Privacy Policy

EduLynx ERP collects and processes data provided by institutions and their authorised users in the course of using the platform. This includes:

• Institutional data — school name, address, board affiliation, branch and configuration details.
• User accounts — name, email address, phone number, role and authentication credentials (passwords are stored only in hashed form).
• Student records — enrolment details, academic records, examination results, section and class assignments.
• Attendance records — daily attendance logs for students and staff.
• Financial records — fee structures, payment transactions, receipts and outstanding balances.
• Communication logs — notices, circulars and messages sent through the platform's communication module.

We do not collect data beyond what is necessary for the operation of the platform features used by the institution.

Data collected through EduLynx ERP is used for:

• Operating and delivering the platform's features — academics, attendance, examinations, fees, communication and administration modules.
• Generating reports and analytics as requested by authorised institutional users.
• Providing AI-powered insights through the platform's intelligent features. AI processing uses only aggregate and anonymised data — individual student or staff records are not sent to AI models in identifiable form.
• Maintaining platform security, monitoring for abuse and enforcing access controls.
• Communicating with institution administrators about service updates, maintenance and support.

We do not use institutional data for advertising, marketing to students or parents, or any purpose unrelated to the operation of the platform.

All data is stored on secure servers with encryption applied to data at rest and in transit. Key storage practices include:

• Server-side storage — all institutional data resides on server infrastructure; no sensitive data is stored in client browsers.
• Encryption — HTTPS/TLS for data in transit; encrypted storage for data at rest.
• Tenant isolation — each institution's data is logically isolated. One institution cannot access another institution's data under any circumstances.

For a detailed description of our security controls, see our Security Practices page.

EduLynx ERP integrates with the following third-party service for its AI features:

• Anthropic (Claude) — used to power the platform's AI assistant and intelligent analytics features. Only aggregate, anonymised data is sent to Anthropic's API. No personally identifiable information (PII) — such as student names, contact details or individual records — is shared with Anthropic.

We do not sell, rent or share institutional data with any other third parties for their own purposes.

Data is retained for as long as the institution maintains an active account with EduLynx ERP. Specific retention practices:

• Institutional data is retained in accordance with the institution's own policies and applicable regulatory requirements.
• Upon termination of service, institutions may request a complete export of their data before deletion.
• Following a data deletion request and any applicable retention period, institutional data is permanently removed from our systems.
• Backup copies are purged within a reasonable period following deletion of production data.

Users of EduLynx ERP have the following rights with respect to their data:

• Access — request a copy of the personal data held about them.
• Correction — request correction of inaccurate or incomplete data.
• Deletion — request deletion of personal data, subject to legitimate retention requirements.

All data rights requests should be directed through the institution's administrator, who can manage user data within the platform or contact us for assistance. Individual users (students, parents, teachers) should contact their institution's administration in the first instance.

EduLynx ERP uses cookies strictly for session management and authentication purposes. Specifically:

• Session cookies — used to maintain your authenticated session while using the platform.
• Authentication tokens — used for secure API communication between the browser and server.

We do not use tracking cookies, advertising cookies or any third-party analytics cookies.

We may update this privacy policy from time to time to reflect changes in our practices or for legal and regulatory reasons. Material changes will be communicated to institution administrators. Continued use of the platform after changes take effect constitutes acceptance of the updated policy.

For privacy-related questions, concerns or data rights requests, contact us at founder@krislynx.com.