1. Introduction

PakSchooling ("we") respects your privacy. This policy explains what data we collect, how we use it, and how we keep it safe. Read this alongside our Terms of Service.

2. Data We Collect

2.1 Information you provide

School information: name, address, city, contact number, logo
User accounts: name, email, phone, role, password (bcrypt hashed)
Student data: name, date of birth, parent details, attendance, fees, grades
Staff data: name, salary, leaves, documents
Uploaded files: profile pictures, documents, certificates

2.2 Automatically collected

IP address, browser type, device information
Audit logs — which user did what and when
Page views and usage statistics (via anonymous sessionId)
Cookies — authentication, locale (Urdu/English), theme

3. Where Your Data Is Stored

Primary database: Supabase (PostgreSQL) — Singapore (ap-southeast-1) region, next to where the app runs.
File uploads: Cloudinary CDN — globally replicated with automatic optimisation
Email logs: Resend — US East
Backups: an encrypted backup every night, each one restore-tested and kept for 14 days; and a reserve copy on a second provider (Neon), refreshed nightly
Encryption: Database encrypted at rest (AES-256); TLS 1.3 in transit

4. How We Use Your Data

To provide the Service — attendance, fees, communications
To manage your account and subscription
For technical support and troubleshooting
To improve the Service and develop new features (anonymised data)
To comply with legal obligations

We never sell your data. It is never shared for third-party advertising.

5. Who We Share Data With

Only in limited circumstances:

Service providers: Supabase (database), Neon (reserve copy), Cloudinary (files), Resend (email), Vercel (hosting), Google Gemini (AI reports). All under Data Processing Agreements (DPAs).
Legal compulsion: court order, subpoena, or legal requirement
With your permission: WhatsApp messages — only through your explicit action

6. Your Rights

Under Pakistan's Personal Data Protection Bill, you have the right to:

Access: view and obtain a copy of all your data
Correction: correct inaccurate data
Deletion: have your data deleted (subject to legal retention)
Export: download your lists as CSV (for example the student list)
Withdraw consent: revoke consent at any time
Complaint: raise a complaint with us or the regulator

7. Account Deletion

How: delete your account
Or email support@pakschooling.com — processed within 7 working days
30-day grace period after deletion — restoration is possible during this window
After 30 days, data is permanently deleted — only legally-required records (audit logs, financial) are retained

8. Data Retention

Active accounts: as long as the account is active
Cancelled accounts: 30-day grace + legal retention
Audit logs: 7 years (governance requirement)
Financial records (fees, invoices): 7 years (FBR requirement)
Marketing leads (schools that did not sign up): 12 months

9. Security

Passwords: bcrypt (10 rounds) hashed
Database encryption: AES-256 at rest
Transport: TLS 1.3 on every request
Multi-tenancy: each school's data is fully isolated
Audit logs: every sensitive action recorded
Rate limiting: protection against brute-force attacks
Magic-number file validation: protection against malicious uploads

In the event of a suspected data breach, affected users will be notified within 72 hours.

10. Children's Data

Our Service is for schools and necessarily processes data of students (including those under 18). It is the school's responsibility to obtain the necessary consent from parents/guardians. We only collect data required for educational purposes. Children's data is never used for marketing or advertising.

11. Cookies

Essential: authentication, session — the site cannot function without these
Preferences: locale (Urdu/English), dark/light theme
Analytics: Vercel Analytics (anonymous) — opt-out is possible

12. Changes

Significant changes will be notified via email at least 30 days in advance. Minor changes will be reflected here by updating the effective date.

13. Contact

For privacy-related questions or data access requests: support@pakschooling.com