EduPage Privacy Policy

For EduPage, privacy is a big concern. Learn how EduPage is commited to keep your data secure.

We respect your privacy and are committed to protecting it through our compliance with this privacy policy (“Policy”). This Policy describes the types of information we may collect from you or that you may provide (“Personal Information”) in the “EduPage” mobile application (“Mobile Application” or “Service”) and any of its related products and services (collectively, “Services”), and our practices for collecting, using, maintaining, protecting, and disclosing that Personal Information.

At EduPage, we value the trust you place in us. To honor this trust and uphold our commitment to safeguarding your information, we diligently adhere to a set of guiding principles. These principles ensure that your data is handled with the utmost care, preventing misuse and guaranteeing its privacy at all times. Your data's confidentiality and security remain paramount to us, and we are steadfast in our dedication to preserving these ideals:

  • EduPage doesn’t use any sub-processors besides the necessary server hosting and infrastructure providers to process any of school’s data.
  • EduPage never shares any of the inputted data with 3rd parties. The only exception are the exports initiated by the school. EduPage allows the schools to export data to certain government, or to other systems (security hardware, accounting systems and similar). This only happens on a direct request of the school – i.e. by pressing special export button and only the prescribed data are exported.
  • EduPage guarantees the right to be forgotten. Upon request all the data inputted by the school will be removed
  • EduPage has procedures in place that will remove the data inputted by the customer after the customer cancels the service.
  • EduPage guarantees data portability. All the data inputted by the school can be exported if the school wants to transfer them to other service.
  • EduPage data are regularly back-up and EduPage uses secured data centers to store data backups.
  • EduPage technicians signed confidentiality agreement that addresses responsibilities and expected behavior with respect to the protection of information.
  • EduPage uses tiered support levels. By default, EduPage technicians do not see the personal data inputted by the schools. This access is only activated when needed for specific support and maintenance incidents.
  • EduPage collects aggregate statistical data. These data are used to improve the quality of service.
  • EduPage implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk to secure the data and to secure the communication between customer and EduPage service
  • At EduPage, we remain committed to the utmost standards of integrity and transparency. While we prioritize the privacy and security of our users' data, there may be instances where we are legally obliged to share information in response to formal requests from governmental authorities. It is our policy to cooperate fully in such circumstances, always ensuring that our actions align with the rule of law and our own stringent ethical standards. Rest assured, such disclosures are made judiciously and only when absolutely mandated.
  • EduPage platform is data redundant, all your information is instantly replicated to two physical computers.
  • EduPage uses encryption to protect data in transit. HTTPS is activated by default for all users.
  • We scan for software vulnerabilities using a combination of commercially available and purpose-built in-house tools. In case of data breach, we will immediately notify the school and conduct the necessary actions to mitigate the possible negative consequences.
  • EduPage has built it user right system, data controller can assign various user rights to different user roles to make sure only the relevant people can see or modify your data.
  • Most important modules have built in history of changes, for every change it can be traced which user and when has made this change.
  • EduPage stores logfiles of the user activity for security purposes. Our technicians will assist you in security incidents analysis i.e when someone steals password of other users. All logfiles are permanently deleted after 12 months.
  • EduPage uses Google cloud services(mainly for push notification service)
  • EduPage uses Apple cloud services(mainly for push notification service)

Changes and amendments

We reserve the right to modify this Policy or its terms related to the Mobile Application and Services at any time at our discretion. When we do, we will revise the updated date at the bottom of this page. We may also provide notice to you in other ways at our discretion, such as through the contact information you have provided.

An updated version of this Policy will be effective immediately upon the posting of the revised Policy unless otherwise specified. Your continued use of the Mobile Application and Services after the effective date of the revised Policy (or such other act specified at that time) will constitute your consent to those changes. However, we will not, without your consent, use your Personal Information in a manner materially different than what was stated at the time your Personal Information was collected.

Acceptance of this policy

You acknowledge that you have read this Policy and agree to all its terms and conditions. By accessing and using the Mobile Application and Services and submitting your information you agree to be bound by this Policy. If you do not agree to abide by the terms of this Policy, you are not authorized to access or use the Mobile Application and Services.

Contacting us

If you have any questions, concerns, or complaints regarding this Policy, the information we hold about you, or if you wish to exercise your rights, we encourage you to contact us using the details below: https://www.edupage.org/contact/

We will attempt to resolve complaints and disputes and make every reasonable effort to honor your wish to exercise your rights as quickly as possible and in any event, within the timescales provided by applicable data protection laws.

This document was last updated on September 29, 2023