Back to Claslo

Privacy Policy

Claslo is committed to protecting the privacy of educational institutions, teachers, students, and parents. This policy explains how student and school records are collected, stored, and safeguarded.

Last updated: 4 October 2026

1. What Data We Collect

Claslo provides school management software directly to educational institutions. We collect and process data strictly on behalf of the school:

  • School Information: School name, branch campus, official contact numbers, email address, logo, and billing configurations.
  • Student Records: Student names, dates of birth, genders, B-Form/identity numbers, class and section enrollments, roll numbers, and parent/guardian contact details.
  • Academic & Operational Data: Daily attendance records, homework diary entries and class announcements, grading marks, and monthly fee voucher records.
  • Staff & Teacher Profiles: Full names, system login email addresses, assigned subjects, and classroom associations.

2. Who Owns the Data

The School owns all student, staff, and financial data at all times.

Claslo operates strictly as a data processor on your school's behalf. The school is the data controller. We do not claim ownership of any content, student records, or uploaded files entered into the service.

3. Where and How Data Is Stored

Our infrastructure is built on Cloudflare's global secure cloud:

  • Database: Encrypted at rest and in transit using Cloudflare D1 distributed across modern ISO-27001 certified data centers.
  • Attachments & Files: Homework files, student photos, and diary attachments are stored in private Cloudflare R2 object storage with time-limited signed URL access.
  • Multi-Tenant Isolation: Strict database-level and service-level tenant boundaries prevent any school or user from seeing or modifying records belonging to another institution.

4. Who Has Access to Records

Access permissions follow a strict role-based authorization model:

  • School Administrators: Have full oversight over their school's records, academic structure, and fees.
  • Teachers: Can only access classes, students, and diaries assigned directly to them.
  • Parents: Can only access attendance, diaries, and fee vouchers for their own linked children.
  • Claslo Staff: Do not access student records or school databases during standard operations. Technical support staff may access records only when diagnosing critical issues and with prior written authorization from the school principal or administrator.

5. Data Retention & Deletion

Active schools retain their historical attendance, fee, and academic data indefinitely during their active subscription or trial.

Upon subscription cancellation or account closure:

  • Schools may export all student, attendance, and fee data into standard CSV and PDF formats.
  • Schools may request permanent, irreversible deletion of their database records and uploaded files. Deletion is completed within 30 days of written confirmation.

6. Children's Privacy & PECA Compliance

We take the protection of minors exceptionally seriously. Claslo complies with the Pakistan Electronic Crimes Act (PECA 2016) and international child privacy standards:

  • Zero Advertising: Claslo contains zero third-party advertisements or trackers.
  • No Data Monetization: We will never sell, rent, license, or monetize student or parent data to any third party.
  • Parental Consent: Schools are responsible for obtaining appropriate parental or guardian consent before enrolling students into the platform.

7. Contact & Data Protection Officer

For privacy inquiries, audit requests, or data deletion queries, please contact our team:

Email: support@claslo.com