Privacy Policy

1. Information We Collect

We collect information necessary to provide our school management services, including:

• Authentication data (Email and encrypted passwords).
• Institutional data (School names, class structures, subject lists).
• Academic data (Grades, attendance records, homework status).
• Communication logs between staff and parents.

2. How We Use Your Data

Your data is strictly used to deliver educational and administrative services. We use it to:

• Facilitate real-time communication between stakeholders.
• Generate academic reports and attendance metrics.
• Process tuition payments securely via PCI-DSS compliant gateways.

3. CNDP & GDPR Compliance

For our Moroccan clients, we adhere to the Law 09-08 promulgated by Dahir 1-09-15. You have the right to access, rectify, and delete your personal data. We act as a data processor on behalf of the educational institution (the data controller).

4. Multi-Tenant Data Isolation

Our platform uses a multi-tenant architecture. Your school's data is logically isolated from other schools. We enforce strict database rules to ensure that one school hub cannot access the data of another.

5. Data Retention & Lifecycle Policy

We enforce an automated data retention policy to minimize the storage of personal data beyond its useful lifecycle, while complying with local legal accounting requirements:

• Pending Invitations: Automatically purged after 30 days if not accepted.
• Attendance Records: Permanently deleted after 24 months.
• Inactive Students: Accounts inactive or archived for more than 12 months are fully anonymized. Pedagogical data is stripped of personal identifiers.
• Financial Records (Invoices): Preserved for 10 years to comply with the Moroccan Commercial Code. In the event of a user deletion request, only personal identifiers on the invoice are anonymized.