRDF) operates this deployment and is responsible for the personal data it holds. Questions or requests: tsu.crdf@cept.ac.in.

What is collected

• Account details (when sign-in with individual accounts is enabled): email address, a one-way password hash, the agencies you can access and your permission level.
• Sign-in and activity records: time of each sign-in, your account id, email and IP address; administrative actions such as creating users, changing access or starting data jobs.
• Operational data loaded by authorised users or pulled from the operator: tickets, routes, stops, vehicles and GPS positions of buses. Ticket records can include conductor or driver identifiers and passenger counts; they do not identify passengers.
• No advertising, analytics or tracking scripts are used.
• Page usage: when you are signed in with an individual account, the dashboard records which page you open, for which city and for how long, against your account, so administrators can see how the tool is used. It does not record clicks inside a page, filters, searches or anything you type, and it never signs you out.

Cookies and browser storage

• One session cookie keeps you signed in. It is strictly necessary, cannot be read by page scripts (HttpOnly), is sent only to this site, and expires after 7 days or when you sign out.
• Your browser's local storage keeps display preferences and the last city you selected. It never leaves your device; clearing site data removes it.

Why it is used

• To authenticate you and enforce which agencies you may see or change.
• To keep an accountability record of sign-ins and administrative actions.
• To produce the transit performance analysis this dashboard exists for.

Services that receive data

• Your browser loads fonts from Google Fonts and map tiles from CARTO and OpenStreetMap. These providers receive your IP address and browser details as part of normal web requests.
• The server sends stop coordinates (no personal data) to OpenRouteService for road distances, pulls data from the operator's systems, and may copy stored data to an off-site backup server operated for this deployment.
• Data is not sold or shared for marketing.

Retention and your rights

Account records are kept while your account exists; sign-in and activity records are kept for accountability. You can ask TSU, CRDF to access, correct or delete your account data at tsu.crdf@cept.ac.in, subject to records that must be kept by law.