BriteEducation ("we," "our," or "us") is committed to protecting the privacy and security of the personal information we process. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our BriteEducation Management System ("BEMS").

We take data protection seriously, especially in the educational context where we handle sensitive information about students, staff, and educational institutions. Please read this Privacy Policy carefully to understand our practices regarding your personal data.

1.1 Educational Institution Data

We collect information provided by educational institutions including:

• Institution name, address, contact information, and administrative details
• Financial records, accounting data, and transaction histories
• Course catalogs, curriculum information, and program structures
• Asset information, library resources, and facility management data

1.2 Student Data

We process student information, including:

• Personal identification information (name, address, contact details, ID numbers)
• Academic records (courses, grades, attendance, assignments, and assessments)
• Financial information related to fees, payments, and scholarships
• Enrollment and registration data

1.3 Staff and Faculty Data

For institutional staff and faculty, we collect:

• Personal and professional information
• Employment details, qualifications, and work history
• Course assignments, teaching loads, and performance metrics
• System access and usage data

1.4 Technical Data

We automatically collect certain information when you use our system:

• IP addresses, browser type, device information
• Login data, access times, and pages viewed
• System usage patterns and feature utilization
• Cookies and similar tracking technologies

We use the collected information for the following purposes:

• Providing and maintaining our education management system
• Processing student enrollments, registrations, and academic records
• Managing financial transactions, invoicing, and payment processing
• Facilitating e-learning, course delivery, and virtual classrooms
• Supporting library management and resource allocation
• Enabling asset tracking and management
• Generating analytical reports and insights
• Improving and optimizing our services
• Providing customer support and addressing technical issues
• Ensuring system security and preventing unauthorized access
• Complying with legal obligations and regulatory requirements

We may share information with third parties in the following limited circumstances:

• Service Providers: We engage trusted third-party companies to help us operate our business and provide services (such as hosting, data storage, and payment processing).
• Educational Partners: With your institution's permission, we may share data with educational partners like examination boards or accreditation bodies.
• Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, user information may be transferred as part of the transaction.
• Consent: We may share information with your consent or at your direction.

We do not sell, rent, or lease personal data to third parties for marketing purposes.

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption of sensitive data in transit and at rest
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• System monitoring and intrusion detection
• Regular data backups and disaster recovery procedures
• Staff training on data protection and security practices

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

We retain personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The retention periods will vary depending on:

• The nature of the data and the purposes for which it is processed
• Legal, regulatory, contractual, or operational requirements
• Academic record retention policies of the educational institution

When personal data is no longer necessary, we will securely delete or anonymize it.

Depending on your location, you may have certain rights regarding your personal information, which may include:

• Access: Request confirmation of whether we process your personal data and receive a copy of the personal data we have about you.
• Rectification: Request correction of inaccurate or incomplete personal data.
• Erasure: Request deletion of your personal data in certain circumstances.
• Restriction: Request restriction of processing of your personal data in certain circumstances.
• Data Portability: Request transfer of your personal data to you or a third party in a structured, commonly used, and machine-readable format.
• Objection: Object to processing of your personal data in certain circumstances.

Please note that many of these rights are subject to limitations and exceptions under applicable law. If you are a student, parent, or staff member at an educational institution that uses our services, you should first contact your institution regarding such requests, as they control the data processed through our system.

Our system is designed to help educational institutions comply with various education regulations and data protection laws, which may include:

• Family Educational Rights and Privacy Act (FERPA)
• General Data Protection Regulation (GDPR)
• Protection of Personal Information Act (POPIA)
• State or regional student privacy laws

While we provide tools to help institutions comply with these regulations, each institution is responsible for ensuring their use of our system complies with applicable laws and regulations.

Our services are directed to educational institutions and are not intended for children under 13 years of age to use independently. We do not knowingly collect personal information directly from children under 13. If you are a parent or guardian and believe we have collected information from your child, please contact us.

When we process student data provided by educational institutions, we do so as a service provider to the institution, which has obtained appropriate consents or has other legal bases for providing such data.

We may transfer, store, and process your information in countries other than your own. Our servers are primarily located in secure data centers in Zimbabwe and South Africa. When we transfer personal data to countries outside your jurisdiction, we implement appropriate safeguards to ensure your information remains protected.

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: privacy@britelink.io

Phone: +263 775 600 726

Address: BriteLink.io, 123 Innovation Drive, Harare, Zimbabwe

The following Terms of Service ("Terms") govern your access to and use of the BriteEducation Management System (BEMS) provided by BriteLink.io. By accessing or using our services, you agree to be bound by these Terms.

BriteEducation provides a comprehensive education management system designed for educational institutions including schools, colleges, and universities. Our services include but are not limited to student management, financial management, e-learning tools, asset management, library systems, and administrative solutions.

When registering for an account, you must provide accurate and complete information. You are responsible for:

• Maintaining the confidentiality of your account credentials
• Restricting access to your account
• All activities that occur under your account

You must notify us immediately of any unauthorized use of your account or any other security breach.

Our services are provided on a subscription basis. Fees and payment terms will be specified in your service agreement. Unless otherwise specified:

• Subscription fees are non-refundable
• Subscription periods may be monthly, annually, or as agreed upon
• We reserve the right to change subscription fees with notice prior to renewal
• Access to services may be suspended for non-payment

You agree to use our services only for lawful purposes and in accordance with these Terms. You agree not to:

• Use the services in any way that violates applicable laws or regulations
• Infringe upon intellectual property rights or privacy rights of others
• Attempt to gain unauthorized access to any part of the services
• Use the services to transmit harmful code or malware
• Interfere with or disrupt the integrity or performance of the services
• Collect or harvest any information from the services except as expressly permitted

Educational institutions retain ownership of all data they input into the system. You grant us a limited license to use this data solely for the purpose of providing and improving our services. We will not use institution data for marketing purposes without explicit consent.

The BEMS platform, including its features, functionality, and content (excluding customer data), is owned by BriteLink.io and is protected by copyright, trademark, and other intellectual property laws. These Terms do not transfer any ownership rights or grant any license to our intellectual property beyond what is necessary to use the services.

We strive to maintain high availability of our services but do not guarantee uninterrupted access. Support is provided according to the terms specified in your service agreement. Standard maintenance windows will be communicated in advance whenever possible.

THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, IN NO EVENT SHALL BRITELINK.IO BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING WITHOUT LIMITATION, LOSS OF PROFITS, DATA, USE, GOODWILL, OR OTHER INTANGIBLE LOSSES, RESULTING FROM YOUR ACCESS TO OR USE OF OR INABILITY TO ACCESS OR USE THE SERVICES.

We may terminate or suspend your account and access to the services for violation of these Terms or for any other reason at our discretion. Upon termination, we will provide a mechanism for you to export your data within a reasonable timeframe, after which we may delete your data in accordance with our data retention policies.

These Terms shall be governed by and construed in accordance with the laws of Zimbabwe, without regard to its conflict of law principles. Any disputes arising under these Terms shall be subject to the exclusive jurisdiction of the courts of Zimbabwe.

We may modify these Terms from time to time. We will notify you of any material changes by posting the updated Terms on our website or through other communication channels. Your continued use of the services after such modifications constitutes your acceptance of the revised Terms.

For questions about these Terms, please contact us at legal@britelink.io.