<?php
$page_title       = 'Privacy Policy — EduTrack by Oric Network';
$page_description = 'EduTrack Privacy Policy — how we collect, use, store, and protect your school\'s data. Compliant with Ghana\'s Data Protection Act (Act 843).';
$page_active      = '';
$page_last_updated = 'January 2025';
include 'includes/header.php';
?>

<style>
.legal-hero { background: var(--grad-hero); padding: 7rem 0 4rem; position: relative; overflow: hidden; }
.legal-hero::before {
  content: ''; position: absolute; inset: 0;
  background: url("data:image/svg+xml,%3Csvg width='60' height='60' viewBox='0 0 60 60' xmlns='http://www.w3.org/2000/svg'%3E%3Cg fill='none' fill-rule='evenodd'%3E%3Cg fill='%23008B91' fill-opacity='0.04'%3E%3Ccircle cx='7' cy='7' r='1'/%3E%3C/g%3E%3C/g%3E%3C/svg%3E");
}
.toc-nav a {
  display: block; padding: .45rem .75rem; border-radius: 7px;
  font-size: .83rem; color: var(--slate); text-decoration: none; font-weight: 500;
  transition: all .2s; border-left: 2px solid transparent;
}
.toc-nav a:hover { color: var(--purple); background: rgba(0,139,145,.05); border-left-color: var(--purple); }
</style>

<!-- Hero -->
<section class="legal-hero">
  <!-- Subtle Unsplash background -->
  <div aria-hidden="true" style="position:absolute;inset:0;background-image:url('https://images.unsplash.com/photo-1450101499163-c8848c66ca85?w=1600&q=55');background-size:cover;background-position:center 25%;opacity:.06;pointer-events:none"></div>
  <!-- Ambient teal glow -->
  <div aria-hidden="true" style="position:absolute;top:-60px;right:15%;width:360px;height:360px;border-radius:50%;background:radial-gradient(circle,rgba(0,139,145,.14) 0%,transparent 70%);pointer-events:none" class="anim-float-slow"></div>

  <div class="container position-relative" style="z-index:1">
    <div class="breadcrumb-custom mb-4 anim-hero-badge">
      <a href="index.php">Home</a>
      <span class="sep">/</span>
      <span>Privacy Policy</span>
    </div>
    <div style="max-width:640px">
      <div class="eyebrow mb-3 anim-hero-badge" style="background:rgba(0,139,145,.15);border-color:rgba(76,200,206,.3);color:#4CC8CE">
        <i class="fas fa-shield-alt"></i> Privacy Policy
      </div>
      <h1 class="anim-hero-h1" style="color:#fff;font-size:clamp(2rem,4vw,3rem);font-weight:900;margin-bottom:1rem;letter-spacing:-.025em">Your data. Protected.</h1>
      <p class="anim-hero-sub" style="color:rgba(255,255,255,.65);line-height:1.8;font-size:1rem;max-width:500px">
        We believe your school's data belongs to you. This policy explains exactly what we collect, how we use it, and your rights.
      </p>
      <div class="anim-hero-ctas" style="margin-top:1.5rem;display:flex;flex-wrap:wrap;align-items:center;gap:1rem">
        <div style="display:inline-flex;align-items:center;gap:.5rem;font-size:.82rem;color:rgba(255,255,255,.4)">
          <i class="fas fa-calendar-alt"></i> Last updated: <?= $page_last_updated ?>
        </div>
        <div style="display:inline-flex;align-items:center;gap:.5rem;background:rgba(0,139,145,.12);border:1px solid rgba(76,200,206,.2);border-radius:20px;padding:.3rem .85rem;font-size:.78rem;font-weight:600;color:#4CC8CE">
          <i class="fas fa-check-circle" style="font-size:.75rem"></i> Ghana Data Protection Act (Act 843)
        </div>
      </div>
    </div>
  </div>
</section>

<!-- Body -->
<section class="section">
  <div class="container">
    <div class="row g-5">

      <!-- TOC -->
      <div class="col-lg-3">
        <div style="position:sticky;top:90px;background:var(--bg-subtle);border:1px solid var(--border);border-radius:var(--radius-lg);padding:1.5rem">
          <div style="font-size:.72rem;font-weight:700;letter-spacing:.1em;text-transform:uppercase;color:var(--muted);margin-bottom:1rem">Contents</div>
          <nav class="toc-nav">
            <a href="#who-we-are">1. Who We Are</a>
            <a href="#what-we-collect">2. What We Collect</a>
            <a href="#how-we-use">3. How We Use Data</a>
            <a href="#data-sharing">4. Data Sharing</a>
            <a href="#data-storage">5. Storage & Security</a>
            <a href="#cookies">6. Cookies</a>
            <a href="#retention">7. Data Retention</a>
            <a href="#your-rights">8. Your Rights</a>
            <a href="#children">9. Children's Data</a>
            <a href="#changes">10. Policy Changes</a>
            <a href="#contact">11. Contact Us</a>
          </nav>
        </div>
      </div>

