MISLend · Data & security

Privacy Policy

This notice explains the information MISLend processes to manage accounts, equipment, borrowing requests, returns, and support. It describes the system's current functions; the UCC MIS department's applicable privacy notices and policies also apply.

Effective Date: October 18, 2026

Information We Process

Depending on the features you use, MISLend may process:

Account and profile details: Name, email address, account role and status, student/faculty/admin identifiers, and profile details such as department, course, year/section, phone number, or profile photo where provided.
Equipment and transaction details: Items requested or borrowed, purpose, room, requested and actual return times, item condition, approval and return status, and staff actions recorded for the transaction.
Reports and communications: Incident-report descriptions and related details or images, feedback submitted through the site, and messages sent through application communication features.
Authentication and technical data: Password hashes (not the original password), session/authentication tokens, and information needed to protect, operate, and troubleshoot the service. The browser may use local storage for sign-in/session state and interface preferences.

Storage and Service Providers

MISLend uses its configured application backend. The repository supports a Node.js/Express API with a Supabase-hosted PostgreSQL database, and a local JSON store for local development. The actual storage and hosting provider depends on the deployment configuration.

Application hosting and database: Process account and equipment records to provide MISLend features and keep operational records.
Email delivery: If enabled, configured email providers send password-reset messages. Feedback may also be sent to the configured recipient using EmailJS.

Security Measures

The application uses authenticated sessions, role-based checks in the API, and password hashing. Deployment security also depends on the hosting, database, network, and account configuration maintained by the service operator. No online service can guarantee that unauthorized access or data loss will never occur.

Your Rights

Access and correction: Review the information shown in your account and ask an authorized MIS administrator to correct information that is inaccurate.
Questions or requests: Contact the UCC MIS department through its official channel to ask about your information or make a privacy request. The department may need to verify your identity and retain records required for institutional purposes.
Account changes: Some profile details can be edited in the application; other changes require administrator assistance.

Data Retention

MISLend stores information in the configured database or local development store. Retention, archival, and deletion are managed by the UCC MIS department and the deployment operator under applicable institutional requirements. This page does not promise automatic deletion at the end of a semester. Ask the department about the retention period for a particular record.

Your Responsibilities

Use a unique password, keep it private, sign out when using a shared device, and report suspected account misuse to an administrator. Do not include passwords, reset links, or unnecessary personal information in feedback or screenshots. MISLend staff should not need your password to troubleshoot an account.