Privacy Policy

Result Prime (“we”, “the platform”) provides result-processing software to schools (“the school”). This policy explains what personal data we process and why. For student and staff records, the school is the data controller and Result Prime is a data processor acting on the school’s instructions.

Data we process

• Account data: name, email, phone, role, and authentication identifiers.
• Student records: admission number, name, class/enrolment, scores, results, attendance, and behavioural traits — including data about minors, provided by the school.
• Guardian data: name and contact details, linked to their children.
• Billing data: subscription status and payment references. Card details are handled by our payment processor (Paystack); we never store card numbers.
• Operational data: audit logs, security/access logs, and limited diagnostics.

How we use it

To operate the service: authentication, computing and publishing results, generating report cards, sending result/billing notifications (email, SMS, WhatsApp), processing subscription payments, and maintaining security and audit trails. We do not sell personal data or use it for advertising.

Legal basis & minors

Student data is processed to deliver the educational service the school has contracted, under the school’s authority and consent obtained from parents/guardians by the school. Where the NDPR (or your local law) applies, the school is responsible for the lawful basis and parental consent for processing children’s data; we act on the school’s documented instructions.

Sharing & sub-processors

We share data only with infrastructure providers needed to run the service:

• Supabase — database, authentication, and file storage.
• Paystack — payment processing.
• Resend — transactional email; Twilio — SMS/WhatsApp (if enabled).
• Hosting and error-monitoring providers for the application.

Tenant isolation & security

Each school’s data is isolated at the database level (row-level security keyed to the school). Access is role-based; sensitive actions are audited; data is encrypted in transit. Consumers (students/parents) can only see their own published results.

Retention

We retain school and student records for as long as the school’s account is active and as needed to provide the service or meet legal/record-keeping obligations. On account termination, data is deleted or returned per the school agreement.

Your rights

Students, guardians, and staff may exercise access, correction, and deletion rights through their school, which manages the records. Contact your school’s administrator, or us at the address below, and we will assist the controller in responding.

Contact

Questions about this policy or data handling: privacy@yourdomain.com. Update this address before launch.

This is a starting template reflecting the platform’s actual data flows. Have it reviewed by legal counsel and tailored to your jurisdiction (e.g. Nigeria’s NDPR) before going live.