Data Security

1. Our Security Commitment

We treat your data with the highest level of care. Every technical and organizational decision we make prioritizes the security and privacy of your information.

Our security measures are designed to protect against unauthorized access, disclosure, alteration, and destruction of your data.

2. Encryption

Data in Transit

All data transmitted between your browser and our servers is encrypted using industry-standard TLS/SSL protocols. This includes:

• Login credentials
• Student and staff information
• Financial transactions
• Communication between parents and schools

Data at Rest

Sensitive data stored in our databases is encrypted using AES-256 encryption. This includes:

• Personal identification information
• Payment information
• Authentication credentials

3. Access Controls

We implement strict role-based access controls (RBAC) to ensure users only have access to data they need:

• School administrators: Access to their school's data only
• Teachers: Access to their assigned classes and students
• Parents: Access to their own children's information only
• Students: Access to their own records

Two-factor authentication (2FA) is available for all users and required for administrative accounts.

4. Data Backups

We maintain regular backups of all data:

• Daily automated backups
• Backups stored in geographically separate locations
• Encrypted backup storage
• Regular backup restoration testing

Backups are retained for 90 days and then securely deleted.

5. Infrastructure Security

Our infrastructure is built with security in mind:

• Hosted on secure, certified cloud infrastructure
• Network segmentation and firewalls
• Intrusion detection and prevention systems
• DDoS protection
• Regular security patches and updates
• Continuous monitoring and logging

6. NDPR Compliance

Skool Circle is designed to help schools comply with the Nigeria Data Protection Regulation (NDPR):

• Lawful basis for data processing
• Data minimization principles
• Purpose limitation
• Storage limitation (90-day retention after account closure)
• Data subject rights support
• Data breach notification procedures

All data is stored within Nigeria or in jurisdictions with adequate data protection laws.

7. Incident Response

In the event of a security incident, we have a documented incident response plan:

• Immediate investigation and containment
• Assessment of impact
• Notification to affected parties within 72 hours
• Notification to Nigerian Data Protection Bureau (NDPB) as required
• Remediation and prevention measures
• Post-incident review and improvement

8. Third-Party Security

We carefully vet all third-party services we use:

• Google Workspace: SOC 2/3 certified, ISO 27001 compliant
• Cloudinary: ISO 27001 certified for media storage and processing
• Payment processors: PCI DSS compliant
• SMS providers: Encrypted transmission, minimal data retention

We maintain data processing agreements with all third parties that handle your data.

9. Employee Training

All Skool Circle employees undergo regular security training:

• Security awareness training
• NDPR compliance training
• Secure coding practices
• Phishing and social engineering awareness

All employees sign confidentiality agreements and are subject to background checks.

10. Security Audits

We conduct regular security assessments:

• Internal security reviews
• Vulnerability scanning
• Penetration testing by independent security firms
• Code security reviews

11. Report a Security Issue

If you discover a security vulnerability, please report it to us immediately. We take all security reports seriously.

Contact us at:

Email: security@skoolcircle.com

Please include:

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Your contact information

We will acknowledge your report within 24 hours and provide regular updates on our investigation and remediation.

Contact Us

For general security questions, contact us:

Email: support@eskoolnow.com