      <!-- Content -->
      <div class="col-lg-9">
        <div class="prose" style="max-width:none">

          <div style="background:rgba(0,139,145,.05);border:1px solid rgba(0,139,145,.15);border-radius:var(--radius-md);padding:1.25rem 1.5rem;margin-bottom:2.5rem">
            <strong style="color:var(--navy)">Summary (Plain Language):</strong>
            <p style="margin:.5rem 0 0">We collect only what is necessary to run EduTrack. We never sell your data. Your school data belongs to you and can be exported or deleted on request. We comply with Ghana's Data Protection Act (Act 843).</p>
          </div>

          <h2 id="who-we-are">1. Who We Are</h2>
          <p>EduTrack is a school management system operated by <strong>Oric Network Limited</strong>, a company incorporated in Ghana. In this Privacy Policy, "EduTrack", "we", "us", and "our" refer to Oric Network Limited.</p>
          <p>Our contact details:</p>
          <ul>
            <li><strong>Company:</strong> Oric Network Limited</li>
            <li><strong>Phone / WhatsApp:</strong> <a href="tel:+233537793106">0537 793 106</a></li>
            <li><strong>Email:</strong> <a href="mailto:info@oricnetwork.com">info@oricnetwork.com</a></li>
            <li><strong>Country:</strong> Ghana</li>
          </ul>

          <h2 id="what-we-collect">2. What We Collect</h2>
          <p>We collect two broad categories of data:</p>

          <h3>2.1 School & Administrator Data</h3>
          <p>When a school signs up for EduTrack, we collect:</p>
          <ul>
            <li>School name, physical address, and type (basic, secondary, private)</li>
            <li>Administrator's name, phone number, email address, and job title</li>
            <li>School logo and branding preferences</li>
            <li>Subscription plan and billing information (payment references — we do not store full payment card details)</li>
            <li>IP address and login timestamp (for security logging)</li>
          </ul>

          <h3>2.2 Student & Staff Data (School-Controlled)</h3>
          <p>When a school uses EduTrack to manage their operations, the school enters data about their students and staff. This data is controlled by the school (the "data controller" under Ghana's Data Protection Act). Oric Network acts as the "data processor" — we process this data on behalf of the school according to our agreement.</p>
          <p>This data may include:</p>
          <ul>
            <li>Student names, dates of birth, gender, photos, and index numbers</li>
            <li>Guardian/parent names and contact information (phone numbers, email addresses)</li>
            <li>Academic records: grades, attendance, exam scores, and report cards</li>
            <li>Fee payment records</li>
            <li>Staff names, qualifications, contact details, and payroll information (Premium plan)</li>
          </ul>

          <h3>2.3 Usage Data</h3>
          <p>We automatically collect limited technical data when you use EduTrack:</p>
          <ul>
            <li>Login timestamps and IP addresses (for security audit purposes)</li>
            <li>Pages visited within the application (for performance monitoring)</li>
            <li>Browser type and device type (for compatibility support)</li>
          </ul>
          <p>We do not use tracking cookies for advertising or analytics beyond what is necessary to run the service.</p>

          <h3>2.4 Enquiry Data</h3>
          <p>If you submit an enquiry on our website, we collect your name, phone number, email address, school name, and any message you send. This is used solely to respond to your enquiry.</p>

          <h2 id="how-we-use">3. How We Use Your Data</h2>
          <p>We use the data we collect for the following purposes:</p>
          <ul>
            <li><strong>Service Delivery:</strong> To provide, operate, and maintain the EduTrack platform for your school</li>
            <li><strong>Account Management:</strong> To create and manage your school's account, process payments, and send renewal reminders</li>
            <li><strong>Technical Support:</strong> To diagnose and fix technical issues you report to us</li>
            <li><strong>Security:</strong> To detect and prevent fraudulent or unauthorised access to your account</li>
            <li><strong>Communication:</strong> To send you important service announcements (e.g. maintenance windows, new features) — you cannot opt out of service-critical communications</li>
            <li><strong>Legal Compliance:</strong> To comply with applicable Ghanaian laws, including the Data Protection Act and tax regulations</li>
          </ul>
          <p><strong>We do not use your data for advertising.</strong> We do not build advertising profiles or share data with advertising networks.</p>

          <h2 id="data-sharing">4. Data Sharing</h2>
          <p>We do not sell, rent, or trade your personal data or your school's data to any third party.</p>
          <p>We may share limited data only in the following circumstances:</p>

