Privacy Policy

This Privacy Policy explains how CoursePilot processes personal information when you use our hosted campus workspace. We process data in line with the Philippine Data Privacy Act of 2012 (RA 10173) and its IRR.

1. Personal data we process

Depending on how your campus uses the product, we may process:

• Admin and faculty account details (name, email, role, campus)
• Student identifiers and profile fields (student ID, name, email, program, year level)
• Enrollment, attendance, class record / grade entries, and related academic records
• Billing and subscription metadata for the institution
• Technical logs needed to secure and operate the service

2. Purposes

We process data to provide scheduling, class records, attendance, academic management, billing, support, and security. We do not sell personal data.

3. Roles

Your university is typically the personal information controller for student and faculty records it enters. APMEX / CoursePilot acts as a personal information processor / service provider hosting that workspace. See the Data Processing notice for processor obligations.

4. Retention

We retain workspace data while the subscription is active and for a limited period afterward so campuses can export or request deletion, unless a longer period is required by law or a written agreement.

5. Your rights

Data subjects may request access, correction, or deletion through their campus administrator or by contacting us. Campus admins should handle student/faculty requests for data held in their tenant.

6. Security

We use access controls, encrypted transport (HTTPS), and hashed passwords. No method of transmission or storage is perfectly secure; report suspected incidents promptly. For a fuller commercial summary — tenant isolation, backups, retention, export, and breach notification — see our Security & Reliability page.