Privacy Policy

Introduction

IKA UNAND Network is the official alumni community platform for Universitas Andalas, managed by DPP IKA UNAND (Dewan Pimpinan Pusat Ikatan Keluarga Alumni Universitas Andalas). We connect over 75,000 alumni worldwide, providing a platform for networking, professional development, and community engagement.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. By using IKA UNAND Network, you agree to the terms of this policy.

Information We Collect

Registration Data

When you register for an account, we collect the following information:

• Required: First name, last name, email address, NIM (student ID number), phone number, password, and year of entry
• Optional: Address, graduation year, program of study, place of birth, date of birth, and gender

Profile Data

You may optionally provide additional information for your profile, including:

• Profile photo
• Education history timeline
• Career timeline and work history
• Privacy settings for profile visibility

Authentication Data

We use JSON Web Token (JWT) authentication for secure access:

• Access tokens (stored in your browser's localStorage)
• Refresh tokens for maintaining your session

Newsletter Subscription

If you subscribe to our newsletter, we collect your name and email address for sending updates, news, and event announcements.

How We Use Your Information

We use your collected information for the following purposes:

• Account Management: Creating and maintaining your account
• Alumni Verification: Verifying your alumni status through NIM matching
• Community Features: Enabling profile browsing, networking, and connections
• Events: Managing event registrations and attendance
• News: Delivering relevant news and announcements
• Security: Detecting, preventing, and addressing technical issues and fraud
• Communication: Sending important updates about the platform

Data Sharing and Disclosure

No Data Selling

We do not sell, rent, or trade your personal information with third parties for marketing purposes.

Public Profile Visibility

Your profile information may be visible to other registered users based on your privacy settings. You can control the visibility of:

• Email address
• Phone number
• Address
• Company information

University Database Verification

During registration, your NIM (student ID number) and year of entry are compared against the official Universitas Andalas alumni database for verification purposes. This data is transmitted securely and used solely to confirm your alumni status.

Admin Access

Authorized administrators and moderators may access your data for the purpose of alumni verification, account support, and platform moderation. All admin actions are logged and audited.

Data Security Measures

We implement industry-standard security measures to protect your information:

• JWT Authentication: Secure token-based authentication with automatic expiry
• HTTPS Encryption: All data transmitted over secure, encrypted connections
• Password Hashing: Passwords are securely hashed and never stored in plain text
• Input Validation: All user inputs are validated to prevent injection attacks
• Access Controls: Role-based access control for administrative functions

Data Retention Policy

We retain your personal information according to the following schedule:

• Active Accounts: Retained indefinitely while your account remains active
• Inactive Accounts: Marked as inactive after 24 months of no login
• Archived Accounts: Data archived after 36 months of inactivity
• Account Deletion: Data permanently deleted after 60 months of inactivity
• Voluntary Deletion: Account data deleted within 30 days of your request

Your Privacy Rights

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Restriction: Limit how we use your data
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing of your data
• Consent Withdrawal: Withdraw consent at any time (where processing is based on consent)

To exercise these rights, contact us at support@andalashub.org

Children's Privacy

IKA UNAND Network is a platform for university alumni who are typically 21 years of age or older. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will take steps to delete such information.

International Data Transfers

Your information is stored and processed on servers located in Indonesia. We do not transfer your personal data outside of Indonesia without your explicit consent, except as required by law or necessary to provide our services.

Policy Changes

We may update this Privacy Policy from time to time. When we make changes, we will:

• Notify you by email at least 30 days before any material changes take effect
• Post a prominent announcement on the platform
• Update the "Last Updated" date at the top of this policy

Your continued use of the platform after the changes become effective constitutes your acceptance of the updated policy.

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: