Privacy Policy

What Data We Collect

We collect the following types of personal information:

• Basic profile information — your name, email address, batch year, and school affiliation.
• Yearbook data — names and batch years uploaded by your school to create alumni records.
• Identity documents — a government-issued ID photo, used only during the profile claim verification process.
• Selfie photo — a live photo of your face, used only to verify that the person claiming a profile matches the ID submitted.
• Optional profile details — bio, phone number, city, and profile photo that you choose to share.
• Donation records — amounts, payment methods, and transaction references for contributions you make to your school.

Why We Collect Your Data

We use your information for three main purposes:

• Alumni verification — to confirm that the person claiming an alumni profile is who they say they are, protecting you and your classmates from impersonation.
• Community building — so alumni can find and reconnect with batchmates through the directory, messaging, and announcements.
• Donations — to process contributions to your school and provide receipts and tracking.

How Long We Keep Your Data

Different types of data are kept for different periods:

Who Processes Your Data

• Getaka Labs — the company that builds and operates AlumniLink. We are the primary data controller.
• Your school — acts as a data controller for alumni records they upload (yearbook data, batch years).
• Google Cloud Vision API — processes ID photos and selfies for text extraction and face presence detection during the verification process. See the "How We Use AI" section below for details.
• Xendit / PayPal — payment processors for donation transactions. They receive only the minimum data required to process payments.

Data Subject Rights

Under the Philippine Data Privacy Act, you have the following rights:

• Right to Access — You can request a copy of all personal data we hold about you.
• Right to Correct — You can ask us to fix any inaccurate or incomplete information.
• Right to Erase — You can request deletion of your personal data, subject to legal retention requirements.
• Right to Object — You can object to the processing of your data for specific purposes.
• Right to Data Portability — You can request your data in a machine-readable format to transfer to another service.

How to Exercise Your Rights

To make a privacy request, contact us at:

We will respond to your request within 30 days, as required by law. We may ask for proof of identity before processing your request.

Philippine Data Privacy Act (RA 10173)

This privacy notice is prepared in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012, and its implementing rules and regulations.

If you believe your data privacy rights have been violated, you may file a complaint with the:

How We Use AI

AlumniLink uses artificial intelligence in two specific, limited ways:

1. Identity Verification

When you claim an alumni profile, we use Google Cloud Vision API to:

• Extract text from your government ID photo (name, ID number)
• Detect that a human face is present in your selfie

Your ID photo and selfie are sent to Google's servers only for processing — they are not stored by Google and are deleted from our servers within 30 days after verification.

2. Directory Search

We offer a natural language search feature in the alumni directory. When you type a search query, only your search text is processed — no alumni personal data is ever sent to any AI service for search processing.

Our AI Commitments