Privacy Policy & Data Protection

1. Institutional Data Ownership

When your school registers for EduPak ERP, all data ingested into the system remains the exclusive, uncompromised property of your educational institution. TkSoft Solutions acts solely as a secure data processor operating cloud infrastructure on your behalf.

School administrators retain full authority to export complete database backup archives (Excel/CSV/PDF format) at any time without penalty or exit barriers.

2. Information We Collect & Store

To provide high-reliability SaaS school management services, EduPak collects and stores the following categories of information:

• Institutional Details: School name, campus branch addresses, official contact emails, logo, and phone numbers.
• Student & Guardian Bio-Data: Student full name, date of birth, gender, 13-digit NADRA B-Form, Father/Guardian CNIC, home address, and emergency contacts.
• Financial & Fee Records: Monthly fee structures, voucher history, collection ledgers, late fine logs, and payment method receipts.
• Staff & Payroll Information: Teacher names, CNIC, designation, basic monthly salary, attendance punch logs, and leave records.
• Mobile App Diagnostics: Device token for push notification delivery, app version logs, and crash diagnostics.

3. Purpose of Data Processing

Collected data is used strictly for legitimate educational administration and system operation, including:

4. Cloud Infrastructure & Multi-Tenant Security

EduPak implements enterprise-grade security controls to safeguard your data against loss, unauthorized access, or corruption:

• 256-bit SSL Encryption: All HTTP traffic between client web browsers/mobile apps and EduPak cloud servers is encrypted using standard TLS 1.3 encryption.
• Multi-Tenant Data Isolation: Campus databases use isolated tenant routing architecture preventing cross-tenant data leaks.
• Automated Daily Offsite Backups: System back-ups are created automatically every 24 hours and stored in encrypted offsite cloud storage vaults.

5. Third-Party Service Providers

EduPak integrates with select trusted third-party providers solely to provide core software features (e.g. payment processing and communication). These third parties receive only the minimum necessary data to perform their functions and are legally bound to uphold data security:

• Payment Gateways: EasyPaisa, JazzCash, 1Link APG (processing transaction amounts and consumer IDs).
• Messaging Gateways: Meta WhatsApp Business API & Telco SMS Gateways (delivering parent notifications).

6. Data Retention & Contract Termination

We retain your school data for as long as your subscription active contract remains in effect. Upon account cancellation or non-renewal:

1. The subscriber institution is granted a 30-day grace period to download full data exports.
2. After 30 days, tenant database records are permanently purged from active production servers in accordance with data sanitation protocols.

7. Contact Data Protection Desk

If you have any questions, security disclosures, or data privacy requests, please reach out to our legal and data protection desk: