DATA PRIVACY & SOVEREIGN CHARTER

A binding operational privacy charter ensuring strict multi-tenant isolation, bank-grade encryption, and zero third-party data monetization for educational institutions.

Effective: September 2026•100% Zero-Leak Multi-Tenant Isolation•AES-256 Encryption & Zero Ad Monetization

100%Zero Data Leak

Strict Multi-Tenant Isolation

Every institution operates in an encrypted partition with tenant-scoped query boundaries and zero cross-tenant access.

AES-256Cryptographic Vault

Data-at-Rest & In-Transit

End-to-end TLS 1.3 in-transit and AES-256-GCM database encryption for passwords, gradebooks, and financial records.

Zero-ShareAbsolute Integrity

Zero Commercial Monetization

We strictly never sell, trade, or monetize student, parent, or instructor phone numbers with advertisers or 3rd parties.

Full PurgeFull Portability

Data Portability & Purge Rights

Complete freedom to export rosters and grades anytime in open formats, or trigger hard purge upon subscription termination.

Data Governance & Sovereignty Anchors

Core architectural standards safeguarding student profiles, gradebooks, and institutional secrets.

Customer Data Ownership

Zero Platform Claim

All student directories, parent phones, attendance logs, exam questions, and grade reports belong exclusively to your educational institution.

Zero-Trust Database Boundaries

Tenant-Enforced Scopes

Tenant isolation is enforced in middleware and ORM queries, rendering cross-tenant data visibility mathematically and architecturally impossible.

Official WhatsApp Cloud API

Enterprise Meta Integration

Direct enterprise integration via official Meta Cloud APIs using your verified business phone number with zero brittle third-party scraping.

Tamper-Resistant Audit Trail

Forensic Operations Log

Every sensitive mutation—such as grade modifications, attendance shifts, and roster exports—is cryptographically logged with actor ID, timestamp, and IP.

Data Protection Matrix

Absolute Institutional Boundaries

Transparent breakdown of platform guarantees and institutional administrator duties.

Capsolu Privacy Commitments

Enforce 100% database isolation across tenants with zero cross-organization leakage.
Never sell, trade, or share student and parent phone numbers with advertising brokers.
Maintain immutable, tamper-resistant audit trails for every grade and attendance edit.
Provide instant, one-click export of complete student directories without restrictions.
Execute permanent, unrecoverable database hard purges upon verified account termination.

Institutional Best Practices

Assign staff permissions strictly based on least-privilege principles via RBAC.
Mandate strong administrative passwords and enforce multi-factor verification.
Promptly revoke credentials when staff or teaching assistants depart the organization.
Verify phone numbers carefully prior to broadcasting academic grade reports.
Refrain from sharing master administrative login credentials among desk receptionists.

Detailed Privacy Charter Articles

Full regulatory and technical clauses establishing sovereign data protection.

Article 01: Exclusive Data Ownership & Sovereignty

Your institution retains 100% proprietary ownership of all uploaded pedagogical and administrative assets.

PRIVACY-01

•All student names, contact information, guardian details, attendance sheets, and curriculum materials remain the sole property of the client institution.

•Capsolu LMS serves strictly as an infrastructure software provider and data processor, asserting zero copyright or ownership claims over customer records.

•No customer data is ever scraped, indexed, or leveraged to train public artificial intelligence models without explicit institutional consent.

Article 02: Zero-Trust Architecture & Database Partitioning

Logical and physical database isolation preventing any cross-tenant data contamination.

PRIVACY-02

•Every SQL transaction, ORM read, and search index requires authenticated tenant validation, preventing accidental exposure across accounts.

•Independent databases and isolated dedicated virtual servers are available for large universities, academies, and nationwide educational networks.

•Kiosk scans, digital PVC cards, and web QR validation tokens are verified against dynamic, time-limited cryptographic nonces.

Article 03: Enterprise Encryption & Session Security

State-of-the-art cryptographic safeguards for all network traffic, passwords, and sessions.

PRIVACY-03

•All web and mobile interactions enforce TLS 1.3 with strict HTTP Strict Transport Security (HSTS) headers.

•Administrative and user passwords are irreversibly salted and hashed via bcrypt with high work factor cost (Cost Factor 12).

•Authentication cookies are secured with HttpOnly, Secure, and SameSite=Lax flags, rendering credentials immune to client-side XSS extraction.

Article 04: Zero Monetization & Advertising Ban

Absolute prohibition against selling, renting, or trading student and center records.

PRIVACY-04

•We generate revenue solely through paid cloud software subscriptions and institutional licensing agreements.

•We never partner with data brokers, ad retargeting networks, or marketing affiliates looking to monetize educational rosters.

•Student and parent portals remain 100% clean, advertisement-free environments dedicated exclusively to learning and performance tracking.

Article 05: Official WhatsApp Cloud API Compliance

Direct, sanctioned communication pipes protecting your business phone reputation from bans.

PRIVACY-05

•All automated attendance, grades, and fee receipts are dispatched via official Meta Cloud APIs registered under your enterprise credentials.

•Zero use of risky headless browsers, unofficial third-party daemons, or unverified scrapers that endanger customer account standing.

•Outbound payload content is restricted strictly to verified educational alert templates authorized by your administrative team.

Article 06: Forensic Audit Logging & Role Integrity

Granular accountability across staff actions with immutable administrative event recording.

PRIVACY-06

•All operational interventions—including manual grade overwrites, barcode reprints, roster deletions, and role promotions—are permanently audited.

•Audit records contain timestamp down to the millisecond, originating IP address, authenticated user ID, and previous vs. modified states.

•Institution owners enjoy an unfiltered, real-time command feed of organizational operations across all physical campuses.

Article 07: Data Portability & Full Hard Purge Rights

Total freedom to extract your database anytime or request permanent, unrecoverable deletion.

PRIVACY-07

•Administrators can extract full databases, financial ledgers, and student attendance sheets in standard XLSX, CSV, and PDF formats anytime.

•Zero contractual exit penalties, lock-in clauses, or artificial friction if your institution decides to migrate infrastructure.

•Upon subscription termination, customers may request a complete hard purge that shreds all operational tables and backup archives permanently.

Frequently Asked Privacy Questions

Clear answers to the most common institutional security and data sovereignty inquiries.

Ready for Sovereign Educational Infrastructure?

Start your 15-day cardless trial now. Total data isolation, fast setup, and zero credit card required.

Start 15-Day Free Trial Review Terms of Service (MSA)