Privacy Policy

1. Introduction

VigorEcon Analytics Ltd. ("VigorEcon", "we", "us") operates the VigorEcon EduPlatform ("the Platform"), a school management suite for Ghanaian and West African schools. This Privacy Policy explains how we collect, use, store, and protect personal data when you use our Platform.

We are committed to protecting the privacy of students, parents, teachers, and school staff who use our Platform. This policy is designed to comply with the data protection principles of the Ghana Data Protection Act, 2012 (Act 843).

2. Data We Collect

We collect the following categories of personal data:

• Identity data: Name, date of birth, gender, photograph
• Contact data: Email address, phone number, postal address
• Academic data: Enrollment records, class assignments, attendance, scores, grades, report cards
• Financial data: Fee structures, invoices, payment records, receipts
• Health data: Health records (where applicable, with explicit consent)
• Account data: Email address, password (hashed), role, permissions
• Usage data: IP address, browser type, login timestamps, audit log entries

3. How We Use Your Data

We use your personal data to:

• Provide school management functionality (attendance, grading, report cards, finance)
• Communicate with students, parents, and staff (announcements, notifications, SMS, email)
• Generate academic and financial reports
• Maintain audit trails for accountability
• Improve and maintain the Platform
• Comply with legal and regulatory requirements

4. Data Sharing

We do not sell your personal data. We share data only with:

• Your school (the data controller) - for school operations
• SMS and email providers - for sending notifications (only the data needed to deliver the message)
• Payment processors - for processing fee payments (only transaction data, not academic records)
• Authorities - when legally required to comply with applicable laws

Student academic data is never sent to AI providers. The AI Study Tutor only receives the student's question text, not their identity, grades, or personal information.

5. Data Security

We implement appropriate technical and organizational measures:

• Passwords are hashed using bcrypt (never stored in plaintext)
• HTTPS encryption for all data in transit
• Rate limiting and brute-force protection on login
• Multi-tenant isolation - schools cannot access each other's data
• Role-based access control - users only see data their role permits
• Audit logging of all significant actions

6. Your Rights

Under the Ghana Data Protection Act, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Object to processing of your data
• Withdraw consent for optional processing
• Lodge a complaint with the Data Protection Commission of Ghana

7. Contact