Privacy Policy

1. Information We Collect

1.1 Automatically Collected Information

When you visit our website or use our software, we may automatically collect certain information:

• Website Analytics: Basic website usage statistics (page views, browser type, referral sources)
• Technical Data: IP address (anonymized), browser version, operating system, device information
• Usage Data: Software feature usage patterns, crash reports, performance metrics
• Error Logs: Technical error reports to improve software stability

1.2 Voluntarily Provided Information

We only collect information you voluntarily provide:

• Contact Information: Name, email address when you contact us for support
• Feedback: Bug reports, feature requests, and user feedback
• Community Content: Contributions to our GitHub repository, forum posts, or community discussions
• Donation Information: Payment details if you choose to support our project

1.3 Information We Do Not Collect

SSOEngine does NOT collect:

• Personal Identifiers: Social security numbers, government IDs, or similar sensitive identifiers
• Financial Information: Credit card numbers, bank account details (except through secure third-party payment processors)
• Biometric Data: Fingerprints, facial recognition data, or similar biometric information
• Health Information: Medical records or health-related data
• Personal Communications: Private emails, messages, or conversations

2. How We Use Your Information

2.1 Primary Purposes

We use your information for the following purposes:

• Service Improvement: To analyze usage patterns and improve our software and website
• Technical Support: To provide customer support and resolve technical issues
• Development: To prioritize features, fix bugs, and guide product development
• Communication: To respond to inquiries and send important updates
• Security: To detect and prevent malicious activities and protect our services

2.2 Legal Basis for Processing

Our legal basis for processing your information includes:

• Legitimate Interest: To improve our services and ensure security
• Consent: When you voluntarily provide information for specific purposes
• Legal Obligation: To comply with applicable laws and regulations

3. Information Sharing and Disclosure

3.1 We Do Not Sell Your Information

SSOEngine does NOT sell, rent, or trade your personal information to third parties for marketing purposes.

3.2 When We May Share Information

We may share your information only in the following limited circumstances:

• Service Providers: With trusted third-party service providers necessary to operate our services (e.g., GitHub for code hosting, payment processors for donations)
• Legal Requirements: When required by law, court order, or government regulation
• Safety and Security: To protect our rights, property, or safety, or that of our users
• Business Transfers: In connection with mergers, acquisitions, or sales of assets (with notice)

3.3 Public Information

The following information may be publicly available:

• GitHub Contributions: Code contributions, issues, and pull requests you make to our repository
• Public Comments: Comments you post on our website or public forums
• Community Activity: Participation in public discussions and community events

4. Data Security and Retention

4.1 Security Measures

We implement appropriate security measures to protect your information:

• Encryption: Data transmission is encrypted using industry-standard protocols
• Access Controls: Limited access to personal information on a need-to-know basis
• Regular Audits: Periodic security reviews and vulnerability assessments
• Secure Infrastructure: Use of reputable hosting providers and security services

4.2 Data Retention

We retain your information only as long as necessary:

• Website Analytics: Retained for 24 months in anonymized form
• Support Communications: Retained for 3 years or until resolved
• GitHub Contributions: Retained indefinitely as part of project history
• Error Reports: Retained for 12 months for analysis purposes

5. Your Rights and Choices

5.1 Access and Correction

You have the right to:

• Access: Request a copy of your personal information we hold
• Correct: Request correction of inaccurate personal information
• Delete: Request deletion of your personal information (where legally permissible)
• Portability: Request transfer of your information to another service

5.2 Marketing Communications

We respect your communication preferences:

• No Spam: We do not send unsolicited marketing emails
• Opt-Out: You can opt out of any communications at any time
• Transactional Only: We only send emails necessary for service delivery

5.3 Cookies and Tracking

Our website may use cookies and similar technologies:

• Essential Cookies: Required for basic website functionality
• Analytics Cookies: Help us understand how our website is used
• Preference Cookies: Remember your settings and preferences
• Control: You can control cookies through your browser settings

6. Children's Privacy

SSOEngine is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete such information immediately.

7. International Data Transfers

SSOEngine may store and process your information in countries other than your own. By using our services, you consent to the transfer of your information to these countries, which may have different data protection laws than your country.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Website Notice: Posting the updated policy on our website
• Software Notification: In-app notifications about significant changes
• Email Communication: For major privacy practice changes (if you've provided contact information)

Your continued use of our services after any changes constitutes acceptance of the updated policy.

9. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us:

10. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of Indonesia, without regard to its conflict of law principles. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts of Indonesia.