Privacy Policy

1. Multi-Tenant Data Isolation & Ownership

Kashf Education Portal operates as a dedicated multi-tenant school platform. Each educational institution (tenant) is allocated isolated data scoping enforced across all system layers. Tenant data, including student records, academic gradebooks, fee transactions, and staff registries, remains the sole property of the respective subscribing institution.

2. Information We Collect and Process

We process information solely to provide enterprise educational administration:

• Student & Family Identity: Student names, Roll Numbers, National B-Form identifiers, guardian contacts, and enrollment history.
• Operational Data: Attendance logs, biometric timestamps, examination marks, digital homework submissions, and teacher feedback.
• Financial Records: Fee challan statuses, bank collection reconciliation vouchers, and billing records.
• Security & Audit Logs: Access logs, IP addresses, browser agents, and administrative change tracking for regulatory audits.

3. Subdomain Routing and Cross-Tenant Protection

Our subdomain architecture enforces that requests to [tenant].kashf.co.uk only access the specific tenant and campus context (`school_id`). Super administrative access via hub.kashf.co.uk is strictly governed by isolated administrative authentication, cryptographic session signatures, and comprehensive audit trails.

4. Data Security and Encryption

All data in transit is encrypted using TLS 1.3 / HTTPS. Passwords and sensitive master credentials are encrypted using industry-standard salted hashing algorithms. Database backups are continuously encrypted at rest.