Legal

Privacy Policy

Our commitment to protecting your privacy and personal data

Last updated: December 1, 2024

Introduction

EduPoint Indonesia ("we", "us", or "EduPoint") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our private tutoring services and education platform.

1. Information We Collect

We collect several types of information to provide and improve our services:

Personal Information

Full name, email address, phone number, home address, date of birth, profile photo, and educational information (school, grade, subjects).

Payment Information

Transaction data, payment methods, and payment history. We do not store credit card numbers directly - all payments are processed through trusted payment gateways.

Usage Data

Activity logs, access times, tutoring session duration, tutor preferences, booking history, and platform interactions.

Device Information

IP address, browser type, operating system, device ID, and location information (with permission).

2. How We Use Information

Collected information is used to:

Provide Services

Match students with suitable tutors, schedule tutoring sessions, process payments, and provide customer support.

Personalize Experience

Customize tutor recommendations, tutoring programs, and educational content based on your preferences and learning needs.

Communication

Send schedule notifications, platform updates, promotions, and other important information. You can unsubscribe at any time.

Security

Verify identity, prevent fraud, and protect the security of users and the platform.

Service Improvement

Analyze usage patterns to develop new features and improve service quality.

3. Information Sharing

We do not sell your personal data. Information is only shared under the following conditions:

Tutors

Name, grade, subjects, and tutoring schedule are shared with your chosen tutors for tutoring purposes.

Service Providers

Trusted partners such as payment gateways, hosting providers, and analytics services that support our operations.

Legal Obligations

When required by law, legal process, or valid government requests.

Rights Protection

To protect the rights, property, or safety of EduPoint, users, or the public.

4. Data Security

We implement strict security measures to protect your data:

Encryption

All sensitive data is encrypted using SSL/TLS in transit and AES-256 at rest.

Limited Access

Only authorized employees can access personal data, with logging and audit trails.

Secure Infrastructure

Our servers are hosted in ISO 27001 certified data centers with firewalls and intrusion detection systems.

Security Audits

We conduct regular penetration testing and security audits.

5. Your Privacy Rights

As a user, you have the following rights over your personal data:

Right to Access

You can request a copy of the personal data we hold about you.

Right to Correction

You can update or correct inaccurate personal information.

Right to Deletion

You can request deletion of your personal data, with some exceptions allowed by law.

Right to Portability

You can request your data in a machine-readable format.

Right to Object

You can object to processing of data for direct marketing purposes.

6. Cookies and Tracking

We use cookies and similar technologies to:

Essential Cookies

Required for basic website functions like login and security.

Analytics Cookies

Help us understand how users interact with the platform.

Preference Cookies

Store your preferences like language and display settings.

Managing Cookies

You can set cookie preferences through your browser settings.

7. Data Retention

We retain your personal data for:

Active Account

As long as your account is active or as needed to provide services.

After Account Closure

Data is retained for up to 30 days after account closure for recovery, then deleted.

Transaction Data

Retained for 5 years as required by tax and accounting regulations.

Anonymous Data

Anonymized data may be retained for analytics purposes.

8. Children's Privacy

We take children's privacy very seriously:

Parental Consent

For users under 18, we require consent from a parent or guardian.

Limited Data Collection

We only collect data necessary for educational services.

Parental Controls

Parents can review, update, or delete their child's data at any time.

Policy Changes

We may update this Privacy Policy from time to time. Significant changes will be notified via email or platform notification. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact:

Response Time

We will respond within 14 business days.

Address

EduPoint Indonesia Jl. Pendidikan No. 123 Jakarta Selatan 12345 Indonesia