SERVICE POLICIES

Privacy notice

Draft for review before launch. The service operator, data-controller roles, retention periods, legal bases, data-subject request process and jurisdiction-specific disclosures must be confirmed before publication.

Information in school workspaces

Depending on the features a school uses, the platform may process account and contact details, school membership, student and guardian records, attendance, assignments, assessments, reports, messages, complaints, payroll data, subscription records and uploaded files.

How information is used

Information is used to authenticate users, provide school features, protect school-level access, deliver notifications and requested services, support billing, and maintain platform security. School data is associated with a school workspace and protected by role-based access controls.

Service providers

SatGold Cloud is designed to use Supabase for authentication, database and storage; Vercel for hosting and APIs; Resend for transactional email; Google Gemini for authorized staff AI requests; and Paystack or Flutterwave for payments. When configured, information needed for a requested feature may be processed by the relevant provider.

AI requests

Authorized staff prompts are sent to Gemini through the server API. The platform does not intentionally retrieve student records for AI prompts. Staff should not include personal or confidential student information in prompts and must review generated drafts.

Security and retention

The application uses authenticated access, school-level policies, and server-side handling for privileged operations. Final retention periods, incident procedures, backup schedules and security contact details need to be set by the service operator before launch.

Contact and requests

Use the SatGold Cloud contact form for privacy questions. Final instructions for access, correction, deletion and other privacy requests will be added after the operator's process is confirmed.