EdCo
Features About FAQ Contact
Sign In Get Started Free
Legal

Privacy Policy

Last updated: 03 June 2026

1. Who we are

EdCo ("we", "us", "our") is a school fee management platform operated in Pakistan. You can reach us via our contact form or by phone at (03) 111-222-453.

This Privacy Policy explains how we collect, use, store, and share personal information when you use EdCo as a school administrator, parent, or guardian.

2. Information we collect

From school administrators:

  • Name, email address, phone number, and role
  • School name, address, and contact information
  • Login credentials (passwords are hashed and never stored in plain text)

From student records (entered by your school):

  • Student name, date of birth, gender, CNIC/B-Form number
  • Contact information (email, phone number)
  • Guardian information (name, relationship, contact details)
  • Academic enrolment information (class, section, campus)

Transaction and usage data:

  • Fee voucher amounts, due dates, payment status, and payment references
  • Notification delivery logs
  • Login timestamps and IP addresses (for security)

3. How we use your information

  • To operate the EdCo platform and provide the services you have contracted for
  • To generate and deliver fee vouchers, receipts, and reminders
  • To process fee payment queries through 1Bill/1Link integration
  • To send automated WhatsApp and email notifications on your school's behalf
  • To provide support and respond to queries
  • To detect and prevent fraud and unauthorised access
  • To improve the platform through aggregated, anonymised usage analytics

We do not use student or parent data for advertising, profiling, or any purpose other than operating the service your school has contracted for.

4. Data sharing

We share data only in the following circumstances:

  • Payment processors (1Bill / 1Link): We share the student's reference number and outstanding balance to enable fee payments. No personal identifying information is shared beyond what is required for payment processing.
  • WhatsApp (Meta): Phone numbers and message content are transmitted to Meta's WhatsApp Business API to deliver notifications. Meta's own privacy policy applies to data processed on their platform.
  • Email delivery (AWS SES): Email addresses and email content are transmitted through Amazon Simple Email Service for delivery.
  • Cloud infrastructure (Google Cloud): All data is hosted on Google Cloud Platform servers located in the Asia-Pacific region.
  • Legal requirements: We may disclose data if required by applicable law, court order, or governmental authority.

We do not sell personal data to any third party.

5. Data retention

We retain school and student data for the duration of your subscription and for 30 days following cancellation, after which it is permanently deleted. You may request early deletion by contacting us via our contact form or calling (03) 111-222-453.

Financial transaction records (voucher amounts, payment dates, references) may be retained for up to 7 years as required by applicable accounting regulations.

6. Security

We implement industry-standard security measures including:

  • TLS encryption for all data in transit
  • AES-256 encryption for data at rest
  • Logical tenant isolation — each school's data is stored and accessed independently
  • Daily automated backups
  • Two-factor authentication available for all admin accounts
  • Access controls and audit logs for all sensitive operations

7. Your rights

As a school administrator, you may:

  • Access all data your school has stored in EdCo via the admin panel
  • Export your data at any time in CSV format
  • Request deletion of your school's data by contacting us
  • Update or correct any information via the admin panel

For requests on behalf of parents or students, please contact us via our contact form or call us at (03) 111-222-453.

8. Cookies

EdCo uses session cookies for authentication and basic functionality. We do not use third-party tracking or advertising cookies. The marketing website may use basic analytics cookies to measure aggregate traffic.

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email to the primary admin contact of each school at least 14 days before they take effect. Your continued use of EdCo after the effective date constitutes acceptance of the updated policy.

10. Contact

For any privacy-related questions, requests, or concerns, please contact us: