SEMASHUR Privacy Policy

Last updated 2026-06-29

This policy explains how SEMASHUR (Sekolah Menengah Sains Hulu Selangor) collects, uses, and protects your personal data when you use this site. We comply with Malaysia's Personal Data Protection Act 2010 (PDPA).

Data we collect

• Full name, email, username, role (student/parent/teacher) — when you register.
• Posts, comments, reactions you make on the site.
• IP address + sign-in timestamps (for security audit).
• Session cookies (for login) + language cookies (for BM/EN preference).

How we use it

• To run your account (login, profile, notifications).
• To publish the content you submit.
• Security audit + abuse prevention.
• To send verification + password reset emails when needed.

Third parties

• Supabase (data + image storage)
• Vercel (hosting)
• Resend (email delivery — optional)
• OpenAI / Groq / NVIDIA (chatbot — optional)

Your rights

• Access + export: request a copy of all your data at /api/me/export (sign-in required).
• Deletion: delete your account + all personal data at account settings.
• Correction: contact admin to update.

Contact

Any privacy inquiries: BEA5067@moe.edu.my