Privacy Policy

1. Introduction

SIMS Plus ("we", "our", or "us") operates the simsplus.io platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our multi-tenant school management platform. We are committed to complying with the Ghana Data Protection Act, 2012 (Act 843).

2. Information We Collect

We collect information in the following categories:

• Account Information: Name, email address, phone number, school name, and role when you register or contact us.
• School Data: Student records, staff records, academic records, financial transactions, and attendance data entered by authorized school personnel.
• Usage Data: Browser type, IP address, pages visited, and usage patterns to improve our services.
• Payment Information: Mobile Money transaction details and bank transfer references processed through our payment partners.

3. How We Use Your Information

• To provide, operate, and maintain our platform
• To process transactions and send related notifications
• To communicate with you about your account, updates, and support requests
• To improve our services through analytics and usage patterns
• To comply with legal obligations under Ghanaian law

4. Data Isolation & Multi-Tenancy

Each school's data is completely isolated from other schools on our platform using Row-Level Security (RLS). No school can access, view, or modify another school's data. All cross-tenant access is technically prevented at the database level and monitored through audit logs.

5. Data Security

We implement industry-standard security measures including:

• TLS 1.2+ encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• Bcrypt/Argon2 password hashing
• Rate-limited authentication with account lockout
• Regular penetration testing including cross-tenant access attempts
• Daily automated backups retained for 30 days

6. Data Sharing

We do not sell or rent personal data. We may share information with trusted third-party service providers (payment processors, SMS gateways, cloud hosting) solely for the purpose of operating our platform. All service providers are contractually obligated to protect your data.

7. Your Rights

Under the Ghana Data Protection Act, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Object to processing of your data
• Export your school's data

8. Data Retention

Active account data is retained for the duration of the subscription. Upon cancellation, data is preserved for 90 days before permanent deletion. Backups are retained for 30 days. Deleted data may be recoverable within 30 days of deletion.

9. Contact Us

For privacy-related inquiries, please contact our Data Protection Officer at privacy@simsplus.io or write to us at 14 Independence Avenue, Accra, Ghana.