Privacy Policy

Last Updated: 7/10/2024

At Universiti Malaya Confession ("the Platform"), we are committed to protecting your privacy and ensuring that your personal information is handled securely. This Privacy Policy explains what information we collect, how we use it, and how you can control your information.

By accessing or using the Platform, you agree to the terms of this Privacy Policy. If you do not agree to these terms, please do not use our services.

1. Information We Collect

We collect minimal information to verify user authenticity, ensure the safety of the platform, and provide our services effectively.

a. Information You Provide:

• Email Address: When you register using our OAuth services (Google), we collect your email address. We use this solely for verification purposes to ensure that you're a legitimate user and not a bot.

b. Automatically Collected Information:

• IP Address: We automatically collect your IP address when you use the Platform. This is used for security evaluations, monitoring, and blocking malicious activity. We do not store IP addresses indefinitely and delete them after they have served their purpose.

c. Content Data:

• Messages/Confessions: When you submit a message or confession through the Platform, we store and process the content of the message for moderation and analysis purposes. Moderated messages may remain in our database for 30 to 90 days, after which they are deleted unless flagged for containing harmful content.

2. How We Use Your Information

The information we collect is used for the following purposes:

• Verification: We use your email address to confirm your identity and ensure that you are a legitimate user, not a bot.
• Content Moderation: All submitted content is moderated using an AI system to ensure it complies with our content guidelines. Messages that violate our policies (e.g., hate speech, harassment) may result in account bans.
• Security: Your IP address is collected for security purposes, such as detecting malicious activity and preventing abuse of the Platform.
• Improvement: We analyze user submissions and interactions to improve our services and maintain the safety of the Platform.

3. How We Store and Protect Your Information

We take security seriously and implement industry-standard measures to protect your personal information. These include:

• Encryption: We use encryption methods to secure data transmitted between your browser and our servers.
• Limited Data Storage: We only store your personal data (such as IP addresses and content) for the necessary duration (30-90 days for messages). Email addresses used for verification are retained for as long as your account remains active.
• Access Control: Only authorized personnel have access to the Platform's backend where data is stored, ensuring that your information is handled securely.

4. Third-Party Services

We use third-party services for authentication and content moderation purposes. These third-party services have their own privacy policies, and you are encouraged to review them:

• Google Privacy Policy
• Replicate Privacy Policy

We do not share your personal information with third parties for marketing or other purposes without your explicit consent.

5. Data Retention

We retain personal information only for as long as necessary to provide our services or as required by law. Specifically:

• Email: Retained as long as your account is active.
• IP Address: Retained temporarily for security purposes and deleted after its purpose has been fulfilled.
• Messages: Retained for 30-90 days or longer if flagged for harmful content, after which they are permanently deleted.

6. Cookies

We do not use cookies for tracking purposes. However, certain third-party services that we rely on (such as Google OAuth and Replicate AI) may use cookies to facilitate authentication and improve their services. You can adjust your browser settings to control cookies.

7. Your Data Rights

You have the following rights regarding your personal data:

• Access: You can request access to the personal information we hold about you.
• Deletion: You can request that your account and all associated data (email, messages, etc.) be deleted from our system. Please note that once your data is deleted, it cannot be recovered.
• Correction: You can request corrections to any inaccurate information we hold about you.

To exercise any of these rights, please contact us at [email protected].

8. Children’s Privacy

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected such information, please contact us so that we can delete it.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we make changes, we will update the "Last Updated" date at the top of this page.

It is your responsibility to review this Privacy Policy periodically. Your continued use of the Platform following the posting of any changes to this Privacy Policy constitutes your acceptance of those changes.

10. Governing Law

This Privacy Policy is governed by the laws of the State of California, United States. By using the Platform, you agree that any disputes arising from this Privacy Policy will be resolved in accordance with California law.

11. Contact Us

If you have any questions or concerns about this Privacy Policy, or if you wish to exercise your rights regarding your personal data, please contact us at:

Email: [email protected]