1. Overview
MyInstitution ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our educational platform.
2. Definitions
Any information relating to an identified or identifiable natural person
Any operation performed on personal data (collection, storage, use, etc.)
The educational institution that determines the purposes and means of processing
MyInstitution processes data on behalf of educational institutions
3. Information We Collect
3.1 Institution Data
- Institution name, address, and contact information
- Administrator names and email addresses
- Institutional preferences and settings
3.2 Student Data
- Student names and identification numbers
- Academic records and performance data
- Attendance records and class information
- Assessment results and progress reports
3.3 Parent/Guardian Data
- Parent/guardian names and contact information
- Email addresses and device information for push notifications
- Relationship to student information
3.4 Technical Data
- IP addresses and device information
- Browser type and version
- Usage patterns and feature interactions, collected via analytics tools
- Error logs and performance metrics
4. How We Use Your Information
Service Delivery
Provide and maintain our educational platform services
Academic Management
Process student results and generate academic reports
Parent Communication
Send free push notifications to parents/guardians about their children
Security
Protect platform integrity and detect misuse
Service Improvement
Understand usage patterns to improve platform features
Customer Support
Provide technical support and service updates
5. Basis for Processing
5.1 Contractual Necessity
Processing is necessary for the performance of our service agreement with educational institutions.
5.2 Legitimate Interests
We process data for our legitimate interests in providing and improving the Service.
5.3 Legal Obligation
Processing may be necessary to comply with applicable Bangladeshi law.
5.4 Institutional Consent
The registering institution is responsible for obtaining any consent required from parents or guardians before submitting a student's information to the Service.
6. Data Sharing and Disclosure
7. Data Security Measures
Encryption
Data is encrypted in transit using TLS
Access Controls
Role-based access controls limit who can view institutional data
Infrastructure
We rely on Supabase's security infrastructure for database and authentication protection
Ongoing Review
We review our security practices as the platform grows
No system can guarantee absolute security. We do not currently hold a specific third-party security certification, and will update this section if that changes.
8. Data Retention
8.1 Retention Periods
We retain personal data only as long as necessary for the purposes outlined in this policy:
- Active Accounts: Duration of use plus 30 days
- Inactive Accounts: 24 months after last activity
- Student Records: As required by the institution or applicable educational regulations
8.2 Data Deletion
Upon account termination or expiration of the retention period, data is deleted or anonymized.
9. Your Data Rights
As a matter of good practice, and regardless of your location, we offer the following rights to individuals whose data is processed on our platform:
Right to Access
Request a copy of your personal data
Right to Rectification
Request correction of inaccurate data
Right to Erasure
Request deletion of your personal data
Right to Restrict
Request limitation of data processing
Right to Object
Object to certain processing activities
Right to Portability
Request transfer of data to another service
To exercise any of these rights, contact us at [email protected]. Requests involving student data should be directed through the student's institution, as they control that data.
11. Data Location
Our infrastructure, including Supabase and PostgreSQL-based hosting, may store data in facilities located outside Bangladesh, depending on our hosting provider's infrastructure. We take reasonable steps to work with providers who apply industry- standard security practices, but do not currently claim compliance with any specific international data-transfer framework.
12. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of material changes by:
- Email notification to registered users
- In-platform announcements
- Updated "Last Updated" date
Continued use of our services after changes constitutes acceptance of the updated policy.
Contact Us
For privacy-related questions or to exercise your data rights:
General Inquiries: [email protected]
Response Time: Within 72 hours