Privacy Policy

ABJAD ("we", "us", or "our") is committed to protecting the privacy and security of everyone who interacts with our school management platform. This Privacy Policy explains how we collect, use, protect, and respect data in connection with the ABJAD platform and related services ("Services").

1. Who We Are

ABJAD is a school management platform serving educational institutions in Jordan and the Middle East. Our platform enables schools to manage academic, financial, administrative, and communication functions in a single integrated system.

In data protection terms, the School is the data controller — it determines what data is entered and why. ABJAD is a data processor, acting on the school's instructions to store and process data through our platform.

2. Data We Collect

2.1 School Operational Data

Data entered by the school and its authorized staff, including:

• Student records: name, date of birth, national ID (if required), grade, academic history, attendance, exam results, behavioral notes
• Staff records: name, contact details, employment information, payroll data, attendance
• Parent/guardian records: name, contact details, communication preferences
• Financial records: fee schedules, payment history, invoices, accounting entries
• Transport records: routes, vehicle assignments, pickup/drop-off schedules
• Communication logs: messages, announcements, and notifications sent through the platform

2.2 Account & Usage Data

Data collected automatically when using the platform:

• Login credentials (encrypted) and session tokens
• IP addresses and device information for security logging
• Feature usage patterns used to improve the product (no personal identifiers linked)
• Error logs and performance diagnostics

2.3 Website Data

When you visit our marketing website (alefjo.com), we collect basic analytics data (page views, referrers) and contact form submissions. See Section 10 for cookie details.

3. How We Use Data

We use School Data exclusively to:

• Provide, maintain, and improve the ABJAD platform and its features
• Process and display information as directed by the school (e.g., generating reports, sending notifications)
• Provide technical support and respond to school inquiries
• Maintain security and prevent unauthorized access or misuse
• Fulfill legal obligations, including Jofotara e-invoicing compliance
• Communicate service updates, maintenance schedules, and important notices

We do not use School Data for advertising, marketing profiling, AI training on your data, or any purpose not directly related to operating the platform for your school.

4. Legal Basis for Processing

Our processing of personal data is based on:

• Contractual necessity: Processing required to deliver the platform services as agreed in the subscription contract.
• Legitimate interests: Security monitoring, fraud prevention, and product improvement using aggregated, anonymized data.
• Legal obligation: Compliance with Jordanian tax law (Jofotara) and other applicable regulations.
• Consent: Where required (e.g., marketing communications from the website contact form).

5. Data We Never Share

ABJAD makes the following firm commitments:

• We never sell your data or any portion of it to any third party.
• We never share student, staff, or financial data with advertisers, data brokers, or marketing companies.
• We never use your school's data to target users with advertising on or off our platform.
• We never share data with government authorities except when required by a valid legal order under Jordanian law, and we will notify the school where legally permitted to do so.

6. Student Data Protections

Student data receives the highest level of protection within our platform. Specifically:

• Student records are accessible only to authorized school staff and the student's own parent/guardian account as designated by the school.
• Student national ID numbers and sensitive records are stored encrypted at rest.
• Student data is never linked to advertising identifiers.
• Schools bear responsibility for ensuring appropriate parental consents are obtained before entering student data, in accordance with applicable Jordanian regulations.
• Student data is not transferred outside the school's authorized ABJAD environment without explicit school instruction.

7. Data Storage & Security

All School Data is stored on servers maintained within or accessible from the Hashemite Kingdom of Jordan or secure regional data centers compliant with applicable data protection standards.

Security measures include:

• Encryption in transit: All data transmitted between your browser/app and our servers uses TLS 1.2+ encryption.
• Encryption at rest: Sensitive data fields are encrypted in the database.
• Access controls: Role-based access within the platform ensures each user sees only the data relevant to their role.
• Regular backups: Automated daily backups with secure offsite storage.
• Security monitoring: Continuous monitoring for unauthorized access attempts.
• Staff access: ABJAD staff access to production data is limited to technical personnel with a legitimate operational need, under strict access logging.

8. Data Retention

We retain School Data for the duration of the subscription and for 90 days after termination, during which you may request a full data export. After 90 days post-termination, all School Data is permanently and irreversibly deleted from our systems.

Certain records (e.g., transaction logs for tax compliance) may be retained for longer periods as required by Jordanian tax law (typically 5 years).

9. Your Rights

As a school administrator (data controller), you have the right to:

• Access: Request a complete export of all School Data held by ABJAD at any time.
• Correction: Update or correct any inaccurate data directly within the platform.
• Deletion: Request deletion of all School Data upon termination of the subscription.
• Portability: Receive School Data in a structured, machine-readable format (CSV/JSON).
• Restriction: Request restriction of processing in specific circumstances as permitted by law.

Individual Users (parents, students, staff) should direct data access or deletion requests to their school, which is the data controller. ABJAD will cooperate with the school to fulfill such requests.

10. Cookies

The ABJAD marketing website uses minimal cookies:

• Essential cookies: Required for the website to function (e.g., session management). Cannot be disabled.
• Analytics cookies: Aggregate, anonymized data used to understand how visitors use the site (e.g., page views, referrers). No personal identifiers are stored.

The ABJAD platform application uses session cookies for authentication only. No third-party tracking or advertising cookies are used on the platform.

11. Third-Party Services

ABJAD uses a limited number of trusted third-party services to operate the platform. These include cloud infrastructure providers and communication gateways. All third-party processors are bound by data processing agreements that prohibit them from using School Data for any purpose other than providing services to ABJAD.

We currently integrate with Jordan's Jofotara e-invoicing system for mandatory tax compliance, and are developing integration with the Ministry of Education's Ajyal system. Data shared with these government systems is limited to the specific fields required by law and transmitted securely.

12. Children's Privacy

ABJAD is designed to be used by schools to manage student data, which inherently includes data about minors. Schools are responsible for ensuring appropriate legal authorization (parental consent where required) before entering student data. ABJAD does not directly collect data from students or minors through its marketing website.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to school administrators via email and/or a prominent notice on the platform at least 30 days before taking effect. The "Last updated" date at the top of this page indicates when this policy was last revised. Your continued use of the platform after changes take effect constitutes acceptance of the updated policy.

14. Contact Us

For any privacy-related inquiries, data access requests, or concerns, please contact us: