Privacy Policy

For the data a school enters about its students, guardians, and staff, the school is the data controller and IntelliVerze acts as a data processor on the school's instructions. For account data of the people who sign up and administer the Service, IntelliVerze acts as a controller.

• School records: school name, branding, contact details, and subscription information.
• Student records: names, dates of birth, photos, class and house placement, enrolment history, academic results, attendance, and fee accounts.
• Guardian data: names, phone numbers, and email addresses used for school communication and student password recovery.
• Staff data: names, contact details, roles, and the records they create in the course of their work.
• Technical data: sign-in events and audit logs kept for security and accountability.

• To provide the Service: running admissions, fees, grading, reports, timetables, attendance, and messaging for your school.
• To secure the Service: authentication, role-based access control, audit trails, and abuse prevention.
• To support you: responding to requests raised by school administrators.
• To bill subscriptions and communicate service notices.

We do not sell personal data, and we do not use student or guardian data for advertising.

IntelliVerze serves many schools from shared infrastructure. Every record is bound to the school it belongs to, and access is enforced per school and per role: staff of one school cannot see another school's data, and within a school each role sees only what it needs.

We use a small number of specialist providers to run parts of the Service. Each processes data only to provide its function:

• Clerk: staff sign-in and authentication.
• Cloudinary: storage and delivery of uploaded images such as student photos and school logos.
• Paystack: payment processing for subscription billing (card and mobile money details go to Paystack directly and are not stored by IntelliVerze).

Some of these providers store data outside Ghana. Where they do, we rely on their contractual data-protection commitments and industry-standard safeguards.

School data is retained for as long as the school maintains its tenant, including through lapsed subscription periods, so that records are not lost over a billing gap. When a tenant is deleted, the school's records are removed from the live systems, and residual copies age out of routine backups thereafter. Limited records may be retained longer where the law requires it (for example, financial records for statutory periods).

We protect data with encryption in transit, hashed credentials, role-based access control enforced on the server, tenant isolation checks, rate limiting, and audit logging. No system is perfectly secure; if we become aware of a breach affecting your data we will notify affected schools and the Data Protection Commission as required by Act 843.

Under Act 843, individuals have rights of access, correction, and erasure of their personal data. Students, guardians, and staff should direct requests to their school, which controls their records; we support schools in fulfilling these requests. Anyone may also contact us directly at intelliverze@gmail.com.

Student records are entered and controlled by schools as part of their legitimate educational function. Student sign-in exists only for the read-only student portal, and guardian email addresses, provided by the school, are used for account recovery and school communication.

We may update this policy from time to time. We will update the effective date above and notify school administrators of material changes through the Service or by email.