Privacy Policy

This policy applies when you visit sigerciv.com, create an account, use a dashboard, submit content or contributions, and use related Sigerciv services. Sigerciv is operated by the CIV Scientific Group, Sains Data Study Program, Institut Teknologi Sumatera ("we").

For questions, data requests, or privacy complaints, contact sigerciv@sainsdataciv.com.

We process data only as needed for the features you use. Some account data is required to create and secure an account; profile and preference data can be completed or changed by you.

• Account data: email address, password in hashed form, roles, account status, and account creation or update times.
• Profile data you provide: name, username, telephone number, profile image, demographic information, address, and location. Payment information is processed only when you knowingly enter it in a relevant feature.
• Usage and security data: sign-in sessions, remembered devices, securely stored tokens, security events, and audit records needed to prevent misuse and protect service integrity.
• Contribution data: content, comments, claims or evidence, and village/organization management information that you submit. Some of this data can become public when you publish it or an authorized role publishes it.
• Minimized technical telemetry: performance metrics, error class, API context, status, latency, and a random correlation ID. Telemetry payloads do not contain email, name, token, cookie, request content, coordinates, or user/tenant identifiers.

We use data to provide accounts and requested features; display published public information; manage roles, security, and misuse prevention; respond to your requests; and improve service reliability through minimized telemetry.

Personalization and privacy choices in account settings are used only in line with your choices. We do not use telemetry to make automated decisions about access, roles, payments, or individual assessments.

We limit internal access by role and work need. Data may be accessed by authorized platform operators or stewards, and by infrastructure providers needed to operate the service under appropriate confidentiality and security obligations.

Do not include another person's personal data, sensitive data, or confidential documents in public content without a lawful basis and required permission. Destination data, business profiles, or contributions you choose to publish may be visible to other users and search engines.

We use access controls, password hashing, session cookies that cannot be read by JavaScript, and audit logging to help protect data. No internet service can be guaranteed entirely risk-free; protect your password and contact us promptly if you suspect misuse of your account.

We retain data for as long as needed for service, security, audit, dispute resolution, or legal obligations. Operational raw telemetry is targeted for deletion or rotation after 30 days. Account deletion may not remove records that must be retained for legal, audit, or transaction integrity.

You can review and update your profile and preferences in Account. You may request access, correction, export, restriction of processing, or deletion as applicable law permits by contacting us. We may ask to verify your identity before fulfilling a request to protect your account.

This policy follows the personal-data protection principles in Indonesian Law No. 27 of 2022 on Personal Data Protection and Government Regulation No. 71 of 2019 on Electronic Systems and Transactions. It does not reduce rights provided by applicable law.

We may update this policy when the service, our processing practices, or legal requirements change. We will update the date above and, for material changes, provide reasonable notice through the service or by email when required.