Privacy notice

1. Personal information we collect

• Identity: full name, batch year, program, AUF student ID.
• Contact: email address, optional mobile number.
• Profile content: optional photo, bio, work history, skills, location.
• Verification artifacts: registrar match logs and any documents you upload.
• Usage data: device, IP address, pages visited, and feature interactions.

2. Lawful bases

We process your data based on your consent when you create an account and accept this notice, and on our legitimate interestin operating a verified alumni network — specifically, confirming that members are genuine AUF graduates. Where you provide sensitive personal information (e.g. a government ID), processing is based on your explicit consent.

3. How we use your information

• To verify your status as an AUF alum.
• To power the directory, messaging, jobs, and mentorship features.
• To send transactional emails and an opt-in alumni digest.
• To keep the platform safe — detect abuse, scraping, and impersonation.
• To produce aggregated, non-identifying analytics for AUF leadership.

4. With whom we share

We share information with other verified alumni only to the extent allowed by your per-field privacy settings, and with verified employers only when you actively apply to one of their jobs. We use a small number of processors (hosting, email delivery, analytics) bound by data processing agreements. We do not sell your data.

5. Your rights under the DPA

• Right to be informed (this notice).
• Right to access your personal data.
• Right to correct inaccurate information.
• Right to erasure or blocking.
• Right to data portability.
• Right to object to processing.
• Right to withdraw consent at any time.
• Right to file a complaint with the NPC.

6. Retention

We retain your profile and account data for as long as your account is active. After you delete your account there is a 30-day grace period during which you can reactivate; after that, data is purged from production systems. Verification artifacts (ID photos, registrar logs) are purged 30 days after the verification decision is recorded, whichever comes first.

7. Security

All traffic is encrypted in transit (TLS 1.2+) and data at rest is encrypted on the backend. Sensitive personal information (SPI) such as government IDs is segregated from operational data, access-logged, and limited to vetted Alumni Relations staff.

8. Cookies

We use strictly necessary cookies to keep you signed in and to remember your privacy preferences, plus first-party analytics cookies to understand product usage. We do not use third-party advertising cookies.

9. Children

The AUF Alumni Network is intended for users 16 years of age and older. We do not knowingly collect data from anyone younger; if you believe we have, please contact our DPO so we can delete it.

10. International transfers

The platform is hosted on Convex Cloud, whose primary regions are outside the Philippines. Transfers are protected by the processor's contractual safeguards and by encryption in transit and at rest. By using the service you consent to this transfer.

11. Data Protection Officer

To exercise any right above or to ask a question about this notice, contact our Data Protection Officer at dpo@auf.edu.ph or by post: Office of the DPO, Angeles University Foundation, McArthur Highway, Angeles City 2009, Pampanga, Philippines.

12. Filing a complaint with the NPC

If you believe your privacy rights have been violated, you may lodge a complaint with the National Privacy Commission. We ask that you contact our DPO first so we can resolve the issue directly.

National Privacy Commission · 5th Floor, Philippine International Convention Center, Pasay City · complaints@privacy.gov.ph · privacy.gov.ph