Privacy Policy

1. Information we collect

We collect information you provide directly when registering a school, adding staff, or entering student records. This includes school name and contact details, administrator and teacher names and email addresses, student names, class assignments, academic scores, attendance records, and conduct notes.

We also collect usage data automatically such as pages visited, features used, and device type, to improve the platform and diagnose issues.

2. How we use your information

We use the information we collect to operate and improve the Edunostics platform, generate report cards and academic records, send transactional communications such as report card notifications, provide customer support, detect and prevent fraudulent or unauthorised use, and comply with our legal obligations.

We do not use student data for advertising purposes. We do not sell or rent any personal data to third parties.

3. Data sharing

We share data only as required to deliver our services. This includes cloud infrastructure providers who host Edunostics under strict data processing agreements, email service providers for transactional messages, and payment processors for subscription billing.

All third-party providers are contractually required to handle data with the same level of care we apply. We do not share student data with any party for marketing, analytics resale, or research without explicit written consent from the school.

4. Data security

All data is encrypted at rest using AES-256 and in transit using TLS 1.3. Access to production data is restricted to authorised Edunostics personnel who require it for their work. All such access is logged and audited.

We perform automated daily backups and maintain a documented incident response plan. In the event of a data breach, we will notify affected schools within 72 hours of confirming the incident.

5. Data retention

We retain school and student data for the duration of an active subscription plus 12 months after cancellation. During this period, schools may export their complete data at any time. After 12 months following subscription termination, data is permanently deleted from all systems.

Schools may request earlier deletion at any time by contacting us in writing.

6. Your rights

As a school administrator, you have the right to access all data held about your school and its students, correct any inaccurate records, request deletion of data subject to our retention policy, export data in machine-readable format, and withdraw consent for data processing which will result in service termination.

To exercise any of these rights, contact us at privacy@edunostics.com.

7. Cookies

Edunostics uses session cookies strictly necessary for authentication and platform functionality. We do not use third-party tracking cookies, advertising cookies, or analytics cookies that report to external services.

You can disable cookies in your browser settings, though this will prevent you from logging in to the platform.

8. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify school administrators by email at least 14 days before the changes take effect. Continued use of Edunostics after that date constitutes acceptance of the updated policy.

9. Contact

For questions, concerns, or to exercise your data rights, contact our privacy team at privacy@edunostics.com. We aim to respond to all privacy requests within 5 business days.