Privacy Policy

Campuslu is software that schools use to run their administration. When a school uses Campuslu, the school decides what information to record about its students, families and staff, and why. Campuslu stores and processes that information for the school, following the school's instructions.

So if you are a parent, student or employee of a school, the school is your first contact for questions about your records, including corrections. We will pass on any request that reaches us.

Campuslu is directly responsible for the data covered in section 3: school account holders, website visitors, enquiries and newsletter subscribers.

Exactly what is held depends on what each school enters. It can include:

• Students: name, photo, date of birth, CNIC or B-Form number, address, class, attendance, marks, result cards, fees and discounts
• Parents and guardians: name, CNIC, phone, WhatsApp number, email, address and their link to their children
• Staff: name, photo, CNIC, contact details, employment details, attendance, leave, salary, loans and payslips
• Sign-in details: email, phone, CNIC or username, a hashed password, and when the person last signed in
• Messages sent through Campuslu, and a record of important actions, such as who changed a payment

A school may also record sensitive details about a student, such as religion, disability, health, mental health, vaccination, or refugee status. These are optional, and only staff the school has given access can read them. Schools should only record what they genuinely need.

• When a school signs up: the school's details and the owner's name, email and phone
• When you send a form on our website: what you typed, your IP address, your browser details, the page you came from and any campaign tags in the link
• When you subscribe to our newsletter: your email address, and whether you have confirmed it
• When you try the live demo: an optional phone number if you ask to keep your demo longer, and a scrambled form of your network address, used to limit how many demo schools one network can open
• When a school pays us: invoices, amounts and payment details the school gives us
• Technical logs that keep the service secure and running

We use school data only to provide Campuslu to that school: running its records, generating documents, sending the messages the school has set up, keeping the service secure and giving support.

We use the data in section 3 to set up and bill accounts, answer enquiries, and send account notices. We send the newsletter only to people who confirmed their subscription, and each email has an unsubscribe link.

We do not sell personal data. We do not use school data for advertising.

We use a small number of providers to run the service:

• Amazon Web Services: hosts our servers, database, uploaded files and backups, and sends our email
• Zoho Mail: holds the mailbox that receives messages sent to our own email address
• Cloudflare: may run the "I am human" check on our website forms and demo
• Meta (WhatsApp): carries WhatsApp messages and sign-in codes, where WhatsApp is switched on
• An SMS provider: carries text messages, where SMS is switched on

Inside a school, what each person can see depends on their role and the access the school gives them. Parents see their own children's records. A small number of Campuslu staff can reach school data when needed for support or to keep the service running. Their sign-in requires two-step verification, and their changes are recorded in an audit log.

We also disclose data if the law requires it.

Our servers, database, uploaded files and backups are in Amazon Web Services' Stockholm region, in Sweden, so school data is stored outside Pakistan. Messages sent to our own mailbox are held by Zoho, in the United States. By using Campuslu, a school accepts this storage.

• School data: for as long as the school uses Campuslu. Records of students and staff who have left stay available to the school
• If a school cancels: we keep its data for 90 days so it can return or take a copy, and then delete it
• Backups: deleted data can remain in our backups until they expire, which takes up to about 13 months. Backups are only used to restore the service
• Demo schools: deleted about an hour after they end
• Enquiries and newsletter records: for as long as they are useful to answer you or keep our list accurate. Ask us to delete yours at any time

A school can export its records from Campuslu's reports while it is a customer, and can ask us for help taking a copy.

Connections to Campuslu are encrypted. Passwords and one-time PINs are stored only in hashed form, so nobody can read them. Schools share one system, and checks on every request keep each school to its own data. Staff access is based on permissions, important actions are logged, and the database is backed up every night.

No online service can promise perfect security. If a breach affects a school's data, we will tell that school without unreasonable delay.

Most student records are about children. Schools enter this information and are responsible for having the right to do so, including any permission they need from parents or guardians. Younger students have no sign-in of their own unless the school turns it on for their class. We do not knowingly collect information directly from children through our website.

Campuslu does not use advertising or analytics cookies. We use only what the service needs:

• A secure sign-in cookie on the school portal, which keeps you signed in
• Browser storage for your light or dark theme, your school's colour and your recent pages
• Temporary browser storage on our website that remembers the page or campaign link that brought you here, sent to us only if you submit a form

You can ask to see, correct or delete your information. If a school holds it, please ask the school first, because the school decides what its records must keep. For anything Campuslu holds directly, contact us and we will respond. Some records may need to be kept, for example where the law or a school's accounts require it.

If we change this policy, we will update the date at the top, and tell schools about important changes.

Questions or requests: hello@campuslu.com.