Privacy Policy

Last updated: July 20, 2025

1. Introduction

This Privacy Policy describes how DKLY DataHUB ("we", "us", or "our") collects, uses, and shares information about you when you use our API services, website, and related services (the "Service").

We are committed to protecting your privacy and ensuring you understand how your information is used. By using our Service, you consent to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Username and email address
  • Password (encrypted and hashed)
  • Account creation date and last login information
  • Profile information (if provided)

2.2 API Usage Data

To provide and improve our service, we collect:

  • API request logs (timestamps, endpoints accessed, response codes)
  • Usage statistics and quota consumption
  • IP addresses for rate limiting and security purposes
  • API key activity and usage patterns

2.3 Security and Technical Information

For security and service optimization:

  • IP addresses and user agent strings
  • Login attempts and security events
  • Browser type and operating system information
  • Referrer information and access timestamps

2.4 Developer Plan Applications

For Developer Plan applications:

  • Project descriptions and GitHub repository information
  • Official website URLs and project documentation
  • Estimated API usage requirements
  • Communication related to application review

3. How We Use Your Information

We use the collected information for the following purposes:

Service Operation

  • • Providing API access and functionality
  • • Managing user accounts and authentication
  • • Monitoring usage and enforcing rate limits
  • • Generating usage analytics and reports

Security & Safety

  • • Detecting and preventing abuse
  • • Protecting against security threats
  • • Investigating suspicious activities
  • • Maintaining system integrity

Improvement

  • • Analyzing usage patterns
  • • Improving service performance
  • • Developing new features
  • • Optimizing user experience

Communication

  • • Responding to support requests
  • • Sending important service updates
  • • Processing Developer Plan applications
  • • Notifying about policy changes

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties.

We may share information only in the following circumstances:

  • Legal Requirements: When required by law, regulation, or legal process
  • Security: To protect our rights, users, or the public from harm or illegal activities
  • Service Providers: With trusted partners who help us operate our service (under strict confidentiality agreements)
  • Business Transfer: In connection with a merger, acquisition, or sale of assets
  • Consent: When you explicitly consent to sharing specific information

5. Data Security

We implement appropriate technical and organizational measures to protect your information:

Technical Safeguards

  • • Encryption in transit and at rest
  • • Secure password hashing
  • • Regular security updates
  • • Access controls and monitoring

Operational Safeguards

  • • Limited access to personal data
  • • Employee confidentiality agreements
  • • Incident response procedures
  • • Regular security assessments

6. Data Retention

We retain information for the following periods:

Account Information: Until account deletion or 3 years of inactivity
API Usage Logs: 12 months for analytics and security purposes
Security Logs: 24 months for security and fraud prevention

7. Your Rights and Choices

You have the following rights regarding your personal information:

Access & Control

  • • View your account information
  • • Update your profile data
  • • Download your data
  • • Delete your account

Communication

  • • Opt out of non-essential emails
  • • Update contact preferences
  • • Request information correction
  • • Ask questions about your data

8. Cookies and Tracking

We use essential cookies and similar technologies to provide and secure our service. We do not use tracking cookies for advertising purposes. Session cookies are used for authentication and are deleted when you log out or close your browser.

9. Third-Party Services

Our service may contain links to third-party websites or services. This Privacy Policy does not apply to third-party services. We encourage you to read the privacy policies of any third-party services you use.

10. Prohibited Registration Practices

Strictly Prohibited Activities

  • Fake Registration: Creating false or fraudulent event registrations
  • Multiple Account Registration: Registering for the same event using multiple accounts
  • Identity Misrepresentation: Using false personal information or impersonating others
  • Bot/Automated Registration: Using automated tools or scripts for registration
  • Slot Hoarding: Registering for events without genuine intention to attend
  • Registration Selling/Trading: Transferring registration slots to unauthorized persons

Consequences: Any form of registration abuse will result in immediate account suspension or permanent ban, and revocation of API KEY on the platform.

