Privacy Policy

1. Who we are

AcNexa is a school management platform used by schools to manage admissions, academics, finance, attendance, and communication. This policy covers the AcNexa platform itself (acnexa.com and the school portals it hosts). Each participating school controls the student, parent, and staff data it enters into its own account - AcNexa acts as the technical platform that stores and processes that data on the school's behalf.

2. Information we collect

• Account information - name, role, login ID, and contact details for staff, students, and parents, entered by the school.
• School records - academic records (grades, attendance, report cards), financial records (fee bills and payment history), and communication logs (SMS/email sent through the platform).
• Payment information - fee payments are processed by Paystack; AcNexa does not receive or store card or mobile money credentials directly.
• Technical information - basic, aggregated, cookieless visit analytics (via Vercel Analytics) on the public marketing site, used only to understand overall traffic - not to track individual visitors.

3. Cookies

AcNexa uses one essential cookie to keep you signed in to your school portal - this is required for the platform to function and isn't optional, the same way a banking app can't work without it. We do not use advertising or cross-site tracking cookies. The public marketing site's visit analytics do not use cookies at all.

4. How each school's data is kept separate

Every school's data is isolated from every other school's at the database level, not just hidden behind a login screen - this is enforced in code on every request, not a UI convenience. No school, and no user of one school, can see another school's students, staff, or finances.

5. Who we share information with

We use a small number of service providers, each only for the specific job listed:

• Paystack - processes fee payments.
• mNotify - delivers SMS messages a school sends through the platform.
• Supabase - hosts the database.
• Vercel - hosts the application and provides cookieless traffic analytics.

We do not sell school, staff, parent, or student data to anyone, for any purpose.

6. Data belonging to students and other minors

Where a school enters data about a student who is a minor, the school - not AcNexa - is the party responsible for deciding what is collected and who at the school can access it, consistent with the school's own relationship with its students and parents. Parents can request access to or correction of their own child's records through their school.

7. Data retention and export

School data is retained for as long as a school's account is active, plus a reasonable backup retention period. A school can request a full export of its own data, or deletion of its account and associated data, at any time by contacting us.

8. Security

Accounts are protected with hashed passwords and optional two-factor authentication. Access to each school's data is scoped and enforced at the database level. Login attempts are rate-limited to reduce the risk of credential-guessing.

9. Changes to this policy

We may update this policy as the platform changes. The "Last updated" date at the top of this page will always reflect the most recent revision.

10. Contact us

Questions about this policy, or requests relating to your data, can be sent to Acanexa0@gmail.com or +233 53 653 0310.