Data Protection

Privacy Policy

Learn how Arclen Edu collects, secures, and manages institutional and student data.

Last Updated: June 21, 2026

Commitment to School Data Protection: Arclen Edu is built with student privacy at the forefront. We never sell student, parent, or school data, nor do we run targeted advertisements inside our administrative dashboard or mobile applications.

1 Information We Collect

We collect information to provide educational management services to onboarded schools. This falls into several categories:

A. School & Administrative Data

When an educational institution registers, we collect school names, branches, official email directories, physical campus addresses, registrar contact numbers, and payment details.

B. Student Records (Added by Admins)

School administrators upload directory details to run their tenant including student name, age, gender, grade level, parental contact info (phone/email), emergency contacts, attendance logs, exam reports, and uploaded certificates or legal PDFs.

C. Technical & Device Metadata

To secure our API and multi-tenant environment, we log user IP addresses, browser agents, operating systems, and device tokens when accessing services via the mobile client. This enables session verification and prevents cross-tenant breaches.

2 How We Use Collected Data

We process school information to fulfill administrative services requested by the customer:

To manage multi-tenant access controls, accounts, and session permissions.
To generate and issue Bonafide or Transfer Certificates on request.
To process monthly tuition invoices and record offline cash collections.
To transmit SMS alerts or notification notices generated by the school.
To debug technical crashes and maintain 99.9% application uptime.

3 Data Protection & Safety Measures

We implement a robust framework of technical security controls:

Data Isolation: Every record is scoped with a unique database schoolId to ensure absolute partition between different tenant schools.
Encryption: Data in transit is secured using Transport Layer Security (TLS 1.3), and passwords are encrypted using Bcrypt (cost factor 12).
Storage Security: PDF certificates, profile photos, and documents are stored on highly secure servers behind restricted network access policies.

4 Data Sharing & Third-Parties

We only share information with third-party sub-processors necessary to run the service:

Cloud Infrastructure: MongoDB Atlas (Database hosting) & Amazon Web Services (Secure server execution).
Communication Gateways: SMTP servers and SMS providers to route notifications to parents.
Analytics: Server performance logs are monitored internally; no external behavioral tracking is deployed.

5 User Rights & Data Deletion

Under GDPR, CCPA, and standard data protection regulations, administrators, staff, parents, and students have full control over their personal files:

Access & Correction: Users can inspect or edit their student profile via their school-admin dashboard.
Data Portability: Admins can export bulk student directories or billing lists in Excel spreadsheets.
Right to Deletion: Any user or guardian can request the permanent removal of their account. For instructions and a direct submission form, visit our dedicated Account Deletion Request Page.

6 Changes to This Policy

We reserve the right to update this privacy policy from time to time. If major changes are introduced, we will alert school administrators via the dashboard notifications module or direct email campaigns.

7 Contact Us

If you have any questions or data protection queries, contact our Data Protection Officer:

Email: support@arclenedu.com
Phone Support: +1 (555) 019-2834
Address: Arclen Tech Labs, Suite 500, Cloud Street, San Francisco, CA