11. Important Safety Notice

Your safety and well-being are your personal responsibility. Please read and understand these safety requirements:

  • Personal Safety: You are responsible for your own safety and well-being during all events
  • Emergency Contacts: You must ensure your emergency contact information is correct and updated at all times
  • Personal Belongings: We are not liable for any lost, stolen, or damaged personal belongings
  • Health Conditions: You must disclose any relevant health conditions that may affect your participation
  • Insurance: You are responsible for your own health and travel insurance coverage

12. Account Sharing Prohibited

  • No Account Sharing: Users are strictly prohibited from sharing their accounts with others
  • Password Security: Users must not share their passwords with anyone
  • Personal Responsibility: Each account must be used only by the registered user
  • Violation Consequences: Account sharing will result in immediate account suspension or termination

13. Platform Monitoring and Enforcement

  • Continuous Monitoring: We actively monitor all platform activities for compliance violations
  • Automated Detection: Advanced systems detect suspicious patterns, fake registrations, and fraudulent activities
  • Staff Verification: Event staff are trained to identify and report violations during events
  • Community Reporting: Users can report violations through our secure reporting system
  • Investigation Process: All reported violations undergo thorough investigation with evidence collection
  • Appeal Process: Fair appeal procedures available for contested violations (serious fraud excluded)
  • Documentation: All violations and actions are thoroughly documented for accountability

14. Google Services Usage

By using our website and services, you acknowledge and consent to the use of the following Google services:

Google reCAPTCHA v3/v2

Purpose & Necessity: Absolutely essential for maintaining platform security and integrity. Protects against automated spam bots, fake event registrations, malicious attacks, and ensures fair access to limited event slots for genuine users. Without this protection, our event registration system would be compromised by automated abuse, preventing real students from participating.

User Consent: By using our website, you agree to reCAPTCHA verification processes that analyze your behavior patterns to distinguish human users from bots.

Google Analytics

Purpose & Necessity: Essential for understanding user needs, improving website functionality, and measuring the effectiveness of our sustainability initiatives. Helps us identify which environmental topics resonate most with students, optimize event promotion strategies, and ensure our platform serves the community effectively. Data-driven insights allow us to create better content and events.

User Consent: You consent to anonymized tracking of your website usage patterns to help us improve services and measure our environmental impact outreach success.

Google Tag Manager

Purpose & Necessity: Critical for efficient website management and marketing optimization. Enables us to track event promotion effectiveness, measure user engagement with sustainability content, and optimize our digital outreach without constant technical updates. This efficiency allows our student team to focus more on organizing impactful environmental events rather than technical maintenance.

User Consent: You agree to the deployment of managed tracking tags and marketing tools that help us measure and improve our sustainability program effectiveness.

Essential for Our Environmental Mission

These Google services are not optional luxuries but essential tools that enable APU Sustainable Future Fusion to operate securely, reach more students with environmental awareness, and maximize the positive impact of our sustainability initiatives. They directly support our ability to create meaningful environmental change.

Important: These services are subject to Google's Terms of Service and Privacy Policy. By using our website, you also agree to Google's data processing practices as outlined in their privacy policies.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.

16. Third-Party Services Acknowledgments

We acknowledge and thank the following third-party services used in our project:

Google reCAPTCHA v3/v2

Anti-spam and bot protection service

https://www.google.com/recaptcha/

Google Analytics

Website analytics and performance tracking

https://analytics.google.com/

Google Tag Manager

Tag management and tracking code deployment

https://tagmanager.google.com/

Tailwind CSS

CSS framework for responsive design and styling

https://tailwindcss.com/

Cheervision IP Database API

IP geolocation and information services

https://www.cheervision.co/ipinfo/

Malaysia GOV

Government open data and exchange rates

https://data.gov.my/

We appreciate these services for enabling us to create a better user experience, security, and functionality for our platform.

17. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us through our contact form.

We will respond to your privacy-related inquiries within 30 days.