Privacy Policy | EduTrack

1. Overview & Data Controller Roles

EduTrack operates as a cloud-native school administration platform. We distinguish between two primary roles:

Schools as Data Controllers: Schools control student, parent, and academic personal data (names, national ID/passport numbers, enrollments, payment records) uploaded to their portfolio.
EduTrack as Data Processor: EduTrack provides the secure infrastructure, automated reconciliation pipelines, and notification relays to process this data on the school administrator's instruction.

2. Categories of Data Collected

Identity & Profile Data

Name, verified email, telephone number, user role (school administrator, caretaker, student), hashed authentication credentials.

Academic & Institutional Data

Property names, location coordinates, unit inventories, utility meter readings, lease durations, fee obligations.

Transaction & Payment Records

Transaction reference codes, payment amounts, bank settlement timestamps, digital receipt hashes (raw payment card details are never stored).

Telemetry & Security Logs

IP addresses, browser client signatures, edge security events, audit logs of status alterations and plan mutations.

3. Multi-Student Isolation Architecture

EduTrack strictly guarantees student and school administrator data isolation using PostgreSQL Row-Level Security (RLS). Database policies verify cryptographic JWT claims on every single read and write query. Landlord A can never inspect, query, or mutate records belonging to Landlord B.

4. Third-Party Service Providers

We do not sell personal information. We partner only with SOC-2 and ISO 27001 compliant infrastructure providers:

Database & Auth: Supabase Inc. (AWS Data Centers with AES-256 encryption at rest).
Email Communications: Resend Technologies Inc.
Payment Rails: Safaricom (M-Pesa API), Pesapal, and Paddle.

5. Data Retention & Right to Deletion

Landlords retain full autonomy to export their student and payment ledgers in CSV/JSON formats. Upon permanent portfolio deletion by authorized administrators, all associated properties, units, and student links are purged in accordance with our cascade protocol.

6. Privacy Inquiries

To exercise data access, rectification, or deletion requests, contact:
privacy@edutracksystem.com