Privacy Policy

The RACG Jalsa Airport App & Transport Management System is designed to coordinate airport guest pickups and driver schedules for the Jalsa Salana event. We take our responsibilities regarding the processing and protection of personal data very seriously. This policy explains what information we collect, how it is used, and how it is secured.

To ensure a smooth transport service, we collect limited personal data of participants. The data collected depends on your role in the system:

• Guests: Full name, flight number, airport of arrival, scheduled flight arrival time, destination, contact number, and luggage volume. This is required to match guests with the correct transport and drivers.
• Drivers: Full name, contact number, assigned shift/rota times, assigned vehicles, and seat/luggage capacities. This enables efficient dispatching and safety coordination.
• System Users (Admins/Volunteers): Email addresses, username, and system permissions. This allows safe dashboard login, authorization controls, and auditable actions.

We process personal data strictly to organize event transportation logistics. Specifically, data is used to:

• Assign drivers to guest arrivals.
• Monitor flight statuses in real time to adapt to delays or cancellations.
• Send automated SMS and email notifications regarding pickup coordinates, driver details, or scheduling updates.
• Securely authenticate administrative users via One-Time Passwords (OTP).

Security is designed directly into our database architecture. We implement the following safeguards:

• Row Level Security (RLS): Implemented at the Supabase/PostgreSQL database level. RLS restricts access so users can only view or modify records matching their authorized scope.
• Role-Based Access Control (RBAC): Strict separation of privileges. Only users verified as Super Admins, Admins, Drivers, or Volunteers can access their respective system panels.
• Secure OTP Login: Passwordless login via Email One-Time Passwords prevents credential theft and brute-force access attempts.
• Encrypted Connections: All API and database transactions are secured using standard TLS encryption.

Data is stored only for as long as is necessary to complete event logistics. Guest details, flight schedules, and driver rotas are preserved during the Jalsa Salana preparation and event days.

Within a reasonable period following the conclusion of the event, all operational tables containing guest and flight records are cleared, archived, or permanently deleted in compliance with community data governance guidelines.

You have control over your data. Under standard data regulations, you have the right to:

• Request access to the personal data we hold about you.
• Request correcting or updating incorrect information (e.g. changing flight numbers or drop-off points).
• Request that your driver or guest profile be deleted post-event.

If you wish to exercise any of these rights, please contact the Jalsa Salana IT/Transport team or system administrators directly.