Privacy Policy

    How SaidByte Technologies collects, uses, and protects information on the SaidByte School ERP platform.

    Last updated: August 30, 2026

    SaidByte Technologies ("SaidByte", "we", "us", or "our") operates SaidByte School ERP, a cloud-based, multi-tenant school management platform ("Service", "Platform") used by schools ("Schools", "Customers") to manage students, staff, academic records, fees, and communication. This Privacy Policy explains what information we collect through the Platform and our public website, how we use it, who we share it with, and the choices available to you. It applies to school administrators, staff, parents, and students whose information is processed through the Platform, as well as visitors to our website.

    This policy is written to align with the Nigeria Data Protection Act, 2023 and the Nigeria Data Protection Regulation (NDPR), and follows widely recognized data protection principles also found in regulations such as the EU GDPR. If any term in this policy conflicts with applicable law, the applicable law governs.

    Information We Collect

    Information Schools provide to us

    • •School details: name, registration/code, address, contact email, phone, logo, and website.
    • •Administrator and staff accounts: name, email, phone, gender, address, role, profile picture, and password (stored hashed, never in plain text).
    • •Student and parent records that a School chooses to enter: names, dates of birth, gender, contact details, guardian information, academic results, attendance, admission and class data, and fee/payment history.
    • •Billing information: the plan selected, billing cycle, and payment references. We do not store your card details — these are handled directly by our payment processor, Paystack (see “Sharing Your Information” below).

    Information collected automatically

    • •Usage data such as pages visited, features used, session duration, and general navigation patterns within the Platform.
    • •Device and technical data such as IP address, browser type, operating system, and approximate location derived from IP address.
    • •Cookies and similar technologies used for authentication, session management, and — on our public marketing pages — analytics and advertising (see “Cookies & Tracking” below).

    Information from third parties

    • •Payment confirmation and transaction status from Paystack once a payment is completed.
    • •Aggregated, anonymized advertising performance data from platforms such as Meta (Facebook/Instagram), TikTok, and Google, used to measure the effectiveness of our marketing campaigns.

    How We Use Information

    • •To provide, operate, and maintain the Platform for Schools and their users.
    • •To create and manage School and user accounts, and to authenticate sign-ins.
    • •To process subscription payments, apply promo codes, and manage billing.
    • •To generate academic records, certificates, ID cards, reports, and other documents that a School requests.
    • •To communicate with you — for example, account verification, payment receipts, service updates, and responses to support requests.
    • •To monitor, secure, and improve the Platform, including diagnosing technical issues and preventing fraud or abuse.
    • •To measure and improve our marketing on our public website (not inside the logged-in Platform), including through the tools listed in “Cookies & Tracking” below.
    • •To comply with legal obligations, resolve disputes, and enforce our agreements.

    Student & Children's Data

    SaidByte School ERP is a business-to-business tool: it is licensed to Schools, and School administrators and staff — not students directly — create and manage student records within the Platform. In this relationship, the School acts as the data controller for student information, and SaidByte acts as a data processor, handling that data only on the School's instructions and for the purpose of providing the Service.

    Because student data frequently belongs to children, we apply extra care to it:

    • •Student and parent data is only accessible to the School that entered it, and to authorized staff within that School (subject to the roles and permissions the School configures).
    • •We do not use student data for advertising, and we do not sell student data to any third party.
    • •Parents or guardians who have questions about their child's data should contact their School directly, as the School controls that data. Schools may contact us for assistance in fulfilling such requests.
    • •If you believe a School has provided us with a child's information in a way that is not permitted, please contact us using the details in “Contact Us” below and we will work with the School to address it.

    Sharing Your Information

    We do not sell personal information. We share information only in the following circumstances:

    • •With the School itself: all data entered into a School's account belongs to and is visible to that School's authorized administrators and staff.
    • •Service providers who process data on our behalf under contract, including: Paystack (payment processing), Cloudinary (secure file/image storage for logos, profile pictures, and documents), and our cloud hosting providers.
    • •Analytics and advertising partners for our public marketing website only — currently Meta (Facebook/Instagram Pixel and Conversions API), TikTok (Pixel and Events API), and Google Analytics — used to understand website performance and measure ad campaigns. These tools do not run inside the logged-in School dashboard.
    • •Legal and safety reasons: where required by law, court order, or governmental request, or to protect the rights, property, or safety of SaidByte, our Schools, or others.
    • •Business transfers: if SaidByte is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this Policy or a comparable one.

    Cookies & Tracking

    We use cookies and similar technologies for two distinct purposes:

    • •Essential cookies: used throughout the Platform to keep you signed in and to remember basic preferences. These are required for the Service to function and cannot be disabled.
    • •Marketing & analytics cookies: used only on our public website (not the logged-in dashboard) via tools such as Meta Pixel, TikTok Pixel, and Google Analytics, to help us understand how visitors find our site and to measure advertising performance.

    You can control cookies through your browser settings, including blocking or deleting them; doing so may affect some website functionality but will not prevent you from using the core Platform if you are a School user.

    Data Security

    We apply industry-standard safeguards to protect information, including encrypted connections (HTTPS/TLS) for data in transit, hashed password storage, role-based access controls within each School's account, and access restrictions on our infrastructure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we continually work to protect information against unauthorized access, loss, or misuse.

    Data Retention

    We retain School and student data for as long as a School's account remains active, and for a reasonable period afterward to allow reactivation, meet legal and accounting obligations, and resolve disputes. Schools may request deletion of their account and associated data, subject to any records we are legally required to keep (for example, payment records for tax purposes). Marketing analytics data collected via cookies is retained according to the default policies of the relevant provider (Meta, TikTok, or Google).

    Your Rights

    Depending on your role and applicable law, you may have the right to:

    • •Access the personal information we (or your School) hold about you.
    • •Request correction of inaccurate or incomplete information.
    • •Request deletion of your information, subject to legal or contractual retention requirements.
    • •Object to or restrict certain processing, including marketing analytics on our website.
    • •Withdraw consent at any time, where processing is based on consent.

    If your data was entered into the Platform by a School (for example, as a student, parent, or staff member), please direct these requests to that School first, since they control that data. If you are a School administrator or a website visitor, you can contact us directly using the details below.

    International Data Transfers

    We are based in Lagos, Nigeria, and primarily serve schools in Nigeria and across Africa. Some of our service providers (such as Cloudinary, Paystack, Meta, TikTok, and Google) operate infrastructure outside Nigeria, which means information may be processed or stored in other countries. Where this occurs, we rely on providers that maintain appropriate contractual and security safeguards for cross-border data transfers.

    Changes to This Policy

    We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will update the "Last updated" date at the top of this page when we make changes, and for material changes we will make reasonable efforts to notify Schools (for example, by email or an in-app notice).

    Contact Us

    If you have questions, concerns, or requests regarding this Privacy Policy or how your information is handled, please contact us:

    SaidByte Technologies

    Lagos, Nigeria

    For general enquiries, please use our Contact page.

    This Privacy Policy is provided for general informational purposes and is not a substitute for legal advice. We recommend having it reviewed by qualified legal counsel to confirm it fits your specific operations and obligations.