Privacy Policy
Effective date: 13 May 2026
SchoolOga is operated by SCHOOLOGA TECHNOLOGIES (CAC No. 9520044), a Nigerian company. This policy explains what data we collect when you use schoologa.tech, how we use it, who else sees it, and the rights you have over it. Plain language, no surprises.
What we collect
Two broad categories:
- School operational data — fee schedules, student and parent contact information, staff records, attendance logs, payment history, and the message logs SchoolOga generates on your behalf.
- Account data — the name, email address, phone number, and password (stored as a one-way hash, never in plaintext) for each person you authorise to access your school's dashboard.
Where it lives
Your data is stored on infrastructure operated by:
- MongoDB Atlas — primary database, encrypted at rest and in transit.
- Upstash Redis — job queue for scheduled messages and background tasks.
- Cloudinary — file and image storage (school logos, audit PDFs, lesson note attachments).
How we use it
We use the data you give us to run your school the way you've asked us to. Concretely, that means:
- Sending automated WhatsApp messages to your staff and parents.
- Generating the 3-day operations audit report for your school.
- Processing fee payments via Paystack.
- Sending fallback SMS via Termii when WhatsApp delivery fails.
- Emailing receipts, reports, and account notifications via Resend.
We do not sell your data. We do not use it to train AI models. We do not share it with advertisers.
Third parties we share with
To deliver our service we share specific data points with the following processors, each under their own terms:
- Meta (WhatsApp Business Cloud API) — recipient phone numbers and the contents of WhatsApp messages we send on your behalf.
- Paystack — payment amounts, parent email addresses (or system-generated addresses where none exist), and a reference linking the payment to your school.
- Termii — phone numbers and SMS contents when SchoolOga falls back to SMS delivery.
- Resend — recipient email addresses and the contents of emails (audit reports, receipts, verification links).
Children's data
Student records on SchoolOga (names, classes, fee history) are entered and managed by the school. The school is the data controller for student information; SchoolOga is the data processor. We require schools to have obtained parental consent before entering a student's information into the platform.
Your rights
You have the right to access the data we hold on you, to correct inaccuracies, and to request deletion of your data. Some data is subject to legal retention periods (financial transaction records must be kept for 7 years under Nigerian law); we will explain any such constraints when you contact us. Email hello@schoologa.tech for any data request.
Security
Data is encrypted in transit (TLS) and at rest. Access to production systems is restricted to authorised SchoolOga staff and protected by two-factor authentication. We do not store passwords in plaintext; they are hashed with bcrypt before they ever touch our database.
If something changes
We may update this policy as our service evolves. If we make a material change, we'll notify school owners by email and update the "Effective date" at the top of this page.
Contact
For any privacy or data protection concern, reach us at hello@schoologa.tech.
SCHOOLOGA TECHNOLOGIES — CAC No. 9520044 — Lagos, Nigeria
Last updated: 13 May 2026