OurCampusBD ("we", "us", "our") is committed to protecting the privacy and security of the data entrusted to us by schools, madrasahs, teachers, students, and parents across Bangladesh. This Privacy Policy explains what data we collect, how we use it, and how we safeguard it.
1. Information We Collect
1.1 School / Tenant Information
- School name, logo, address, phone, email
- Administrator contact details
- Billing and payment information
1.2 Student Information (provided by the school)
- Name, roll number, class, section, photograph
- Date of birth, gender, religion, address
- Guardian name, phone number, relation
- Attendance, examination results, fee payment records
1.3 Employee Information (provided by the school)
- Name, designation, role, photograph, National ID (optional)
- Contact details, salary structure, attendance
1.4 Technical Data
- IP address, browser type, device information
- Pages visited, time spent, error logs
- Cookies and session tokens required for login
2. How We Use Your Information
- To provide the school management service you subscribed to
- To send SMS notifications to parents/students about attendance, fees, and exam results (only when the school enables this feature)
- To process fee payments via bKash, Nagad, Rocket, or ShurjoPay
- To generate invoices, receipts, and financial reports
- To provide customer support and troubleshoot issues
- To detect, prevent, and respond to fraud, abuse, or security incidents
We do NOT sell, rent, or trade your personal data with third parties for marketing purposes.
3. Data Sharing
We share data only with the following categories of trusted third parties, and only to the minimum extent necessary:
- Payment gateways (bKash, Nagad, Rocket, ShurjoPay, card processors) — to process fee payments
- SMS gateway (BulkSMSBD) — phone numbers and message content, only when your school sends an SMS
- Cloud infrastructure (Neon, Supabase, AWS S3) — encrypted data storage
- Law enforcement — if legally required by a Bangladesh court order or regulatory authority
4. Data Security
- All data is transmitted over HTTPS (TLS 1.3) and stored encrypted at rest
- Database backups are performed daily
- Role-based access control ensures only authorized users can view or modify records
- Passwords are never stored in plain text in our production systems
- We run on ISO-27001-certified cloud infrastructure
5. Data Retention
We retain your school data for as long as your subscription is active. Upon cancellation:
- Data remains accessible for 30 days for export in CSV/JSON format
- After 30 days, data is archived in cold storage
- After 90 days, archived data may be permanently deleted unless legally required to retain it
6. Children's Data
OurCampusBD processes student data (including minors) only on behalf of the school, which acts as the data controller. Schools are responsible for obtaining parental consent where required by Bangladesh law. We do not market to or directly collect data from students.
7. Your Rights
If you are a school administrator, student, parent, or employee whose data is held by OurCampusBD, you have the right to:
- Request a copy of the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (subject to legal retention requirements)
- Withdraw consent to receive SMS notifications
To exercise these rights, contact [email protected]. We will respond within 15 working days.
8. Cookies
We use strictly necessary cookies for login sessions, tenant identification, and CSRF protection. We do not use advertising or tracking cookies. You can disable cookies in your browser, but the platform requires session cookies to function.
9. Legal Framework
This Privacy Policy complies with applicable laws in the People's Republic of Bangladesh, including:
- Information and Communication Technology Act, 2006 (as amended)
- Digital Security Act, 2018
- Digital Commerce Operation Guidelines 2021 (Ministry of Commerce)
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email to your registered administrator email address at least 14 days before taking effect.
11. Contact
For privacy-related enquiries:
- Email: [email protected]
- Phone: +8801978121827
- Address: Dhaka, Bangladesh