          <h3>4.1 Service Providers</h3>
          <p>We use a small number of trusted third-party services to operate EduTrack. These providers process data only on our instruction and are contractually prohibited from using it for any other purpose:</p>
          <ul>
            <li><strong>Hosting Provider:</strong> Server infrastructure where EduTrack data is stored</li>
            <li><strong>SMS/WhatsApp Gateway:</strong> For sending automated notifications on behalf of schools (e.g. attendance alerts to parents). Only the recipient's phone number and message content is shared.</li>
            <li><strong>Email Service:</strong> For sending password reset emails and receipts</li>
          </ul>

          <h3>4.2 Legal Requirements</h3>
          <p>We may disclose your data if required by law, court order, or lawful request by Ghanaian government authorities. We will notify you of such requests where legally permitted to do so.</p>

          <h3>4.3 Business Transfer</h3>
          <p>In the event of a merger, acquisition, or sale of Oric Network Limited, your data may be transferred to the acquiring entity. We will notify affected schools before any such transfer and you will have the right to request deletion of your data.</p>

          <h2 id="data-storage">5. Data Storage & Security</h2>
          <p>All EduTrack data is stored on servers managed by Oric Network and our hosting providers. We implement the following security measures:</p>
          <ul>
            <li><strong>Encryption in Transit:</strong> All communication between your browser and EduTrack is encrypted using HTTPS (TLS 1.2+)</li>
            <li><strong>Password Security:</strong> All administrator passwords are stored using bcrypt hashing — we cannot read or recover your password</li>
            <li><strong>Role-Based Access Control:</strong> Each user account only has access to the data relevant to their role within the school</li>
            <li><strong>Daily Backups:</strong> School data is backed up daily. Backups are retained for 30 days</li>
            <li><strong>Audit Logging:</strong> Key actions (logins, data changes, fee transactions) are logged with timestamps for accountability</li>
          </ul>
          <p>While we take all reasonable precautions, no system is 100% immune from security threats. We will notify affected schools promptly in the event of a data breach that affects their data.</p>

          <h2 id="cookies">6. Cookies</h2>
          <p>EduTrack uses the following cookies:</p>
          <ul>
            <li><strong>Session Cookie:</strong> A temporary cookie that keeps you logged in during your session. It is deleted when you close your browser or log out.</li>
            <li><strong>Remember Me Cookie:</strong> If you choose "Remember Me" on login, a cookie is stored for 30 days to keep you logged in. You can clear this by logging out.</li>
          </ul>
          <p>We do not use third-party analytics cookies (e.g. Google Analytics), advertising cookies, or any tracking cookies on the EduTrack application. Our marketing website (this page) does not set cookies.</p>

          <h2 id="retention">7. Data Retention</h2>
          <p>We retain your data for as long as your school's subscription is active. After subscription cancellation:</p>
          <ul>
            <li>Your data is retained for <strong>90 days</strong> after cancellation, during which you can request a full export</li>
            <li>After 90 days, all school data (students, staff, records, fees) is permanently and irreversibly deleted from our systems</li>
            <li>Billing records and account information may be retained for up to 7 years for financial and legal compliance purposes</li>
            <li>Enquiry data (from the website contact form) is retained for 12 months unless you request earlier deletion</li>
          </ul>

          <h2 id="your-rights">8. Your Rights</h2>
          <p>Under Ghana's Data Protection Act (Act 843) and general data protection principles, you have the following rights:</p>
          <ul>
            <li><strong>Right of Access:</strong> You can request a copy of the personal data we hold about you or your school</li>
            <li><strong>Right to Rectification:</strong> You can ask us to correct inaccurate or incomplete data</li>
            <li><strong>Right to Erasure:</strong> You can request deletion of your personal data (subject to legal retention requirements)</li>
            <li><strong>Right to Data Portability:</strong> You can request your school's data in a machine-readable format (CSV/Excel) for export</li>
            <li><strong>Right to Object:</strong> You can object to certain uses of your data (e.g. receiving non-essential communications)</li>
            <li><strong>Right to Restrict Processing:</strong> You can ask us to limit how we use your data in certain circumstances</li>
          </ul>
          <p>To exercise any of these rights, contact us at <a href="mailto:info@oricnetwork.com">info@oricnetwork.com</a> or WhatsApp <a href="https://wa.me/233537793106" target="_blank">0537 793 106</a>. We will respond within 30 days.</p>
          <p>You also have the right to lodge a complaint with Ghana's Data Protection Commission if you believe your rights have been violated.</p>

          <h2 id="children">9. Children's Data</h2>
          <p>EduTrack is designed for use by schools that serve children. We recognise that student records include data about minors.</p>
          <p>The school (data controller) is responsible for obtaining appropriate consent from parents/guardians for the collection and use of student data, in accordance with Ghanaian law and the school's own data handling policies.</p>
          <p>Oric Network, as data processor, processes this data only according to the school's instructions and does not use student data for any purpose other than providing the EduTrack service.</p>
          <p>Students and parents can request access to, correction of, or deletion of their personal data by contacting their school's EduTrack administrator.</p>

