Eduprima
Bahasa Indonesia

Privacy Policy

Last updated: 2 October 2026

Eduprima ("we", "us") operates the website eduprima.id and the Eduprima platform, including Eduprima Diary, a web application at diary.eduprima.id that schools, institutions and education businesses use to manage admissions, classes, billing and conversations with learners.

Our company registration details are given in writing on request.

This policy explains what personal data we handle, why we handle it, who we share it with and how to ask for it to be corrected or deleted.

1. Who this policy covers

  • Visitors to eduprima.id.
  • Staff of an education business who sign in to Eduprima Diary.
  • Learners, guardians and other people who exchange messages with an education business that uses Eduprima Diary.

2. Our role

An education business that uses Eduprima Diary (a "Client") decides why and how the personal data of its learners is used. The Client is the controller of that data. We process it on the Client’s behalf and on its instructions, as a processor.

For the data of website visitors and of staff accounts, we are the controller.

3. Data we receive from Meta

When a Client connects its WhatsApp Business account to Eduprima Diary through Meta’s Embedded Signup, we receive the following data from the WhatsApp Business Platform:

  • The Client’s WhatsApp Business account identifier and name, its business phone numbers, their display names, quality ratings and messaging limits.
  • The Client’s message templates and their approval status.
  • Messages sent and received through the Client’s business phone numbers: text, images, documents and other media, the time of each message and its delivery status.
  • The phone number and WhatsApp profile name of each person who messages the Client.
  • Where a Client connects a number that is also used in the WhatsApp Business app, the messages sent from that app and the recent chat history that the Client chooses to share during sign-up.

4. Other data we handle

  • Staff accounts: name, email address, role and sign-in records.
  • Operational records the Client enters: learner names, class schedules, attendance and invoices.
  • Messages from other channels a Client connects, such as Instagram direct messages and email.
  • Website visits: technical logs such as IP address, browser type and pages requested.
  • Messages you send us by email or phone.

5. How we use the data

  • To show each conversation to the authorised staff of the Client it belongs to.
  • To send the replies and template messages that the Client’s staff write.
  • To keep the history of each conversation so that staff can continue it later.
  • To let the Client create and manage its message templates and business phone numbers.
  • To keep the service secure, find faults and prevent misuse.
  • To meet our legal obligations.

We do not sell personal data. We do not use data received from Meta for advertising, and we do not use it to build profiles for our own purposes.

6. Who we share data with

  • Service providers that host and run the platform for us: Vercel (application hosting), Supabase (database), Cloudflare (file storage and network) and Resend (email delivery). They act on our instructions and are bound by confidentiality.
  • Meta, because messages sent through WhatsApp necessarily pass through the WhatsApp Business Platform.
  • Public authorities, where the law requires it.

We do not share one Client’s data with another Client.

7. How long we keep data

We keep a Client’s data for as long as the Client uses Eduprima Diary. When a Client disconnects its WhatsApp Business account or asks us to delete its data, we delete it within 30 days, except for records that the law requires us to keep, such as invoices.

8. Security

  • Data is encrypted in transit.
  • Access credentials for a Client’s WhatsApp Business account are stored encrypted.
  • Staff access is restricted by role, and sign-ins are recorded.

9. Your rights

Under Indonesian Law No. 27 of 2022 on Personal Data Protection you may ask to see the personal data held about you, to have it corrected and to have it deleted.

If you are a learner or guardian, the education business you messaged is the controller of your data. You can ask that business directly, or write to us and we will pass your request to the business and help it respond.

The steps for a deletion request are on our Data Deletion page.

10. Learners under 18

Many learners are under 18. The Client is responsible for obtaining the consent of a parent or guardian where the law requires it. We process a learner’s data only as the Client instructs.

11. Where data is stored

Our service providers may store data on servers outside Indonesia. We use providers that apply recognised security safeguards, and we remain responsible for the data we process.

12. Changes to this policy

When we change this policy we publish the new version on this page and update the date above.

13. Contact

Questions and requests about privacy can be sent to edu@eduprima.id, or by post to Eduprima, Permata Regency D/37, Jl. H. Kelik, RT.1/RW.6, Srengseng, Kembangan, Jakarta Barat 11630, Indonesia.