Privacy Policy
Last Updated: October 31, 2026 • Compliant with Google API Services User Data Policy and Republic Act No. 10173 (Data Privacy Act of 2012)
1 Introduction & Scope
Nexus Capstone Management System (nexuscapstone.me) is operated by the Dr. Filemon C. Aguilar Memorial College of Las Piñas (DFCAMCLP) – IT Campus ("we", "our", or "the College").
We are committed to upholding your fundamental right to privacy in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and global standards including the Google API Services User Data Policy. This Privacy Policy details how we collect, process, store, protect, and disclose your personal and academic information when you use our platform.
2 Information We Collect
We collect information strictly necessary to fulfill academic, capstone management, and administrative purposes:
- Identity Information: First Name, Last Name, Username.
- Academic & Institutional Identifiers: Institutional School ID (Student ID or Faculty ID), Academic Department (Computer Engineering, Information Systems), Section.
- Contact Coordinates: Email address, mobile telephone number.
- Security Credentials: Passwords, which are cryptographically hashed using one-way Bcrypt before database storage (we never store plain text passwords).
When you sign in using your Google Account, we request only non-sensitive standard authentication scopes (openid, email, profile):
- Primary Email Address: Used to verify your identity and match existing institutional records.
- Full Name & Given Name: Used to populate your academic profile display name.
- Profile Avatar Picture URL: Used to render your student/adviser avatar within capstone teams and comments.
- Google User ID: A unique numeric identifier from Google used to associate your Google sign-in with your Nexus account.
3 How We Use Your Information
Your data is utilized solely for legitimate educational and institutional activities:
- Authentication & Role-Based Access: Establishing your authenticated session and routing you to the appropriate dashboard (Student, Adviser, or Administrator).
- Capstone Project Workflows: Group formation, thesis proposal evaluation, milestone tracking, chapter manuscript submissions, rubric grading, and consultation scheduling.
- Academic Accountability: Recording audit logs of milestone approvals, document reviews, and defense panel comments.
- System Communications: Sending automated email and in-app notifications regarding milestone status changes, adviser remarks, and consultation schedules.
4 Google API Services User Data Policy Compliance (Limited Use Disclosure)
Nexus Capstone Portal's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- No Advertising: We never use or transfer Google user data for serving advertisements, personalized ads, or re-targeting.
- No Data Brokering: We never sell, lease, monetize, or trade user data or Google user information to third-party data brokers, marketers, or external entities.
- No AI Model Training: Google user data is never used to train generalized artificial intelligence, machine learning, or large language models.
- Minimal Access: Human access to Google user data is strictly prohibited, except where necessary to provide technical support requested by the user, comply with applicable law, or investigate security breaches.
5 Data Storage, Retention & Security Measures
We apply multi-layered physical, administrative, and technical safeguards to protect your personal information:
- Encryption in Transit: All HTTP traffic is secured using modern TLS 1.3 / HTTPS encryption backed by automated SSL certificates.
- Encryption at Rest: Sensitive credentials (passwords) are irreversibly hashed using Bcrypt with cryptographically random salts.
- Strict Access Control: Portal databases are isolated and accessible only through authenticated, parameterized queries (PDO) preventing SQL injection and data leakage.
- Retention Period: Academic records, capstone deliverables, and account credentials are retained for the duration of the student's enrollment and required institutional archiving standards (typically 5 academic years post-graduation) as mandated by the Commission on Higher Education (CHED).
6 Your Rights & Data Deletion Requests
Under Republic Act No. 10173 and international privacy standards, you have the following rights:
- Right to Access & Rectify: You can view and update your personal details at any time via your Profile page.
- Right to Erasure / Account Deletion: You have the right to request deletion of your account and personal records. Academic submissions tied to graded milestones may remain archived in anonymized form as required by institutional graduation records.
- Revoking Google Access: You can revoke Nexus's authorization to access your Google account at any time by visiting your Google Account Security Permissions page.
7 Contact Us & Data Protection Officer
For questions, clarifications, feedback, or complaints regarding this Privacy Policy or our data handling practices, please contact our institutional administration: