Legal & Compliance

Privacy Policy

How Edu360 SMS collects, protects, and handles personal and institutional data in accordance with the Nigeria Data Protection Regulation (NDPR).

Effective Date: September 15, 2026

1. Introduction

Edu360 School Management System ("Edu360 SMS", "we", "our", or "us") is dedicated to protecting the privacy, confidentiality, and security of all personal data entrusted to us. This Privacy Policy outlines how we collect, use, disclose, and safeguard information when educational institutions (schools), administrators, teachers, parents, guardians, and students access and use the Edu360 SMS cloud platform and related services.

By registering an account, accessing, or using Edu360 SMS, you acknowledge that you have read and understood this Privacy Policy and agree to our data handling practices described herein.

2. Information We Collect

We collect only information necessary to provide efficient, reliable school management and academic tracking services:

Institutional & Admin Data
  • School name, official address, email, and phone contact
  • Administrator full name, work email, and role credentials
  • School bank account details for fee settlements
  • School logo and academic branding assets
Student & Academic Data
  • Student name, date of birth, gender, and student ID
  • Enrolled class level, section, and subjects
  • Continuous assessment (CA) scores, exam results, and grades
  • Daily attendance records and behavioral remarks
Parents & Teachers
  • Parent/guardian name, phone number, email, and home address
  • Teacher name, email, phone, assigned subjects, and timetable
  • Communications sent between parents, teachers, and school administrators
Billing & Transaction Data
  • Invoice numbers, transaction references, amounts paid, and payment timestamps
  • Payment status updates received via secure payment webhooks
  • Note: We never store credit/debit card numbers or banking PINs.

3. Secure Payment Processing via Paystack

All electronic payments made through Edu360 SMS—including software subscription payments by schools and school fee payments by parents—are processed securely through Paystack Payments Limited ("Paystack"), a licensed Payment Terminal Service Provider (PTSP) and Payment Solution Service Provider (PSSP) certified to PCI-DSS Level 1 (the highest standard in payment security).

  • No Card Storage: Edu360 SMS does NOT collect, store, or process full credit/debit card numbers, CVV security codes, or card PINs on our servers.
  • Direct Tokenization: All sensitive payment card credentials are transmitted directly to Paystack's encrypted vault via industry-standard TLS/SSL encryption.
  • Webhook Notifications: We only receive transaction metadata (e.g., Paystack reference, amount paid, status, and payer email) to automatically update school fee invoices or subscription plans.

4. How We Use Collected Data

We utilize the collected information strictly for legitimate academic and administrative purposes:

  • Academic Management: Calculating student scores, generating termly digital report cards, and maintaining academic broadsheets.
  • Attendance & Safety: Logging daily classroom attendance and notifying parents of absences.
  • Fee Management: Generating automated termly fee invoices, reconciling payments, and issuing digital receipts.
  • Communication: Transmitting emergency announcements, academic calendars, and report card availability via email, SMS, and in-app alerts.
  • System Security: Authenticating users, enforcing role-based permissions, and preventing unauthorized access.
  • Never for Advertising: We never sell, rent, or monetize student or school data for targeted third-party advertising.

5. Data Security & Storage

Edu360 SMS implements enterprise-grade technical, physical, and organizational measures to safeguard data against unauthorized access, alteration, loss, or destruction:

  • Encryption: All data transmitted between your browser and our servers is encrypted using 256-bit SSL/TLS protocols (HTTPS). Passwords are cryptographically hashed using industry-standard Bcrypt algorithms.
  • Role-Based Access Control (RBAC): Access to academic and financial data is strictly compartmentalized based on user role (SuperAdmin, SchoolAdmin, Teacher, Bursar, Parent, Student).
  • Regular Backups: Automated daily backups of institutional databases are stored in encrypted cloud environments.

6. NDPR & User Data Rights

In compliance with the Nigeria Data Protection Act (NDPA) and the Nigeria Data Protection Regulation (NDPR), users and data subjects have the following rights regarding their personal data:

  • Right of Access: You may request a copy of the personal information we hold about you or your student.
  • Right to Rectification: You may request immediate correction of inaccurate or incomplete personal records.
  • Right to Erasure ("Right to be Forgotten"): Schools may request deletion of data upon termination of service, subject to mandatory legal or statutory record-keeping periods.
  • Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time.

7. Data Retention

Student and school academic records are retained for as long as the school maintains an active subscription or as required by national educational record-keeping regulations. Upon termination of service, schools may request an export of their complete student and grade records, after which records are securely archived or purged in accordance with our retention policy.

8. Cookies and Session Management

We use essential session cookies strictly necessary to authenticate your login sessions, prevent Cross-Site Request Forgery (CSRF) attacks, and preserve user preferences. We do not use third-party tracking or behavioral profiling cookies.

9. Contact Our Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or how your personal data is handled, please reach out to us:

Edu360 School Management System

Email: support@edu360sms.com

Phone/WhatsApp: +234 902 598 7954

Address: Nigeria