Privacy Policy

Each institute that uses eCampuz decides what student, guardian and staff information it records and why. For that information the institute is the controller and eCampuz, operated by Nurix Hive, is the processor: we store and protect it on the institute's behalf and do not use it for our own purposes.

For the sign-up details of the institute's owner and for the running of the platform itself (billing, security, support), eCampuz is the controller.

Account details: name, phone number, email address and a salted, hashed password (we never store or see the password itself).

Student records entered by the institute: name, class, batch, guardian contact, attendance, fee payments and exam marks. Students are often minors, so we ask institutes to record only what they need.

Technical data: IP address, browser type and security logs, kept to protect accounts and investigate abuse.

To provide the service: sign-in, admissions, fee collection and receipts, attendance, exam results, notices and the institute's website.

To keep the platform safe: preventing fraud, rate limiting sign-in attempts and keeping an audit trail of sensitive actions such as payments, role changes and mark edits.

We do not sell personal information and we do not show advertising.

Information about a student under 18 is entered by the institute, which is responsible for having the guardian's consent. Guardians can ask the institute to show, correct or delete their child's record. Messages to guardians are sent only through WhatsApp links that the institute's staff open themselves; eCampuz does not message anyone on its own.

Only the institute's own users, according to their role: a teacher sees their batches, a student or parent sees their own records. One institute can never see another institute's data.

We use a small number of service providers to run eCampuz: Cloudflare (hosting, file storage and security), Neon (database), and an email service for one-time codes. They process data only to provide those services.

We disclose information if the law requires it.

Every connection is encrypted. Each institute's data is separated at the database level, passwords are hashed, platform administrators sign in with two-factor authentication, private files are only reachable through links that expire after five minutes, and sensitive actions are recorded in an audit log.

No system is perfectly secure. If a breach affects your information we will tell the institute without undue delay.

Data is kept while the institute's account is active. When an institute asks us to delete its account, everything is hidden immediately and permanently erased after 30 days; within those 30 days the deletion can be undone on request. Backups are overwritten on their normal cycle.

Institute owners can download all of their data at any time and can delete the account from the dashboard. Students and guardians should contact their institute to access, correct or delete personal information; the institute can do it from the dashboard.

eCampuz uses one essential cookie that keeps you signed in and one that remembers your language. We do not use advertising or cross-site tracking cookies.

If this policy changes in a way that matters, we will say so on this page and, for institute owners, by notice in the dashboard. For questions about privacy, use the Support option in your dashboard or write to the institute directly.