Privacy Policy

1. Introduction

Lerynova Technologies ("Company", "we", "us") operates The School Manager platform ("Service"). This Privacy Policy explains how we collect, use, store, and protect the personal data of our users, including school administrators, teachers, students, parents, and staff members.

We are committed to protecting the privacy of all users, with particular care given to the data of minors (students under 18). By using our Service, you consent to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, phone number, role, and password when registering
• School Information: School name, address, contact details, logo, and configuration settings
• Student Records: Names, dates of birth, gender, admission numbers, class assignments, grades, attendance records, health information, and guardian details
• Staff Records: Employee IDs, qualifications, salary information, employment history, and performance evaluations
• Financial Records: Fee amounts, payment records, payroll data, and expense records
• Communications: Messages sent through the platform between teachers, parents, and administrators

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, timestamps, and session duration
• Device Information: Browser type, operating system, and screen resolution
• Audit Logs: Actions performed within the system for security and accountability purposes

3. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve the Service
• Process student enrollment, grading, attendance, and reporting
• Manage financial operations including fee collection, payroll, and invoicing
• Enable communication between school stakeholders
• Generate AI-powered predictions and academic insights (where enabled)
• Send important notifications about school activities, fee reminders, and system updates
• Ensure the security and integrity of the platform
• Comply with legal obligations

4. Data Isolation and Multi-Tenancy

The School Manager operates on a multi-tenant architecture where each school's data is logically isolated. This means:

• Each school can only access its own data
• All database queries are scoped by school ID
• No school administrator, teacher, student, or parent can view data from another school
• Role-based access control ensures users only see data relevant to their role

5. Data Security

We implement robust security measures to protect your data:

• Encryption: All data is encrypted in transit (TLS/SSL) and at rest (AES-256)
• Authentication: Passwords are hashed using bcrypt with salt rounds; optional two-factor authentication is available
• Access Control: Role-based permissions restrict access to authorized users only
• Audit Logging: All sensitive operations are logged for accountability
• Backups: Daily automated off-site backups with secure storage
• Infrastructure: Cloud-hosted on enterprise-grade infrastructure with 99.9% uptime SLA

6. Protection of Children's Data

We recognize the sensitivity of student data, particularly for minors. We take additional precautions:

• Student data is only accessible to authorized school personnel and the student's registered parent or guardian
• Students cannot modify their own personal records
• We do not sell, rent, or share student data with third parties for marketing purposes
• Parent and guardian consent is obtained through the school's enrollment process

7. Data Sharing and Third Parties

We do not sell your personal data. We may share data only in these circumstances:

• Service Providers: We use trusted third-party services for hosting, email delivery, and payment processing. These providers are bound by confidentiality agreements.
• Legal Requirements: We may disclose data if required by law, court order, or government regulation
• With Your Consent: We may share data with third parties when you give explicit consent

8. Data Retention

• Active account data is retained for the duration of your subscription
• Upon account termination, data is retained for 30 days to allow for export requests
• After the 30-day retention period, data is permanently and irreversibly deleted
• Audit logs may be retained for up to 12 months for security purposes
• Anonymized, aggregated data may be retained indefinitely for analytical purposes

9. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data, subject to legal retention requirements
• Export: Request an export of your data in a standard format
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing of your data for specific purposes

To exercise any of these rights, contact us at support@theschoolmanagerpro.com.

10. Cookies and Tracking

We use essential cookies for authentication and session management. We do not use third-party advertising cookies or tracking pixels. Session cookies are deleted when you close your browser or log out.

11. International Data Transfers

The Service is hosted on cloud infrastructure that may process data in regions outside your country of residence. We ensure that any international data transfers comply with applicable data protection laws and that adequate safeguards are in place.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The "Last updated" date at the top of this page reflects the most recent revision.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

Lerynova Technologies
Data Protection Officer
support@theschoolmanagerpro.com
+233 24 367 2267 (WhatsApp / Call)
Mon-Fri, 8AM-6PM GMT