Helm
DRAFT — this page is pending operator review and is not yet in force.

DRAFT — pending operator review. Not yet in force.

Privacy Policy

Last updated: [PLACEHOLDER — operator to confirm effective date]

This policy describes how HidayahTech, LLC ("HidayahTech", "we") collects, uses, and shares information for the HidayahONE hosted school-management platform.

What we collect

  • Account information — name, email, school name, and role.
  • Billing information — plan, billing cadence, and payment status. Card numbers are handled directly by Stripe, our payment processor; we never receive or store full card numbers.
  • Instance usage metrics — operational telemetry (uptime, health, resource use) used to run and support the Service. This does not include the student/academic data your school stores inside its own instance [PLACEHOLDER — operator to confirm reference to a data processing agreement for in-instance student data].
  • Support communications — anything you send us for help.

How we use it

To provision and operate your instance, process billing, respond to support requests, secure the Service, and send transactional notifications (order confirmations, receipts, service alerts).

Processors

We share information only as needed to run the Service, with:

  • Stripe — payment processing and billing.
  • Mailgun — transactional email delivery.
  • Hosting providers — infrastructure hosting for instances [PLACEHOLDER — operator to confirm named provider(s) and region(s)].

We do not sell your information.

Retention

We retain account and billing information while your account is active, and afterward as needed for legal or accounting purposes [PLACEHOLDER — operator to confirm retention periods and instance data deletion timeline after account closure].

Security

We apply reasonable technical and organizational measures to protect your information; no method of transmission or storage is completely secure.

Your rights

Depending on your jurisdiction you may have rights to access, correct, or delete your information [PLACEHOLDER — operator/counsel to confirm regional rights language, e.g. GDPR/CCPA, based on [JURISDICTION — operator to confirm]].

Children's data

School instances may contain data about minors, entered and controlled by the school. HidayahTech acts as a processor for that data [PLACEHOLDER — operator/counsel to confirm COPPA/FERPA or equivalent posture].

Changes and contact

We may update this policy; material changes will be notified in advance [PLACEHOLDER — operator to confirm notice mechanism]. Questions: [PLACEHOLDER — operator to confirm privacy contact email].