Student Data Privacy & Protection Policy
Last updated:
Academic records and student family profiles are sensitive assets entrusted to our custody. We commit to unwavering data integrity: zero personal data sales, multi-tenant isolation across foundations, and full compliance with applicable personal data protection laws.
- Zero Data Commercialization. We never sell, rent, or trade student, teacher, or guardian records to advertisers or third parties.
- Tenant Data Isolation. Our two-level architecture (Foundation → School Unit) ensures that student records, report cards, and tuition entries remain isolated from other institutions.
- Regulatory Alignment. Data models conform to national education data dictionaries (Dapodik, EMIS) and statutory privacy frameworks.
1. Information Managed by the System
We process institutional information input by school administrators solely for educational administration:
- A. Master Student Records: National student IDs (NISN), citizen IDs (NIK), health profiles, residential addresses, guardian contact and employment details, mutation logs, and graduation histories.
- B. Faculty & Staff Profiles: Teacher registration numbers (NUPTK), staff IDs, subject assignments, and authorization credentials.
- C. Academic & Financial Ledger Entries: Formative and summative assessment marks, report card narrative evaluations, timetable allocations, attendance records, and tuition cashier ledgers.
- D. System Audit Telemetry: Access timestamps, network identifiers, and immutable audit trails for data integrity accountability.
2. Operational Use of Information
All data processed within Gogoskola is utilized strictly for immediate educational workflows:
- Powering integrated student directories, class schedules, and daily presence tracking.
- Computing Kurikulum Merdeka report card gradebooks and rendering official printable booklets.
- Generating tuition invoices and recording treasurer receipt vouchers.
- Assembling compliance files for periodic education ministry submissions.
- We NEVER utilize student records for commercial profiling, targeted advertising, or public AI model training.
3. Dedicated Safeguards for Minors
Because the majority of data subjects are school-age minors:
- Student records are accessible solely to authenticated faculty members with verified teaching or administrative assignments.
- Guardian credentials provide access restricted specifically to their own children.
- Sensitive fields (such as national identity numbers, medical notes, and family income ranges) are protected behind strict role-based access controls (RBAC).
4. Institutional Control & Data Ownership
Educational institutions maintain complete ownership over their records:
- Full Data Portability: Institutions may export master directories, gradebooks, and financial ledgers into standard PDF and CSV formats at any time.
- Retention & Archival Handovers: Upon service termination, institutions are entitled to receive full database backups and demand clean data erasure from active production infrastructure.
5. Contacting Data Compliance
For data protection officer inquiries, customized privacy exhibits, or formal non-disclosure agreements, contact our team at contact@gogoskola.com.