How SaidByte Technologies collects, uses, and protects information on the SaidByte School ERP platform.
Last updated: August 30, 2026
SaidByte Technologies ("SaidByte", "we", "us", or "our") operates SaidByte School ERP, a cloud-based, multi-tenant school management platform ("Service", "Platform") used by schools ("Schools", "Customers") to manage students, staff, academic records, fees, and communication. This Privacy Policy explains what information we collect through the Platform and our public website, how we use it, who we share it with, and the choices available to you. It applies to school administrators, staff, parents, and students whose information is processed through the Platform, as well as visitors to our website.
This policy is written to align with the Nigeria Data Protection Act, 2023 and the Nigeria Data Protection Regulation (NDPR), and follows widely recognized data protection principles also found in regulations such as the EU GDPR. If any term in this policy conflicts with applicable law, the applicable law governs.
SaidByte School ERP is a business-to-business tool: it is licensed to Schools, and School administrators and staff — not students directly — create and manage student records within the Platform. In this relationship, the School acts as the data controller for student information, and SaidByte acts as a data processor, handling that data only on the School's instructions and for the purpose of providing the Service.
Because student data frequently belongs to children, we apply extra care to it:
We apply industry-standard safeguards to protect information, including encrypted connections (HTTPS/TLS) for data in transit, hashed password storage, role-based access controls within each School's account, and access restrictions on our infrastructure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we continually work to protect information against unauthorized access, loss, or misuse.
We retain School and student data for as long as a School's account remains active, and for a reasonable period afterward to allow reactivation, meet legal and accounting obligations, and resolve disputes. Schools may request deletion of their account and associated data, subject to any records we are legally required to keep (for example, payment records for tax purposes). Marketing analytics data collected via cookies is retained according to the default policies of the relevant provider (Meta, TikTok, or Google).
Depending on your role and applicable law, you may have the right to:
If your data was entered into the Platform by a School (for example, as a student, parent, or staff member), please direct these requests to that School first, since they control that data. If you are a School administrator or a website visitor, you can contact us directly using the details below.
We are based in Lagos, Nigeria, and primarily serve schools in Nigeria and across Africa. Some of our service providers (such as Cloudinary, Paystack, Meta, TikTok, and Google) operate infrastructure outside Nigeria, which means information may be processed or stored in other countries. Where this occurs, we rely on providers that maintain appropriate contractual and security safeguards for cross-border data transfers.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will update the "Last updated" date at the top of this page when we make changes, and for material changes we will make reasonable efforts to notify Schools (for example, by email or an in-app notice).
If you have questions, concerns, or requests regarding this Privacy Policy or how your information is handled, please contact us:
This Privacy Policy is provided for general informational purposes and is not a substitute for legal advice. We recommend having it reviewed by qualified legal counsel to confirm it fits your specific operations and obligations.