Privacy Policy

Eduvia manages data needed for accounts, security, service administration, billing, and communication with the operator. Institutions determine users, content, classes, and learning purposes within their workspaces; Eduvia provides the processing needed to operate those functions.

Requests about learning records may require coordination with the institution and verification of authority. This allocation does not remove the legal obligations of Eduvia, institutions, or relevant service providers.

Account and profile data include email, name, contact information, profile pictures, and necessary authentication information. Institution data include names, contacts, logos, regional preferences, memberships, roles, invitations, and document acceptance.

Learning data include courses, classes, enrollments, content and files, discussions, sessions, activities and progress, assessments, answers or submissions, grades, and certificates. Feedback or support data may include responses, messages, and attachments you provide.

Billing data include plans, invoices, transaction amounts, and payment references and status. Demo requests include the name, email, institution, role, and notes you provide. Security and activity logs support authentication, access control, troubleshooting, and audit.

Data support accounts and workspaces, learning activities, permissions, billing, service notifications, demo and support responses, security, and troubleshooting.

The grounds for processing depend on context, including fulfilling an agreement or service request, legal obligations, legitimate interests balanced with user rights, or required consent. Reading this policy is not blanket consent to new purposes; processing requiring specific consent must be handled separately.

Demo request information is used to respond to that request and is sent to the team by email. Feedback responses do not automatically become public testimonials; publication follows the applicable consent and review.

Institution access follows user permissions, assignments, ownership, and relationships to relevant classes or activities. Information may be available to administrators, instructors, learners, or support personnel according to their authority and handling needs.

Information intentionally shared through public features, such as invitation previews or certificate verification, may make limited information available under that feature. Sharing links or documents can also give recipients access; review the information you share.

Supporting providers may process data needed for hosting, file storage, email delivery, authentication, and payment. Product integrations include Supabase for files, Google when you choose Google authentication, and Midtrans for payment. Correspondence at the operator’s Gmail address is processed through that email service.

Processing locations depend on the providers and service configuration used. Transfers outside Indonesia must meet applicable protection requirements, including equivalent protection, adequate binding protection, or consent where required. Contact the operator for information relevant to your institution’s use.

Eduvia uses cookies and browser storage needed to maintain sessions, authenticate users, protect requests, and remember interface preferences. Disabling necessary mechanisms may affect sign-in or use of the service.

External services you choose, such as Google authentication or Midtrans payment pages, use their own mechanisms and policies. Review the provider’s information when using those services.

Service data are retained while accounts, memberships, or institution services are needed, and as needed for the described purposes, disputes, or legal obligations. Learning, billing, and audit records may have different retention needs.

Institution offboarding and deletion require review of authority, related records, retention, and legal obligations or holds. Export is available through workflows for authorized parties or coordination with the operator. Subscription expiry does not itself delete all data.

Demo requests and support communication sent by email become part of correspondence. Contact the operator to request review or deletion of correspondence; handling follows relevant follow-up needs and legal obligations.

Under applicable law, you may request information, access or copies, correction, termination or deletion, withdrawal of consent, or other applicable rights over your data. Handling may depend on processing grounds, legal obligations, others’ rights, and institution authority.

Send requests to eduvialms@gmail.com, explaining the request and your connection to the account or institution. The operator may verify identity and scope and coordinate with the institution. Do not send passwords or unnecessary sensitive information.

If an institution includes child learners, processing their data requires special handling and parent or guardian consent under applicable law. The institution and Eduvia need to establish the required grounds and authority before using the data.

Contact the institution and operator with questions about children’s data. Acceptance by a workspace owner does not replace legally required parent or guardian consent.

Eduvia uses authentication, access restrictions, institution context separation, and file controls appropriate to service functions. Report suspected misuse or incidents to the operator; handling and notification follow the circumstances and applicable legal obligations.

Policy changes are published with a clear version and effective date. Indonesian is the primary text and English is a translation. A new version does not itself demonstrate that a user has consented to a new processing purpose.