Privacy Policy

Last updated: [DATE — fill in before launch]

This Privacy Policy explains how EduSaaS ("we", "us") collects, uses, and protects information when you use our platform.

1. Information We Collect

Account information: name, email address, and role (student, teacher, admin).
Academic data: course enrollments, quiz attempts, grades, assignment submissions, and attendance records.
Usage data: log data such as IP address, browser type, and pages visited, collected automatically.
Uploaded content: files, images, and documents you or your Tenant upload to the platform.

2. How We Use Information

We use collected information to operate and improve the Service, authenticate users, process payments, send transactional emails (such as password resets and account notifications), and provide customer support.

3. Data Isolation Between Tenants

Each Tenant's data (students, courses, grades, and quizzes) is logically separated from other Tenants. Tenant administrators can access data belonging to their own organization only.

4. Data Sharing

We do not sell personal information. We may share data with service providers who help us operate the platform (e.g. email delivery, file storage, payment processing), under confidentiality obligations. [Placeholder — list actual third-party processors before publishing, e.g. Resend, Cloudinary, Stripe.]

5. Data Retention

We retain account and academic data for as long as the account is active, or as needed to comply with legal obligations. Tenants may request deletion of their data by contacting support.

6. Your Rights

Depending on your location, you may have rights to access, correct, or delete your personal information. To exercise these rights, contact us using the details below.

7. Security

We use industry-standard measures — including password hashing and encrypted connections — to protect your information. No method of transmission or storage is 100% secure.

8. Children's Privacy

Our Service may be used by students under the age of 18 through their school or academy (a Tenant). Tenants are responsible for obtaining any consent required by applicable law before enrolling minors on the platform.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes where required by law.

10. Contact

Questions about this Privacy Policy can be sent to [SUPPORT EMAIL — fill in before launch].

This document is a placeholder template and does not constitute legal advice. It should be reviewed by a qualified lawyer — ideally one familiar with data protection laws relevant to your users (e.g. GDPR, COPPA) — before the platform goes live.