Privacy Policy & Student Data Protection
Effective Date: January 1, 2026 • Last Revised: August 24, 2026 • Version 2.4
1. Commitment to Educational Privacy
Vento Technology ("we", "our", or "us"), operating the EduERP Platform (accessible at eduerp.us), is committed to safeguarding the privacy and security of educational institutions, administrators, faculty, staff, parents, guardians, and students.
EduERP operates strictly as a Data Processor on behalf of subscribed educational institutions ("Tenants" or "Data Controllers"). We process institutional and personal data exclusively according to customer instructions and in strict compliance with applicable data protection legislation.
2. Categories of Information Processed
Institutional Data
Institution legal name, EIIN, accreditation credentials, campus addresses, administrative emails, bank accounts, and academic fee rules.
Student & Guardian Data
Student full name, date of birth, emergency contact, guardian national ID details, daily attendance, examination scores, and fee transaction logs.
Faculty & Employee Data
Faculty designations, department assignments, biometric clock-in logs, payroll history, and LMS course materials.
System & Security Logs
Cryptographic session tokens, IP address audit logs, login timestamps, and RBAC action audits for compliance tracking.
3. Zero Commercial Monetization of Student Data
EduERP enforces a strict zero-monetization policy:
- We NEVER sell, rent, lease, or trade student personal data, academic records, or behavioral metrics to third-party advertisers.
- We NEVER serve behavioral or commercial advertisements within the EduERP application, portals, or mobile interfaces.
- Student academic records are permanently owned by the subscribing educational institution and may be deleted or exported at any time.
4. Technical Security Measures & Multi-Tenant Isolation
EduERP implements enterprise-grade technical and organizational safeguards:
5. Data Protection Officer (DPO) Contact
If you have questions regarding this Privacy Policy, wish to exercise data subject rights (access, rectification, erasure), or require a formal Data Processing Addendum (DPA), contact: