Privacy Policy
Klaxtrix SMS-EDU is committed to strict data security, tenant isolation, and regulatory compliance. This policy details how institutional data, student records, and portal interactions are processed.
Overview & Scope
Klaxtrix SMS-EDU ("Klaxtrix", "we", "our", or "us") operates a multi-tenant cloud-based School Management System (SaaS). We serve educational institutions, including early childhood centers, primary schools, and secondary academies ("Subscribers" or "Institutions").
This Privacy Policy applies to all services provided under the Klaxtrix domain (`klaxtrix.com`, `klaxtrix.site`) and custom tenant portals (`[subdomain].klaxtrix.com`). Educational institutions act as the primary **Data Controllers** of their academic and student data, while Klaxtrix operates as a secure **Data Processor**.
Information We Collect
To manage institutional operations, grade centers, and parent communications, Klaxtrix collects and processes the following data categories:
- A. Institutional & Administrative DataSchool name, domain, motto, official address, state/LGA of origin, bank payout details, school emblem/logo, and administrative credentials.
- B. Student Personal & Demographic DataFull student names, assigned admission numbers, dates of birth, passport photographs, gender, state/LGA of origin, religion, previous school records, and optional medical details (blood group, genotype, allergies).
- C. Guardian & Parent DataFull names, phone numbers, email addresses, residential addresses, and parent-student relationship mapping.
- D. Academic & Assessment RecordsClass enrollments, attendance logs, timetable schedules, continuous assessment scores, examination broadsheets, report card entries, and assignment submissions.
- E. Financial Transaction DataSchool fee invoices, payment receipts, Paystack transaction reference identifiers, and payment status. Note: Sensitive debit/credit card numbers are processed directly by Paystack (PCI-DSS Level 1 compliant) and are never stored on Klaxtrix servers.
Student & Child Data Protection
Because Klaxtrix serves educational institutions with minor students (under 18 years of age), child privacy protection is integrated into our core system architecture:
Subscribing schools obtain parent/guardian consent during student admission. Klaxtrix processes minor student data strictly on behalf of the subscribing school for legitimate educational purposes. Student data is never subjected to targeted advertising, behavioral profiling, or commercial marketing.
How We Use Information
We use collected information solely for essential educational and platform operations:
Generating terminal report cards, managing attendance tracking, calculating grade point averages, and maintaining official transcripts.
Delivering real-time portal updates, result release alerts, fee notices, and automated SMS messages via Termii.
Enabling online school fee payments via Paystack, generating payment receipts, and providing revenue analytics to school admins.
Enforcing role-based access control (RBAC), detecting suspicious login activities, and maintaining system health monitoring.
Tenant Data Isolation & Security Architecture
Klaxtrix uses a high-fidelity Partner-Cloud Architecture to ensure complete tenant data segregation:
- Strict Subdomain & Schema IsolationDatabase queries are dynamically scoped using connection resolvers by `school_id`. No tenant can query or access another institution's database records.
- End-to-End EncryptionAll data in transit is protected using TLS 1.3 encryption. Sensitive database attributes are encrypted at rest using AES-256 with Master Key key rotation.
- Progressive Web App (PWA) Offline Cache SecurityPWA service workers cache static application assets locally. User credentials and sensitive academic records are strictly excluded from client-side persistent storage.
Third-Party Data Processors
We partner with trusted infrastructure providers to deliver cloud hosting, payment gateways, and SMS alerts:
* We do NOT sell, rent, or trade student, parent, or school data to any third-party advertisers or data brokers.
Data Retention & Institutional Sovereignty
Institutions retain complete ownership of their data ("Data Sovereignty"). Data is retained for the duration of the institution's active subscription. Upon subscription termination or explicit administrative request, Klaxtrix provides a 30-day grace period for full academic record export, followed by permanent deletion from active database servers.
Institutional & User Rights
Under applicable data protection regulations (such as NDPR / NDPA 2023), school administrators and guardians possess the following rights:
Contact Data Protection Officer
If you have questions regarding this Privacy Policy or wish to submit a data protection inquiry, please contact our Data Security Team: