Privacy Policy

Last updated: August 19, 2026

eSkoolio ("we," "us," "our") provides a school management platform used by schools, school groups, and their staff, students, and parents (collectively, "Users," "you"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By using eSkoolio, you agree to the practices described in this policy. If you do not agree, please do not use the platform.

1. Who This Policy Covers

eSkoolio is used by schools ("Customers") who register their institution, campuses, staff, and students on the platform. Most personal data on eSkoolio is entered and controlled by the Customer (the school), not by eSkoolio directly. In this relationship:

  • The school (Customer) acts as the data controller for student, parent, and staff records it enters into the platform.
  • eSkoolio acts as a data processor, storing and processing that data on the school's behalf, and as a data controller for account and billing information relating directly to the school's own subscription.

2. Information We Collect

Account and billing information — school name, admin contact details, billing address, subscription plan, and payment records (we do not store full payment card details; these are handled by our payment processors where applicable).

Data entered by schools, which may include:

  • Student records: name, date of birth, class/section, admission details, attendance, exam results, fee records
  • Staff records: name, contact details, CNIC (for HR/payroll purposes), designation, attendance, leave records, salary/payroll information
  • Parent/guardian contact details (where used)

Usage data — login timestamps, IP addresses, pages visited within the platform, and actions taken (recorded in our audit log for security and accountability purposes).

Communications — if you contact us for support or sales inquiries, we retain that correspondence.

3. How We Use Information

We use the information collected to:

  • Operate and maintain the eSkoolio platform
  • Provide the features a school has subscribed to (attendance, fees, exams, scheduling, communications, and related modules)
  • Send optional SMS notifications (fee reminders, attendance alerts, urgent announcements) where a school has enabled this feature
  • Process payments and manage subscriptions
  • Maintain security, including audit logging and login monitoring
  • Respond to support requests
  • Improve and maintain the platform's reliability and performance

We do not sell student, staff, or parent data to third parties, and we do not use it for advertising.

4. Third-Party Services

eSkoolio may use the following categories of third-party services to operate the platform:

  • AI scheduling assistance (optional feature): when a school uses AI-suggested scheduling, relevant class, subject, and teacher-availability data is sent to a third-party AI provider to generate a proposed schedule. No student personal data is sent as part of this feature.
  • SMS delivery (optional feature): where enabled, phone numbers and message content (e.g. fee reminders) are sent to our SMS gateway provider to deliver the message.
  • Payment processing: subscription payments may be processed via third-party payment gateways.

These providers process data only as necessary to deliver the specific service and are not permitted to use it for their own purposes.

5. Data Security

We take reasonable technical and organizational measures to protect data on the platform, including:

  • Encrypted storage of sensitive credentials (e.g. third-party API keys)
  • Role-based access control, so users only see data relevant to their role and school
  • Password hashing (we never store passwords in plain text)
  • Audit logging of key actions for accountability
  • Isolated access boundaries between different schools' data (multi-tenant isolation)

No system can guarantee absolute security. If we become aware of a data breach affecting your information, we will notify affected schools as required by applicable law.

6. Data Retention

We retain data for as long as a school's account remains active, plus a reasonable period afterward to allow for account recovery, legal compliance, or dispute resolution. Schools may request deletion of their data upon account closure, subject to any legal retention obligations (e.g. financial records).

7. Children's Data

eSkoolio is used by schools to manage records belonging to minors (students). We do not knowingly collect this data directly from children; it is entered and managed by the school itself, which is responsible for obtaining any necessary parental consent under applicable law. Parents or guardians with questions about their child's data should contact their school directly, or contact us and we will assist in coordinating with the school.

8. Your Rights

Depending on your role and applicable law, you may have rights to access, correct, or request deletion of personal data. Because schools control most of the data on the platform, requests relating to student, staff, or parent records should generally be directed to the relevant school first. We will assist schools in fulfilling such requests where technically feasible.

9. Changes to This Policy

We may update this policy from time to time. We will post the updated version on this page with a revised "Last updated" date. Continued use of eSkoolio after changes take effect constitutes acceptance of the revised policy.

10. Contact Us

If you have questions about this Privacy Policy, contact us at sales@eskoolio.com.