Privacy Policy
This Privacy Policy explains how Education ERP ("Education ERP", "we", "our", or "us") collects, uses, stores, protects and deletes information when schools, administrators, staff, students, parents and other authorized users use our school management platform at educationserp.com.
1. Information we process
Depending on how a school configures and uses Education ERP, the platform may process school and user information such as names, usernames, email addresses, phone numbers, class and admission information, attendance, fee and payment records, examination results, staff records, messages and other operational school records entered by authorized users.
We also process technical and security information necessary to operate the service, such as login/session information, role and permission data, audit records, timestamps and configuration information.
2. Google account and Gmail integration
When a user chooses to connect Gmail, Education ERP requests only the Google permissions required for the email feature:
- openid and email — used to identify the Google account that was connected.
- https://www.googleapis.com/auth/gmail.send — used to send ERP-related email from the connected Gmail account.
The Gmail sending permission is used for legitimate school communications generated by authorized ERP workflows, including account credentials, notices, connection tests and other school-related messages.
Education ERP does not request permission to read, search, modify or delete the connected user's Gmail inbox. The application does not use Gmail API access for advertising, profiling, data brokerage, or unrelated marketing.
3. Google user data we store
After successful authorization, Education ERP may store the connected Google email address, the scopes granted, connection status, connection timestamps and an OAuth refresh token. The refresh token is stored in encrypted form and is used to obtain temporary access tokens so authorized ERP email functions can continue working without repeatedly asking the user to sign in.
Google access tokens and refresh tokens are used only to provide the Gmail sending feature requested by the connected school or platform administrator.
4. How we use information
We use information processed through Education ERP to operate and secure the school management service; provide admissions, fees, attendance, examinations, accounts, reporting and role-based portal features; send authorized school communications; maintain account access and permissions; troubleshoot service problems; preserve auditability; and respond to support or contact requests.
5. Data sharing
We do not sell Google user data or school operational data. We do not share Google user data with advertisers or data brokers. Information may be processed by infrastructure or service providers only where required to operate Education ERP, host the application and database, deliver requested functionality, maintain security, or comply with applicable law.
School records are intended to be available only to users authorized by the relevant school and according to their assigned roles and permissions.
6. Google API Services User Data Policy
Education ERP's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.
7. Security
We use reasonable technical and organizational safeguards designed to protect account and school information. These include role-based access controls, tenant-aware access restrictions, encrypted storage of Google OAuth refresh tokens, authenticated administrative access and audit records for relevant system actions. No internet service can guarantee absolute security, but we work to limit access to information to the people and systems that require it.
8. Data retention and deletion
School operational records are retained while needed to provide the service to the school, satisfy legitimate administrative requirements, maintain system integrity, or meet applicable legal obligations. Google OAuth connection information is retained while the Gmail connection remains active or as necessary for security and audit purposes.
An authorized administrator can disconnect a Gmail integration from Education ERP. When disconnected, Education ERP removes the saved Gmail connection from the active ERP connection store and attempts to revoke the associated Google OAuth authorization. Users may also revoke Education ERP directly from their Google Account security settings.
Schools or users who want to request deletion of account data or other personal information may contact us using the details below. We will review the request in light of the requesting user's authority, the school's record-retention responsibilities and applicable law.
9. User choices and access
Users can choose not to connect a Google account. Gmail integration is optional and is initiated by an authorized administrator. Revoking or disconnecting Gmail will stop ERP functions that depend on that Gmail connection, but other ERP functions may continue to operate.
10. Children's and student information
Education ERP is designed for use by educational institutions and their authorized users. Schools may enter student information as part of their legitimate educational and administrative operations. The institution using Education ERP is responsible for ensuring it has an appropriate basis and authorization to enter and manage student and parent information and to provide access to authorized users.
11. Cookies and sessions
Education ERP may use cookies or similar session mechanisms that are necessary for authentication, security and maintaining a signed-in session. We do not describe these essential mechanisms as advertising cookies and do not use Gmail data to build advertising profiles.
12. Changes to this policy
We may update this Privacy Policy when the product, legal requirements or data practices change. The updated version will be published on this page with a revised "Last updated" date.
13. Contact us
For privacy questions, Google data questions, access requests or deletion requests, contact Education ERP:
- Email: irfanmateen8743@gmail.com
- Phone: +92 315 9193927
- Location: Peshawar, Khyber Pakhtunkhwa, Pakistan
- Website: https://educationserp.com/
