Privacy Policy
Last Updated: October 27, 2026
The Christian Education Council (MPK) of Indonesia respects your privacy. This page explains what data we collect through this website, why, who processes it, how long it is kept, and your rights.
1Data controller
Majelis Pendidikan Kristen (MPK) Indonesia, Grand Slipi Tower 6th Floor Unit E-F, Jl. Letjen S. Parman Kav. 22-24, Jakarta 11480. Email: [email protected].
2Data we collect
- Chatbot ("AI Assistant" tab): the messages you type. We do not ask for your identity. Messages containing sensitive data (such as national ID numbers, passwords or bank details) are refused and not forwarded.
- Chat with Admin (conversation with MPK staff): name, email, WhatsApp number, institution/school, the conversation, the page where it started, language, a summary of browser/device type, and your IP address in hashed form to prevent abuse.
- Cookies: language preference, cookie consent, and a Chat with Admin session cookie that keeps your conversation connected (valid for 30 days, not readable by page scripts).
3Purposes and legal basis
To answer your question and contact you about it (basis: your consent on the Chat with Admin form), and to protect the service against spam and abuse (basis: legitimate interest). Data is not used for marketing without separate consent, and we do not sell personal data.
4Third parties that process data
- OpenRouter and its AI model providers: Chatbot messages only. These services may be located outside Indonesia and may retain conversation content; please do not enter personal data in the Chatbot.
- Cloudflare: network security and anti-bot verification (Turnstile) on the Chat with Admin form.
- CERIA, MPK's internal system hosted on Microsoft Azure: stores Chat with Admin conversations. Data centres may be located outside Indonesia.
5Transfers outside Indonesia
Chatbot messages and Chat with Admin data may be processed outside Indonesia by the providers above. Chat with Admin data is not sent to AI providers.
6Retention
Chat with Admin conversations are automatically anonymised 180 days after they are closed: name, contact details and message text are removed, leaving only statistics (dates, status, number of messages). Technical security records are kept as long as needed to prevent abuse.
7Your rights
You may request access to, correction of, or deletion/anonymisation of your data, and withdraw your consent, by writing to [email protected]. Withdrawing consent does not affect processing carried out before.
8Security
Access is limited to authorised staff, connections are encrypted (HTTPS), and staff actions are logged. In the event of a personal data breach, we will notify you as required by Indonesian Law No. 27 of 2022 on Personal Data Protection.
9Children
The chat services are intended for users aged 18 or older. Users under 18 must be accompanied by a parent or guardian.
10Changes
Changes to this policy are published on this page together with the date of the update.