Privacy Policy

We collect the following categories of data:

• School account data: school name, address, registered admin contact details, subscription plan, and billing history.
• Staff data: name, email address, phone number, role, and duty assignments entered by the School.
• Student data: name, date of birth, class/section, home address, academic records, attendance records, and, where applicable, guardian/parent contact details. Student data is entered by the School, not collected directly from students by us.
• Parent/guardian data: name, email address, and phone number, used to deliver fee reminders and academic updates by SMS or email.
• Payment data: fee ledger entries and payment references. Card and bank details are collected and processed directly by our payment processor, Paystack — we do not store full card numbers on our servers.
• Usage and device data: IP address, browser type, and pages visited on our public website and dashboard, collected for security and troubleshooting.
• Contact form submissions: name, email, phone number, school name, and message content submitted through our contact page.

Because EduNovtryx is used by schools to manage student records, we process personal data belonging to minors. This data is entered and controlled by the School, not by us or by the student directly. We rely on the School to have the appropriate legal basis and, where required, parental or guardian consent, to submit student data to the Service.

We do not use student data for advertising or marketing, and we do not sell student data to any third party. Student data is used solely to provide the school-management functions the School has configured (results, attendance, fee ledgers, and communications).

• To provide, operate, and maintain the Service for a School.
• To process subscription payments and reconcile the fee collection ledger via Paystack.
• To send SMS and email reminders configured by a School to parents/guardians (for example, fee due-date reminders).
• To respond to support and contact-form requests.
• To maintain the security of the Service, including detecting and preventing fraud, abuse, or unauthorised access.
• To comply with legal obligations, including tax and financial record-keeping requirements.

We process personal data in line with the Nigeria Data Protection Act 2023 and the Nigeria Data Protection Regulation (“NDPR”). Depending on the data and purpose, our legal basis includes:

• Performance of a contract— to provide the Service under our Terms of Service and a School’s subscription.
• Consent — where a School or parent has given consent for communications, such as SMS/email reminders.
• Legitimate interest — to secure and improve the Service, prevent fraud, and respond to inquiries.
• Legal obligation — to meet tax, accounting, and regulatory requirements.

We share personal data only where necessary, with:

• Paystack, our payment processor, to process subscription and fee payments.
• SMS and email delivery providers, to send reminders and notifications configured by a School.
• Cloud hosting and database providers, who store data on our behalf under confidentiality and security obligations.
• Regulators or law enforcement, where required by law or to protect the rights, property, or safety of EduNovtryx, our users, or others.

We do not sell personal data to third parties, and we do not share student data for advertising purposes.

The Service uses a small number of strictly necessary cookies to keep you signed in and to secure your session. See our Cookie Policy for details.

We retain School, staff, and student data for as long as a School’s subscription is active, plus a reasonable period afterward to allow the School to export its records and to meet our legal and accounting obligations.

If a School closes its account, we will delete or anonymise the data associated with that account within a reasonable period, except where retention is required by law or for the resolution of disputes.

We use technical and organisational measures — including encryption in transit, access controls, and isolation of each School’s data from other schools on the platform — to protect personal data against unauthorised access, loss, or misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Subject to applicable law, you may have the right to request access to, correction of, or deletion of your personal data, to object to certain processing, or to withdraw consent where processing is based on consent.

If your data is held on a school’s EduNovtryx account (for example, as a student, parent, or staff member), please contact the School directly, as it controls that data. If you are a School administrator, contact us using the details below.

Our infrastructure providers may process or store data outside Nigeria. Where this occurs, we require appropriate safeguards to be in place, consistent with the requirements of the NDPR, to protect personal data to a standard comparable to Nigerian law.

We may update this Privacy Policy from time to time. We will post the updated version on this page with a new “Last updated” date. Material changes will be communicated to School administrators by email where practicable.

Questions about this Privacy Policy or your data can be sent to info@novtryx.com