Privacy Policy

Last updated: November 10, 2026

1 Introduction

ESBA ("we", "us") is committed to protecting the privacy of schools, staff, students, and parents who use our platform. This policy explains what data we collect and how we use it.

2 Information We Collect

We collect the following categories of information:

School & owner information: school name, email, phone, address, location, website, owner name and contact details.
Admin account information: first name, last name, admin email, hashed password.
Operational data: student records, staff records, attendance, grades, fee records, and other data entered by your school.
Technical data: IP address, browser type, device information, and usage logs.

3 How We Use Your Information

To create and manage your school account.
To send SMS notifications about registration, approval, subscription changes, and service updates.
To provide, maintain, and improve the Service.
To respond to support requests and communicate important updates.
To detect and prevent fraud, abuse, or security incidents.

4 SMS Communications

When you provide a phone number during registration, we may send SMS messages to:

Confirm your school registration has been received.
Notify you when your school is approved or rejected.
Send login credentials (where the account is created by an administrator).
Alert you about maintenance, failover, or critical service changes.
Notify you when your subscription plan or status changes.

You cannot opt out of essential service messages, but you can contact us to update your phone number at any time.

5 Data Sharing

We do not sell your data. We only share information with:

Service providers: SMS gateways (for sending SMS), hosting providers, and backup services necessary to run the platform.
Legal authorities: when required by law or to protect rights and safety.

6 Data Security

We use industry-standard measures to protect your data, including:

Encrypted password storage.
Secure HTTPS connections.
Role-based access controls.

No system is 100% secure. If you become aware of a breach, contact us immediately.

7 Data Retention

We retain school data for as long as the account is active. After account deletion, we may retain certain records for legal or audit purposes for up to 90 days before permanent deletion.

8 Your Rights

You have the right to:

Access the data we hold about your school.
Correct inaccurate information.
Request deletion of your account and associated data.
Withdraw consent for non-essential communications.

To exercise these rights, email support@esba.com.

9 Children's Privacy

Student data is entered by the school, not directly by students. We do not knowingly collect personal information directly from minors. Schools are responsible for obtaining any required parental consent.

10 Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via SMS or email. Continued use of the Service after changes means you accept the updated policy.

11 Contact Us

For privacy questions, contact support@esba.com.

Close Back to Registration