Privacy Policy & Data Dignity
At Masari, privacy is not an afterthought — it is the foundation of verified credentials. We believe your proof of work belongs to you, and your student records must remain sacred.
Effective Date: August 19, 2026 · Standard Version 2.4
Zero Commercial Data Brokering
We never monetize, package, or sell student records or private user data to advertisers.
FERPA & Academic Compliance
Full compliance with student data privacy frameworks and institutional confidentiality mandates.
Row-Level Security (RLS)
PostgreSQL cryptographic policy gates guarantee that private records are only accessible to permitted users.
Core Privacy Principles
Masari operates under three governing tenets: You own your proof of work, academic records must be protected with institutional-grade safeguards, and transparency is non-negotiable. We only collect data necessary to evaluate skills, assemble dynamic living resumes, and connect students with legitimate opportunities.
1. Information We Collect
Account Information: When signing in with email or school identifier, we store your name, email, avatar, career stage, and target job roles.
Activity Logs & Proof of Work: Submissions inside project rooms, completed assignments, hackathon rankings, and peer feedbacks are recorded to calculate objective skill score competencies.
Credential Verification Metadata: Titles, issuing organizations, verification timestamps, and evidence URLs associated with your achievements.
2. Student Privacy & FERPA Compliance
For educational partners (K-12 schools, community colleges, and universities), Masari operates as a “School Official” with legitimate educational interests pursuant to FERPA 34 CFR § 99.31(a)(1).
4. Data Lifecycle Matrix
Overview of how different data classes are handled and secured within Masari.
| Category | Purpose | Access Level | Retention |
|---|---|---|---|
| Profile & Identity | Public profile identification & Living Resume header | Public or Restricted by user preference | Account lifetime or until deleted |
| Skill & Activity Ledger | Calculating dynamic skill scores & verified proof of work | Public on Living Resume / Viewable by project room members | Immutable evidence ledger |
| Direct Communications | Real-time collaboration and direct messaging | Strictly private to authenticated participants (RLS gated) | Available until deleted by participants |
| Institutional Credentials | Institutional credential verification via Hubs | Verifiable by employers via cryptographic proof link | Permanent academic record (unless revoked by Hub) |
5. Visibility Controls
Your Living Resume has a shareable link that you can provide to recruiters, professors, or colleagues. Direct messages, unpublished drafts, and private room discussions are strictly invisible to anyone outside the participating group.
6. Encryption & Storage
All data is encrypted in transit using TLS 1.3 and at rest with AES-256 standards. Our database infrastructure operates with Row-Level Security policies enforcing isolation between organization Hubs and user records.
7. Your Data Rights & Portability
You have the absolute right to: (a) Export a complete JSON or printable PDF record of your verified skill ledger; (b) Request rectification of incorrect records; and (c) Request complete account erasure.