SMART-Q

Privacy Policy

Application Name: SMART-Q • Last Updated: September 8, 2026

---

Welcome to SMART-Q (Smart Quality Assurance), accessible at https://mutu.uinsaizu.ac.id. SMART-Q is the official internal quality assurance and academic audit management platform developed and operated by the Quality Assurance Agency (Lembaga Penjaminan Mutu / LPM) at Universitas Islam Negeri (UIN) Prof. K.H. Saifuddin Zuhri Purwokerto, Indonesia.

We are deeply committed to protecting the privacy and security of all users. This Privacy Policy outlines how our application collects, uses, processes, stores, and protects your information, including Google user data obtained via Google OAuth 2.0 and Google Drive APIs.

1. Information We Collect

When you use SMART-Q, we may collect and process the following categories of information:

• Google Account Information (OAuth 2.0): When you sign in using your institutional Google Workspace account, we receive your basic profile data including your Full Name, Email Address, Profile Picture URL, and unique Google User ID.
• Internal Academic & Audit Data: Employee ID / NIP, academic department / study program affiliation, faculty data, and audit responses.
• Quality Assurance Documents & Evidence: Files uploaded as supporting evidence for internal quality standards (e.g., decrees, certificates, activity reports, spreadsheets).
• Technical & Audit Logs: Access logs, IP addresses, browser user-agent, and timestamps recorded strictly for security, session verification, and audit tracking.

2. How We Use Google User Data

We access and use Google user data exclusively for the following specific institutional purposes:

• User Authentication: To authenticate faculty members, auditors, and auditees using Single Sign-On (Google OAuth 2.0).
• Institutional Cloud Storage (Google Drive API): To organize, archive, and retrieve institutional audit evidence documents in structured folders designated for quality assurance accreditation.

3. Limited Use and Sharing of Information

We adhere to strict data minimization and confidentiality standards:

• We NEVER sell, rent, lease, or monetize your personal information or Google user data to any third party.
• We DO NOT use Google user data for advertising, marketing purposes, or targeted advertisements.
• We DO NOT use or transfer Google user data to develop, train, or improve generalized Artificial Intelligence (AI) or Machine Learning (ML) models.
• Data is only accessed by authorized university quality assurance personnel strictly for official academic accreditation and audit procedures.

4. Data Storage and Security

We implement comprehensive administrative, physical, and technical safeguards to protect your personal data:

• All data transmitted between your browser, our servers, and Google APIs is encrypted using industry-standard Transport Layer Security (TLS 1.2 / TLS 1.3 over HTTPS).
• API credentials and refresh tokens are securely encrypted and stored on isolated server-side environment variables and are never exposed to client-side code or public repositories.
• Multi-layer access controls, role-based permissions (RBAC), and continuous audit logging are enforced across the platform.

5. Data Retention and Account Deletion

We retain user information only for as long as necessary to fulfill the academic quality assurance obligations of the university:

• Revoking Access: You can revoke SMART-Q's access to your Google Account at any time via your Google Account Security Settings.
• Data Deletion Requests: Users may request the deletion of their profile, uploaded files, or personal data by contacting the LPM administrator at [email protected]. Deletion requests will be processed within 14 business days, subject to institutional academic record retention regulations.

6. Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect enhancements in our system or changes in legal regulations. Any updates will be published on this page with a revised "Last Updated" date.

7. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: