Privacy Policy | FacetEdu

FacetEdu is a school management platform operated by Facet Software Solutions Ltd, Lagos, Nigeria (“FacetEdu”, “we”, “us”). This policy explains what personal data we handle when schools, their staff, students and parents use FacetEdu at facetedu.com and its subdomains, and the choices you have. We handle personal data in line with the Nigeria Data Protection Act 2023 (NDPA).

1. Who is responsible for your data

Schools control their own records. Each school that registers decides what student, guardian, staff, attendance, score and fee information it records in FacetEdu. For that data the school is the data controller and FacetEdu processes it on the school's behalf and on its instructions.

FacetEdu is responsible for account and billing data - for example the school owner's name, email and phone, login details, and the platform invoices we issue to schools.

If you are a parent, student or staff member with a question about records your school keeps, please contact your school first; we will help them respond.

2. Data we collect

Account data: name, email address, phone number (optional), role, school, and a securely hashed password.
Sign in with Google: if you choose it, Google shares your name, email address and the fact that the email is verified. We do not receive your Google password or access your Gmail, contacts or files.
School records entered by schools: student and guardian details, classes, attendance, scores and report cards, fee structures, invoices and payment records.
Payment data: payments are processed by our payment partners (Paystack or Flutterwave). We receive confirmation of the payment and a reference - we never see or store full card details.
Mailing list: if you join our mailing list, your email address and (if you give it) your first name.
Technical data: IP address, browser type, and logs of sign-ins and important actions, kept for security and troubleshooting.

3. How we use data

To provide FacetEdu to schools: running attendance, gradebooks, report cards, fees and payments.
To create and secure accounts, including email confirmation codes, password resets and sign-in with Google.
To send messages a school asks us to send - such as report cards, fee reminders and receipts to guardians by email, SMS or WhatsApp.
To bill schools for their use of FacetEdu and to prevent fraud and abuse.
To support users, fix problems and improve the service.
If you joined our mailing list, to send you FacetEdu news and tips - every email has an unsubscribe link.

We use school records only to provide the service to that school. We do not sell personal data, and we do not use student data for advertising.

4. Who we share data with

We share data only with service providers who help us run FacetEdu, under contracts that require them to protect it:

Cloud hosting (Microsoft Azure) to store and run the platform.
Brevo, to send emails such as confirmation codes and report cards, and to keep our mailing list.
Twilio, to send SMS and WhatsApp messages a school sends.
Paystack and Flutterwave, to process fee and subscription payments.
Google, only if you choose “Sign in with Google”.

Some providers may process data outside Nigeria. Where they do, we rely on the safeguards the NDPA allows. We may also disclose data where the law requires it.

5. Keeping data separate and secure

Each school's data is kept separate from every other school's. Passwords are stored only as secure hashes, connections are encrypted (HTTPS), sessions end automatically after a period of inactivity, and FacetEdu staff access to school accounts is restricted and logged.

6. How long we keep data

We keep school records for as long as the school's account is active, so the school can keep its academic and financial history. A school owner can download all of the school's data at any time from Settings, and can ask us to delete it when they leave. Signups that are never confirmed are disabled automatically. We keep billing records as long as tax and accounting law requires.

7. Your rights

Under the NDPA you can ask to access, correct or delete your personal data, object to or restrict how it is used, ask for a copy in a portable format, and withdraw consent where we rely on it. For school records, we will pass your request to your school and help it respond. You can also complain to the Nigeria Data Protection Commission.

8. Children

Students do not create their own FacetEdu accounts. Their information is entered and managed by their school, and guardians receive updates from the school. Schools are responsible for having the right basis, such as parental consent where needed, to record student information.

9. Changes and contact

We may update this policy as FacetEdu changes; the date at the top shows the latest version. For any privacy question or request, email info@facetedu.com. See also our Terms of Service.

1. Who is responsible for your data

FacetEdu is responsible for account and billing data - for example the school owner's name, email and phone, login details, and the platform invoices we issue to schools.

If you are a parent, student or staff member with a question about records your school keeps, please contact your school first; we will help them respond.

2. Data we collect

Account data: name, email address, phone number (optional), role, school, and a securely hashed password.

Sign in with Google: if you choose it, Google shares your name, email address and the fact that the email is verified. We do not receive your Google password or access your Gmail, contacts or files.

School records entered by schools: student and guardian details, classes, attendance, scores and report cards, fee structures, invoices and payment records.

Payment data: payments are processed by our payment partners (Paystack or Flutterwave). We receive confirmation of the payment and a reference - we never see or store full card details.

Mailing list: if you join our mailing list, your email address and (if you give it) your first name.

Technical data: IP address, browser type, and logs of sign-ins and important actions, kept for security and troubleshooting.

3. How we use data

To provide FacetEdu to schools: running attendance, gradebooks, report cards, fees and payments.

To create and secure accounts, including email confirmation codes, password resets and sign-in with Google.

To send messages a school asks us to send - such as report cards, fee reminders and receipts to guardians by email, SMS or WhatsApp.

To bill schools for their use of FacetEdu and to prevent fraud and abuse.

To support users, fix problems and improve the service.

If you joined our mailing list, to send you FacetEdu news and tips - every email has an unsubscribe link.

We use school records only to provide the service to that school. We do not sell personal data, and we do not use student data for advertising.

4. Who we share data with

We share data only with service providers who help us run FacetEdu, under contracts that require them to protect it:

Cloud hosting (Microsoft Azure) to store and run the platform.

Brevo, to send emails such as confirmation codes and report cards, and to keep our mailing list.

Twilio, to send SMS and WhatsApp messages a school sends.

Paystack and Flutterwave, to process fee and subscription payments.

Google, only if you choose “Sign in with Google”.

Some providers may process data outside Nigeria. Where they do, we rely on the safeguards the NDPA allows. We may also disclose data where the law requires it.

6. How long we keep data

7. Your rights