Most JEE aspirants are in Class 11 or 12, and many are under 18. Their safety comes before every other consideration on this platform.

The following are absolutely prohibited and are treated as the most serious violations:

• sexual exploitation or abuse of any kind
• grooming, or building trust with a minor for exploitative purposes
• sexual solicitation, sexual comments or sexual content directed at or involving minors
• inappropriate private interactions between adults and minors
• requesting private, personal or intimate photographs
• pressuring anyone to share private contact information or move to a private channel
• threats, blackmail, manipulation or emotional coercion
• financial scams, fake scholarships, fake 'paid material' offers or money requests targeting students

Accounts involved in such behaviour may be removed immediately without warning, and relevant records may be preserved and reported to the appropriate authorities where appropriate or legally required.

• Keep conversations on the platform, and inside study topics.
• Never share your home address, phone number, school timings, live location or identity documents with people you meet online.
• Nobody from JEE Prep Hub will ever ask you for your password, OTP, or money.
• If someone makes you uncomfortable, block and report them.
• If a situation feels serious or frightening, tell a parent, guardian, teacher or another trusted adult, and contact the appropriate authorities. Do not wait for a moderator to come online.

• Use a strong, unique password that you do not reuse on other websites.
• Do not share your account, and do not let anyone else use it.
• You are responsible for activity that happens through your account, so keep your credentials private.
• Sign out on shared or public devices, and end sessions you do not recognise where the feature is available.
• Impersonating another person, or creating an account in someone else's name, is prohibited.
• If you notice suspicious activity, or think your account is compromised, change your password immediately and contact [SECURITY EMAIL].

JEE Prep Hub will never ask you to reveal your password publicly, in a chat, or to a moderator. Any such request is a scam — report it.

Please do not post any of the following in public posts, comments, groups or profiles:

• passwords or security answers
• OTPs or one-time login links
• bank details, UPI IDs used for private transfers, card numbers or payment screenshots
• Aadhaar, PAN, admit-card scans or other identity documents
• home address or exact live location
• private phone numbers, including your parents'
• private educational records or medical information

We do not ask users to submit sensitive information unless it is genuinely necessary for a feature, and we will explain why when we do.

You must not attempt to:

• exploit vulnerabilities in the platform
• bypass authentication, authorisation or access controls
• access restricted areas, admin functions or other users' data
• manipulate, read or alter the database beyond what your account is permitted to do
• steal or harvest user information
• inject malicious code, scripts or payloads
• disrupt or degrade the service for others
• carry out denial-of-service or flooding attacks
• distribute malware, spyware or harmful files
• interfere with our hosting, infrastructure or third-party providers

Such conduct may also be an offence under applicable law, including the Information Technology Act, 2000.

If you are a security researcher or a curious student who finds a flaw, please tell us instead of exploiting it.

• Report to [SECURITY EMAIL] with enough detail for us to reproduce the issue.
• Do not access, modify or download other users' data. Use only your own test account.
• Do not run destructive tests, denial-of-service attacks or automated scans that could disrupt the service.
• Give us reasonable time to fix the issue before discussing it publicly.
• Do not publish sensitive technical details, exploit code or user data.

We appreciate good-faith reports and will not pursue action against researchers who follow these guidelines. We do not currently operate a paid bug-bounty programme: [BOUNTY PROGRAMME DETAILS, IF ANY].

For everyone's safety, we do not publish detailed information about our internal security controls.

• Effective Date: [EFFECTIVE DATE]
• Last Updated: [LAST UPDATED DATE]
• Version: 1.0
• Policy Owner: [POLICY OWNER / ADMIN TEAM]