Effective 3 October 2026
This policy explains what personal data Verse Class (class.verseconsulting.id, and the Verse Class mobile app) collects, why, who sees it and what you can ask us to do with it. Verse Class is run by PT. Data Optima Konsultan, trading as Verse Consulting, which is the controller of the data described here.
1. What we collect
- Your account: name, email address, password (stored only as a one-way hash), preferred language, and a phone number or postal address if you give one so that a printed certificate can be sent to you.
- Training records: the classes you are enrolled in, attendance, exam answers and scores, and the certificates issued to you, together with the name of your employer when your employer arranged the training. Some of this is supplied by your employer or by our staff rather than by you.
- Sign in with Google or Apple: if you choose it, we receive your name, email address, whether the provider has verified that address, and the provider's identifier for your account. We never receive your Google or Apple password.
- Payments: what you ordered, the amounts and the payment status. Card and bank details are entered on the pages of our payment processor, Midtrans, and never reach us.
- Check-in: when you check in to a session, the time, your IP address and your browser's user-agent string, as evidence of attendance.
- Messages you send us: the name, email address, phone number and message you type into the contact form, with your IP address and user-agent string to help us fight spam.
- Surveys: your answers to course evaluations. When a survey is marked anonymous, your answers are stored without a link to you.
- Security records: a log of significant actions on the site (for example sign-ins, issuing or withdrawing a certificate), with the IP address and user-agent string involved.
2. How we use it
- to run the training: enrolment, scheduling, attendance, exams and payment;
- to issue certificates and let anyone you show one to check that it is genuine;
- to sign you in and keep your account secure;
- to email you about your classes, payments and certificates (you can unsubscribe from non-essential messages using the link in each one);
- to answer messages you send us;
- to meet our legal and accounting obligations.
We do not sell personal data, we do not use it for advertising, and we do not use tracking or analytics cookies.
3. Data from Google and Apple
Information we receive when you sign in with Google or Apple is used only to sign you in, to link that sign-in to your Verse Class account and to fill in your name and email address. It is not shared with anyone else, used for advertising or sold. Verse Class's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect Google or Apple from your profile page at any time, as long as you keep another way to sign in.
4. Certificates are public by link
A certificate has its own web address, and anyone who has that address can view it. It shows your name, the course, the dates and, where printed, your employer. This is what lets an employer or regulator check a certificate without an account. The address is long and unguessable, and certificate pages are excluded from search engines. If you need a certificate withdrawn, contact us.
5. Who we share it with
- Your employer, when your employer booked the training: its administrators can see the enrolment, attendance, results and certificates for the classes it bought.
- Trainers of your class, for that class.
- Service providers who process data on our behalf and only for this purpose: Midtrans (payments), our email delivery provider, and the hosting and document-rendering services that run the site.
- Authorities, when Indonesian law requires it.
6. Cookies
We use only the cookies the site needs to work: one that keeps you signed in, one that protects forms against cross-site forgery, one that remembers your language, and a short-lived one used while you sign in with Google or Apple.
7. How long we keep it
Training records and certificates are kept for as long as a certificate may need to be verified, because a certificate that can no longer be checked loses its value to you. Account data is kept while your account exists. Payment records are kept for as long as Indonesian tax and accounting law requires. Other data is kept only as long as it is needed for the purpose it was collected for.
8. Security
The site is served only over HTTPS, passwords are stored as one-way hashes, access to personal data is limited to staff who need it, and significant actions are logged. Certificates we issue as PDF files are digitally signed so that tampering can be detected.
9. Your rights
Under Indonesia's Personal Data Protection Law (Law No. 27 of 2022) you may ask us to tell you what data we hold about you and give you a copy, correct it, delete it or stop processing it, and withdraw any consent you have given. Some records, such as issued certificates and payment records, may have to be kept to meet a legal obligation or to keep a certificate verifiable; in that case we will tell you why. You can correct much of your account data yourself from your profile page. For anything else, email us at the address below and we will answer within the time the law allows.
10. Changes to this policy
If we change this policy we will update the date at the top of this page, and tell account holders by email about any change that materially affects them.
11. Contact
PT. Data Optima Konsultan (Verse Consulting)
Jl. Letjen M.T. Haryono Kav 10, Jakarta Timur 13310, Indonesia
info@verseconsulting.id