Privacy Policy
How EduNova Nexus handles school and personal data under Nigeria’s NDPA.
Last updated: September 24, 2026
Who we are
EduNova Nexus System is operated by Abutech Enterprise (processor for school platform services). Contact: info@edunovanexus.com, +234 806 302 1407.
Schools that use EduNova remain the data controllers for their pupil, staff, and finance records. Abutech Enterprise processes that data only to deliver the contracted school management service.
Nigeria Data Protection Act (NDPA)
We align this policy with the Nigeria Data Protection Act (NDPA) and guidance from the Nigeria Data Protection Commission (NDPC). This page refers to NDPA (not the repealed NDPR framing).
Lawful bases for processing typically include: performance of a contract with the school, legitimate interests in running a secure multi-tenant SaaS, and consent where you submit a demo or partnership enquiry.
Data we collect
Marketing / sales leads: school name, contact name, email, phone, and your message when you request a demo or partnership.
School portal tenants: student, staff, finance, and academic records stored solely for that institution under multi-tenant isolation. Schools decide what they enter.
How we use data
To respond to sales and partnership requests, provide the school management service, improve product quality (without exposing pupil records to public AI), and meet legal obligations. We do not sell personal data.
AI, analytics identifiers, and GAID
Pupil records are not sent to public AI services. Optional AI features, where enabled by a school, are designed so operational pupil data stays inside the school’s controlled environment and is not uploaded to public generative-AI endpoints for model training.
Where mobile apps or advertising measurement use a Google Advertising ID (GAID) or similar device advertising identifier, that identifier is used only for permitted analytics/attribution if the school or user enables it — not to sell pupil profiles. You may reset or limit advertising IDs in device settings.
Security
We use role-based access, encrypted transport (HTTPS), and tenant database isolation where configured. Schools remain controllers of their operational data.
Your rights (NDPA)
Depending on your role, you may request access, correction, deletion, or restriction of personal data, and you may lodge a complaint with the NDPC. Marketing-lead requests can be sent to us directly. Portal (pupil/staff) data requests are handled with the school administrator as controller.