# FixersTech School Privacy Policy **Effective Date:** October 1, 2026 **Version:** 1.0.0 FixersTech ("we", "our", or "us") operates the FixersTech School multi-tenant School ERP SaaS platform (the "Platform"). We are committed to protecting the privacy and security of educational institutions, school administrators, teachers, parents, guardians, and students. ### 1. Scope & Educational Context FixersTech provides school management software directly to educational institutions ("Schools" or "Customers"). When a School uses our Platform to manage administrative records, academic curricula, attendance, and student profiles, the School acts as the controller of that institutional data. FixersTech processes this data on behalf of and under the instruction of the School. ### 2. Information We Collect We collect information through three primary channels: - **Institutional & School Account Information:** School name, legal registration details, campus addresses, designated administrator names, professional email addresses, contact telephone numbers, and billing details. - **School Operational & Academic Data:** Student records, parent/guardian contact details, staff employment records, attendance timestamps, grade entries, exam marks, fee invoice history, library records, hostel assignments, and bus route allocations submitted by authorized school users. - **Technical & Security Data:** IP addresses, browser types, device specifications, operating system versions, login timestamps, and audit event logs required for platform security and tenant isolation verification. ### 3. How We Use Information We process data strictly for lawful operational purposes, including: - Operating, maintaining, and delivering multi-tenant ERP functionality. - Authenticating users and enforcing role-based permissions and strict tenant boundaries. - Generating automated communications requested by the school (e.g., fee reminders, attendance alerts, exam notices). - Monitoring infrastructure availability, preventing malicious access, and investigating security incidents. - Meeting legal, auditing, and financial accounting obligations. ### 4. Tenant Isolation & Data Security FixersTech employs defense-in-depth architectural safeguards. Each tenant’s data is strictly partitioned using relational database tenant scoping, ensuring that users from one school cannot view or manipulate records belonging to another school. All network traffic is encrypted in transit using Transport Layer Security (TLS 1.2+ / HTTPS) and sensitive credentials are encrypted using cryptographic hashing. ### 5. Children and Minor Data We recognize the heightened sensitivity of student and minor information. We process student data solely for legitimate educational administration on behalf of the customer School. We do not sell student information, build commercial advertising profiles on students, or use student records for targeted advertising. ### 6. Data Sharing & Subprocessors We do not sell personal data. We share data only with verified infrastructure providers strictly necessary to deliver the service (such as cloud hosting providers, transactional email relays, and SMS gateways). All third-party providers are bound by strict confidentiality and data protection obligations. ### 7. Data Retention & School Data Ownership The customer School retains full ownership of its educational records. Upon termination of service, Schools may request an export of their administrative and student data. Following the contractually agreed retention window, tenant data is securely deleted from production databases in accordance with our disaster recovery schedules. ### 8. Contact & Legal Notices If you have questions regarding this Privacy Policy or your institution's data, please contact our Data Governance Officer at `arslan2info@gmail.com` or via WhatsApp / Phone at `+92 344 6667737` (Lahore, Pakistan).