Privacy Policy

Old Laboratorians Association (OLsA) Privacy Policy

Effective Date: April 30, 2026
Website: https://beta.dev.laboratorians.net

Welcome to the Old Laboratorians Association (OLsA) platform. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our mobile or web applications, and interact with our integrated services.

1. Information We Collect

To provide a comprehensive alumni network and seamless user experience, we collect the following types of information:

Personal Identity & Contact Data: Name, email address, physical address, phone number, and date of birth.
Professional & Academic Data: Job history, current employment details, CVs/resumes, and school batch/graduation details.
Media: Personal profile photos and event photographs.
Authentication & Biometric Data: Device registration identifiers and cryptographic tokens associated with your device's native biometric authentication (e.g., Fingerprint, FaceID).
Note: Raw biometric data is stored securely on your local device and is never transmitted to or stored on OLsA servers.
Financial Data: Transaction history for donations, event registrations, or membership fees. All actual payment processing is handled securely via SSLCommerz;
Note: we do not store your credit card or full financial account details on our servers.
Digital Signatures: Cryptographic data, timestamps, and IP addresses used when you sign digital PDF forms within our platform.
Facial Recognition Data: If you explicitly opt-in via Profile Settings, your profile photo may be processed to generate a face descriptor used solely for event check-in attendance verification. This constitutes biometric data under applicable laws (PDPA, GDPR). Raw face images are not permanently stored; only the computed descriptor is retained, and solely for the opted-in purpose.

2. Third-Party Integrations & OAuth2

We use OAuth2 for secure Single Sign-On (SSO) and continuous integration. By linking these accounts, you authorize us to access specific information:

Google, Facebook, and LinkedIn: When you register or log in using these services, we collect your basic profile information (name, email, profile picture) to verify your identity and populate your OLsA profile. LinkedIn integration may also be used to synchronize your professional job history.
WhatsApp: We may collect and use your registered phone number to send transactional messages, event updates, and OTPs via the WhatsApp Business API.
Artificial Intelligence (OpenAI & Google Gemini): We utilize AI models to enhance platform features such as resume parsing, content generation for the e-Magazine, or advanced search. Data processed by these services is strictly scoped to the task, and we do not permit these third parties to use OLsA members' personal data to train their foundational models.

3. Special Clause: Google People API & Google Contacts

To help members easily network and maintain up-to-date contact lists, OLsA integrates with the Google People API.

Synchronization: If you explicitly opt-in, our platform will synchronize your fellow alumni directory connections directly with your Google Contacts.
Data Accessed: We request read and write access to your Google Contacts strictly to add, update, or remove OLsA member contact cards (Name, Phone, Email, OLsA Batch) within your Google account.
Google API Services User Data Policy: OLsA's use and transfer to any other app of information received from Google APIs will adhere strictly to the Google API Services User Data Policy, including the Limited Use requirements. We will never sell, broker, or use your Google Contacts data for targeted advertising.

4. How We Use Your Information

We process your data for the following purposes:

Account Management: To create, manage, and secure your alumni profile.
Networking & Community: To display your profile, job history, and photo in the alumni directory and facilitate mentorship and job opportunities via the Resume Bank.
Secure Document Signing: To facilitate legally binding digital signatures on PDF forms (e.g., membership approval forms, election ballots) and maintain an audit trail.
Payments: To process membership fees and fundraisers via the SSLCommerz payment gateway.
Communication: To send you administrative notices, newsletters, and community updates via email or WhatsApp.

5. Member Profile Privacy & Default Public Exposure

OLsA's alumni directory is visible only to verified, logged-in OLsA members. To facilitate effective networking within the alumni community, certain profile fields are public to other members by default. You may change the visibility of any field at any time via Account Settings > Privacy Settings.

Fields that are public by default:

Full Name
Email Address
Phone / Cell Number
School Batch
Blood Group
Current Occupation
Designation / Job Title
Organization / Company
Office Address
Present Country
Permanent Country

All other profile fields (e.g., date of birth, emergency contact details, personal addresses, LinkedIn profile, special achievements) are private by default and are not shown to other members unless you explicitly set them to public. You can also use the "Reset to recommended defaults" option in Privacy Settings to restore the above default configuration at any time.

6. How We Share Your Information

We do not sell or rent your personal data to third parties. We only share information in the following circumstances:

With Other Members: Your profile data, subject to your privacy settings, is visible to other verified OLsA members to facilitate networking. Fields you mark as private are never shown in the alumni directory or member-facing views.
With Service Providers: We share necessary data with trusted third-party vendors (SSLCommerz for payments, WhatsApp for messaging, OpenAI/Gemini for processing platform features) strictly under data processing agreements.
Legal Compliance: We may disclose information if required by law, subpoena, or other legal processes, or to protect the rights, property, and safety of OLsA and its members.

7. Data Security

We implement robust, industry-standard security measures to protect your data, including:

Encryption: Data at rest and in transit is secured using modern cryptographic protocols (TLS/SSL).
Authentication: Multi-factor authentication (MFA) and biometric device registration secure your account from unauthorized access.
Digital Signatures: Cryptographic hashes ensure that any PDF documents signed on the platform cannot be tampered with.

8. Data Retention

We retain personal data for as long as needed to fulfill operational, legal, accounting, and alumni governance requirements. Certain data related to financial transactions or digitally signed PDFs may be retained beyond account deletion for legal compliance and auditing purposes.

9. Your Privacy Rights & Controls

As a member of OLsA, you have the right to:

Access and Update: Review and edit your personal data, job history, and CV at any time via your profile dashboard.
Control Profile Visibility: Use the Privacy Settings page to individually toggle which profile fields are visible to other members, or reset to the recommended defaults at any time.
Revoke OAuth Access: Disconnect your Google, Facebook, or LinkedIn OAuth2 connections at any time. Revoking Google access will instantly stop any future synchronization with the Google People API.
Withdraw Biometric Consent: Opt out of facial recognition at any time via Profile Settings. Your indexed face descriptor will be deleted upon withdrawal.
Data Deletion: Request the deletion of your account and associated personal data by contacting the Executive Committee.

10. Cookies and Analytics

The platform uses cookies and session storage for login/session continuity and platform functionality. We may collect anonymized usage metadata to improve platform features.

11. Children's Privacy

This platform is intended for alumni and authorized users. It is not intended for children under applicable age limits.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our platform features (such as adding new integrations) or legal requirements. We will notify you of any material changes via email or a prominent notice on our website.

13. Contact Us

If you have questions, concerns, or requests regarding your data and privacy, please contact the Executive Committee at:

Old Laboratorians Association (OLsA)
Government Laboratory High School
Dhaka, Bangladesh
Email: info@laboratorians.net
Website: https://beta.dev.laboratorians.net