This Privacy Policy explains how Communex ("we", "us", or "our") collects, uses, and discloses information about you when you use our website and school management services (the "Service").

1. Information We Collect

1.1 Information You Provide to Us

We collect information you provide directly to us, such as when you create an account, update your profile, or use our Service.

• Account Information: Name, email address, phone number, school name, and billing details.
• School Data: Student records, parent information, staff details, attendance records, and other data you input into the system. You retain ownership of this data.
• Communications: Content of messages you send to us for support or feedback.

1.2 Information We Collect Automatically

When you access or use our Service, we automatically collect certain information:

• Log Data: IP address, browser type, operating system, referral URLs, pages visited, and timestamps.
• Device Information: Hardware model, operating system version, and unique device identifiers.
• Usage Information: How you interact with our Service (e.g., features used, buttons clicked) to help us improve user experience.
• Cookies: We use cookies to maintain your session and preferences. We do NOT use third-party advertising cookies.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service.
• Process transactions and send related information, including confirmations and invoices.
• Send you technical notices, updates, security alerts, and support and administrative messages.
• Respond to your comments, questions, and requests.
• Monitor and analyze trends, usage, and activities in connection with our Service.
• Detect, investigate, and prevent fraudulent transactions and other illegal activities.

3. Information Sharing and Disclosure

We do not share your personal information with third parties except as described in this policy:

• Service Providers: We share data with trusted third-party vendors who help us operate our business (e.g., hosting providers like Vercel/AWS, payment processors like Stripe/ToyyibPay, analytics tools like PostHog). These vendors are contractually obligated to protect your data.
• Legal Requirements: We may disclose information if required to do so by law or in the good faith belief that such action is necessary to comply with a legal obligation, protect and defend our rights or property, or protect the personal safety of users or the public.
• Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business, your information may be transferred as a business asset.

4. Data Security and Retention

We take reasonable measures to help protect information about you from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. We use industry-standard encryption (SSL/TLS) for data in transit and at rest.

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes described in this policy. When you delete your account, we will delete your data in accordance with our data retention schedule, unless we are legally required to keep it.

5. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

• Access and Update: You can access and update most of your account information directly within the Service settings.
• Data Portability: You have the right to request a copy of your data in a structured, machine-readable format.
• Deletion: You can request that we delete your personal information, subject to certain legal exceptions.
• Communication Preferences: You may opt out of receiving promotional emails from us by following the instructions in those emails. You cannot opt out of receiving non-promotional administrative messages.

6. Children's Privacy

Our Service is intended for use by schools and educational institutions. We process student data solely on behalf of and under the instruction of our school customers. We do not use student data for any purpose other than providing the Service to the school. We rely on the school to obtain any necessary parental consents for the collection of student data.

7. International Data Transfers

We may transfer the information we collect about you to countries other than the country in which the information was originally collected. Those countries may not have the same data protection laws as the country in which you initially provided the information. When we transfer your information to other countries, we will protect that information as described in this policy.

8. Changes to This Policy

We may update this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of the policy and, in some cases, we may provide you with additional notice (such as adding a statement to our homepage or sending you a notification). We encourage you to review the Privacy Policy whenever you access the Service to stay informed about our information practices and the choices available to you.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at [email protected].