Privacy Policy

1. Introduction

Welcome to SemVR ("we," "our," or "us"). SemVR is a virtual reality educational platform designed to provide immersive learning experiences to schools, educators, and students across Southern Africa and beyond.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform accessible at https://semvr-platform.pages.dev (the "Platform"). Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Platform.

2. Information We Collect

2.1 Personal Information You Provide

We collect personal information that you voluntarily provide when you register for an account, make bookings, create or join classes, participate in VR sessions, or contact us for support.

For School Administrators:

School name, type, and contact information
Administrator name and email address
Encrypted password (using bcrypt hashing)

For Educators:

Name and email address
School affiliation and subjects taught
Encrypted password

For Students:

Name and email address
Grade level and class enrollment
Encrypted password

2.2 Educational and Usage Data

Session Participation: Join/departure times, session duration, interaction counts, engagement scores (0-100 scale)
Learning Assessment: Quiz responses, scores, learning progress indicators
Booking Information: VR experience selections, scheduled dates/times, participant numbers

2.3 Technical Information

We automatically collect: IP address, browser type, device information, access times, pages viewed, and performance data.

2.4 Cookies

We use essential cookies (authentication, session management), analytical cookies (usage tracking), and preference cookies (settings).

3. How We Use Your Information

Educational Services:

Provide VR experiences, track participation, generate educational reports, assess learning outcomes

Platform Operations:

Manage accounts, authenticate users, process bookings, enable class management, provide support

Communication:

Send booking confirmations, session reminders, platform updates, respond to inquiries

Analytics:

Analyze usage patterns, monitor performance, conduct research, develop new features

4. Legal Basis for Processing

For users in the EU, UK, and South Africa, our legal basis includes:

Contractual Necessity: To provide educational services
Legitimate Interests: Platform improvement, security, analytics
Legal Obligations: Compliance with POPIA, GDPR, educational regulations
Consent: Where required, which you may withdraw at privacy@semvr.com

5. How We Share Your Information

We do NOT sell, trade, or rent your personal information to third parties.

We may share information in these circumstances:

Within Schools: Administrators see school data; educators see class data; students see only their own data
Service Providers: Cloudflare (hosting), email services, analytics (all contractually bound to confidentiality)
Legal Requirements: Court orders, government requests, emergency situations
Business Transfers: Mergers or acquisitions (with notice provided)

6. Data Security

We implement comprehensive security measures to protect your information:

Technical Safeguards:

Bcrypt password hashing
HTTPS/TLS encryption
JWT authentication (24-hour expiration)
Database access controls

Infrastructure:

Cloudflare global edge network
DDoS protection
Automated backups
Geographic data replication

Important: While we implement strong security measures, no method of internet transmission is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain personal information only as long as necessary:

Active Accounts: Duration of account activity
Educational Records: Enrollment duration + 3 years
Session Data: 5 years for analytics
Inactive Accounts: 2 years (with 30-day deletion notice)
Financial Records: 7 years (tax requirements)

8. Children's Privacy

SemVR is designed for educational use by schools. Many users are minors (under 18).

Parental Consent: Schools obtain consent and register student accounts
COPPA Compliance: For US users under 13, schools act as parental agents
Educational Privacy: We comply with FERPA (US) and POPIA Chapter 5 (South Africa)

9. Your Data Protection Rights

You have the following rights regarding your personal information:

Right to Access

Request copies of your personal information

Right to Rectification

Correct inaccurate or incomplete data

Right to Erasure

Request deletion of your data

Right to Data Portability

Transfer your data to another service

Right to Object

Object to processing or marketing

Right to Withdraw Consent

Withdraw consent at any time

How to Exercise Your Rights:

Email: privacy@semvr.com
Subject: "Data Protection Request - [Your Name]"
We will respond within 30 days

12. Regional-Specific Provisions

🇿🇦 South African Users (POPIA)

Information Officer: info.officer@semvr.com

Lodge complaints with Information Regulator: inforeg@justice.gov.za | +27 10 023 5207

🇪🇺 European Users (GDPR)

Data Protection Officer: dpo@semvr.com
Right to lodge complaints with your local data protection authority

🇺🇸 California Users (CCPA)

Exercise CCPA rights: privacy@semvr.com
We do NOT sell personal information

18. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy:

SemVR Platform

Privacy Inquiries: privacy@semvr.com

General Support: support@semvr.com

Data Protection Officer: dpo@semvr.com

Website: https://semvr-platform.pages.dev

Response Time: Within 30 days

Table of Contents