Privacy Policy

English

1. Introduction

EduAutomate ("EduAutomate", "we", "us", or "our") operates the website and software platform at https://eduautomate.app (the "Service"). This Privacy Policy explains how we collect, use, store, share, and protect information when schools, training centers, staff members, and end users interact with our Service.

EduAutomate is a multi-tenant software platform designed for language schools and training centers, primarily in Myanmar. Each school ("Tenant") maintains its own operational data within an isolated workspace.

By registering for, accessing, or using the Service, you acknowledge that you have read this Privacy Policy. If you do not agree, please do not use the Service.

2. Who Is Responsible for Your Data

For platform-level operations (account creation, billing, security, and support), EduAutomate acts as the data controller.

For day-to-day student records, payment records, chat history, and school-specific content entered by a Tenant, the Tenant (your school) is primarily responsible for that data. EduAutomate processes such data on the Tenant's behalf to provide the Service.

Contact: [email protected]

3. Information We Collect

We may collect the following categories of information:

3.1 School and account information

• School name, slug, contact phone, logo, and settings
• Staff account details: name, email address, role, and permissions
• Login credentials (passwords are stored using one-way hashing; we do not store plain-text passwords)
• Subscription plan, billing status, and credit balance

3.2 Student and enrollment information

• Student name, phone number, student ID code, and optional identity documents (such as NRC or passport references)
• Course, batch, and enrollment records
• Payment amounts, transaction references, installment status, and enrollment balances
• Payment slip images uploaded for manual verification

3.3 Messaging and CRM information

• Facebook Messenger Page ID, Page name, and encrypted Page access tokens when a school connects Facebook
• Telegram bot token, bot username, and webhook secrets when a school connects Telegram
• Lead/inquiry records from Messenger and Telegram, including sender IDs, display names, and chat history
• Chat history is trimmed to the latest 30 messages per lead for operational use
• Comment-to-Messenger invite activity related to Facebook Page posts

3.4 AI and usage information

• FAQ knowledge base content provided by schools
• Prompts and message content sent to AI features for automated replies
• Credit ledger entries showing feature usage (for example FAQ chat, OCR, or generation actions)
• Logs related to AI success, failure, and credit refunds

3.5 Technical and security information

• IP address, browser type, device information, and request logs
• Session identifiers, authentication events, and security audit logs
• Webhook delivery metadata from Meta, Telegram, and other integrated providers
• Cloudflare Turnstile verification tokens during login and registration (when enabled)

4. How We Use Information

We use collected information to:

• Provide, operate, maintain, and improve the Service
• Authenticate users and enforce role-based access within each school
• Process subscriptions, top-ups, invoices, and manual payment verification
• Deliver AI-powered FAQ replies and related automation features
• Receive and respond to inbound Messenger and Telegram messages on behalf of connected schools
• Send operational alerts, low-credit notifications, and support communications
• Detect abuse, fraud, security incidents, and violations of our Terms of Service
• Comply with applicable legal obligations and respond to lawful requests

5. Third-Party Services

The Service integrates with third-party providers. When you use these features, relevant data may be transmitted to them according to their own privacy policies:

• Meta / Facebook Messenger: OAuth login, Page connection, webhook events, and outbound messages
• Telegram: Bot connection, webhook events, and outbound messages
• Google Gemini: AI-generated FAQ and chat responses
• Cloudflare: DNS, CDN, security, and Turnstile bot protection
• DigitalOcean / cloud infrastructure: application hosting, database, Redis, and object storage for files such as logos, slips, and invoices
• Email providers: transactional email for alerts, invoices, and account communication

We do not sell your personal information. We share data with service providers only as necessary to operate the Service, under appropriate confidentiality and security obligations.

6. Data Storage and Security

• Payment slips, invoices, and other sensitive files are stored in private storage and are not exposed through public URLs
• Messaging channel tokens and similar secrets are encrypted at rest where supported by the application
• Database connections may use encrypted transport (SSL/TLS)
• Access to production systems is restricted to authorized personnel
• We use industry-standard measures such as hashed passwords, HTTPS, webhook signature verification, and rate limiting

No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary by data type, including:

• Active account and school operational data: retained while the account remains active
• Lead chat history: trimmed operationally to the latest 30 messages per lead
• Billing and payment records: retained as needed for accounting, dispute resolution, and legal compliance
• Security and access logs: retained for a limited period unless longer retention is required for investigation or legal reasons

When an account is closed or upon verified request, we will delete or anonymize data where reasonably practicable, subject to legal and backup retention requirements.

8. Your Rights and Choices

Depending on your role and applicable law, you may have the right to:

• Access information held about you or your school
• Request correction of inaccurate information
• Request deletion or export of certain data, subject to legal and contractual limits
• Disconnect Facebook Messenger or Telegram integrations from school settings
• Withdraw consent where processing is based on consent, without affecting prior lawful processing

School administrators should manage staff access and student records within their dashboard. Privacy requests may be sent to [email protected]. We may need to verify your identity or authority before fulfilling a request.

9. End Users and Student Privacy

If you are a student or customer messaging a school through Facebook Messenger or Telegram, your messages may be processed by EduAutomate on behalf of that school for inquiry handling, lead management, and automated FAQ replies.

Schools are responsible for informing their students and customers about how chat and personal data are handled. Questions about a specific school's use of your data should first be directed to that school.

10. Cookies and Similar Technologies

We use cookies and similar technologies to maintain login sessions, remember preferences, protect against abuse, and improve platform performance. You can control cookies through your browser settings, but disabling cookies may limit certain features such as staying logged in.

11. International Processing

Your information may be processed on servers located outside your country, including cloud infrastructure and third-party AI or messaging providers. By using the Service, you consent to such processing where permitted by applicable law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect the latest revision. Material changes may also be communicated through the Service or by email where appropriate. Continued use of the Service after changes become effective constitutes acceptance of the updated policy.

13. Contact Us

For privacy questions, data access requests, or complaints, contact:

EduAutomate
Email: [email protected]
Website: https://eduautomate.app