          <h2 id="changes">10. Changes to This Policy</h2>
          <p>We may update this Privacy Policy from time to time to reflect changes in our practices, the law, or the EduTrack service. When we make significant changes, we will:</p>
          <ul>
            <li>Update the "Last updated" date at the top of this page</li>
            <li>Notify active school administrators by email or in-app notification</li>
            <li>For material changes, provide at least 30 days' notice before the change takes effect</li>
          </ul>
          <p>Your continued use of EduTrack after a policy update constitutes your acceptance of the revised policy.</p>

          <h2 id="contact">11. Contact Us</h2>
          <p>If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your data, please contact us:</p>
          <div style="background:var(--bg-subtle);border-radius:var(--radius-md);padding:1.5rem;margin-top:1rem;border:1px solid var(--border)">
            <div style="font-weight:700;color:var(--navy);margin-bottom:1rem">Oric Network Limited — Data Contact</div>
            <div class="d-flex flex-column gap-3">
              <div style="display:flex;align-items:center;gap:.75rem;font-size:.9rem;color:var(--slate)">
                <i class="fab fa-whatsapp" style="color:#25d366;width:20px;text-align:center"></i>
                <a href="https://wa.me/233537793106" target="_blank" style="color:var(--teal)">0537 793 106 (WhatsApp)</a>
              </div>
              <div style="display:flex;align-items:center;gap:.75rem;font-size:.9rem;color:var(--slate)">
                <i class="fas fa-envelope" style="color:var(--teal);width:20px;text-align:center"></i>
                <a href="mailto:info@oricnetwork.com" style="color:var(--teal)">info@oricnetwork.com</a>
              </div>
              <div style="display:flex;align-items:center;gap:.75rem;font-size:.9rem;color:var(--slate)">
                <i class="fas fa-map-marker-alt" style="color:var(--blue);width:20px;text-align:center"></i>
                Ghana
              </div>
            </div>
          </div>

        </div>
      </div>
    </div>
  </div>
</section>

<!-- Related links -->
<section class="section-sm" style="background:var(--bg-subtle)">
  <div class="container">
    <div class="row g-4 justify-content-center">
      <div class="col-md-4 text-center">
        <a href="terms.php" style="display:block;background:#fff;border:1px solid var(--border);border-radius:var(--radius-lg);padding:1.5rem;text-decoration:none;transition:all .2s" onmouseover="this.style.borderColor='rgba(0,139,145,.3)';this.style.boxShadow='var(--shadow-sm)'" onmouseout="this.style.borderColor='var(--border)';this.style.boxShadow='none'">
          <i class="fas fa-file-contract" style="font-size:1.75rem;color:var(--teal);margin-bottom:.75rem;display:block"></i>
          <div style="font-weight:700;color:var(--navy);margin-bottom:.4rem">Terms of Use</div>
          <div style="font-size:.85rem;color:var(--muted)">Read our Terms of Service</div>
        </a>
      </div>
      <div class="col-md-4 text-center">
        <a href="faq.php#security" style="display:block;background:#fff;border:1px solid var(--border);border-radius:var(--radius-lg);padding:1.5rem;text-decoration:none;transition:all .2s" onmouseover="this.style.borderColor='rgba(0,139,145,.3)';this.style.boxShadow='var(--shadow-sm)'" onmouseout="this.style.borderColor='var(--border)';this.style.boxShadow='none'">
          <i class="fas fa-question-circle" style="font-size:1.75rem;color:var(--blue);margin-bottom:.75rem;display:block"></i>
          <div style="font-weight:700;color:var(--navy);margin-bottom:.4rem">Security FAQ</div>
          <div style="font-size:.85rem;color:var(--muted)">Common questions about data security</div>
        </a>
      </div>
      <div class="col-md-4 text-center">
        <a href="https://wa.me/233537793106?text=I+have+a+question+about+EduTrack+privacy" target="_blank" style="display:block;background:#fff;border:1px solid var(--border);border-radius:var(--radius-lg);padding:1.5rem;text-decoration:none;transition:all .2s" onmouseover="this.style.borderColor='rgba(37,211,102,.4)';this.style.boxShadow='var(--shadow-sm)'" onmouseout="this.style.borderColor='var(--border)';this.style.boxShadow='none'">
          <i class="fab fa-whatsapp" style="font-size:1.75rem;color:#25d366;margin-bottom:.75rem;display:block"></i>
          <div style="font-weight:700;color:var(--navy);margin-bottom:.4rem">Ask a Question</div>
          <div style="font-size:.85rem;color:var(--muted)">Chat with us on WhatsApp</div>
        </a>
      </div>
    </div>
  </div>
</section>

<?php include 'includes/footer.php'; ?>
