Privacy Policy

1. Who we serve

EduNexa is a school administration platform used by educational institutions in Pakistan. Schools are the primary controllers of student, parent, and staff records they enter into the system.

2. Data we process

Depending on how a school configures the product, we may process:

• School account details (name, owner, contact email, plan)
• Student records (name, date of birth, class, attendance, grades, fee invoices)
• Parent / guardian contact details linked to students
• Teacher and staff portal credentials
• Uploaded documents such as profile photos or certificates
• Technical logs needed for security and reliability

3. Why we process it

To provide school operations features (admissions, academics, exams, fees, attendance), authenticate users, protect accounts, and improve service reliability. We do not sell student data.

4. Children and minors

Student data often relates to minors. Schools must have a lawful basis and parental/guardian authorization under applicable Pakistani education and data-protection expectations before uploading student information. Access is limited by school-scoped roles.

5. Sharing

Data stays within the school’s tenant unless the school initiates sharing (for example exporting reports). We may use infrastructure processors (hosting, email, authentication) under contractual safeguards.

6. Retention

Records are retained while the school account is active and as required for legal or billing purposes. Schools may request deletion of their tenant data subject to applicable retention rules.

7. Security

We use authentication, tenant isolation, encrypted password storage, and access-controlled file downloads. No system is perfectly secure; schools should use strong passwords and limit admin access.

8. Contact

Privacy questions: use the Contact page. This document is a working policy for early deployments and may be updated as EduNexa grows.