1. Who we are
Centrack is the operating system for learning businesses — coaching centers and IELTS academies. We provide a platform for managing students, classes, attendance, exams, fees, and daily operations.
2. Data we collect
We collect the following types of data:
- Account data: Name, email address, password (hashed).
- Organization data: Organization name, branch information, staff roles.
- Student data: Names, contact information, academic records, attendance, exam results, fee records.
- Guardian data: Names, contact information, relationships to students.
- Operational data: Schedules, class sessions, payments, invoices, audit logs.
- Usage data: Login timestamps, feature usage patterns, error logs.
3. How we use your data
- To provide and maintain the Centrack platform.
- To manage student, guardian, teacher, and staff records.
- To process payments and generate invoices.
- To send notifications about classes, exams, fees, and operations.
- To generate reports and operational insights.
- To provide student and guardian portal access.
- To improve the platform and fix issues.
4. Data sharing
We do not sell your data. We share data only in these circumstances:
- Within your organization — staff members see data based on their role and permissions.
- With students and guardians via portal access — only their own records.
- With payment providers (e.g., bKash, Nagad) — only to process payments you initiate.
- When required by law or legal process.
5. Data security
- Passwords are hashed using bcrypt — we cannot see your plain-text password.
- Each organization's data is isolated — users from one organization cannot access another's data.
- Role-based access control ensures users only see what they're authorized to see.
- All sensitive operations are logged in an audit trail.
- Session tokens are encrypted using JWT with a server-side secret.
6. Data retention
We retain your data for as long as your organization has an active Centrack account. When you cancel your subscription, we retain data for 30 days to allow for export, then permanently delete it unless required by law.
7. Your rights
- Access: You can view all data in your organization through the platform.
- Correction: You can edit or correct data through the platform.
- Deletion: You can archive or delete records through the platform.
- Export: You can export financial and operational reports as CSV.
- Account closure: You can close your account and request data deletion.
8. Student and guardian data
Student and guardian data is entered and managed by the organization's staff. Students and guardians can access their own data via portal accounts. Organizations are responsible for obtaining consent from students and guardians before entering their data into Centrack.
9. Cookies
Centrack uses essential cookies for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
10. Children's privacy
Centrack is designed for education businesses managing students, some of whom may be minors. Organizations are responsible for obtaining guardian consent for minor students. Guardian portal access is available so parents can monitor their children's records.
11. Changes to this policy
We may update this policy from time to time. We will notify organization owners of significant changes via email or in-app notification.
12. Contact
If you have questions about this privacy policy or your data, contact us at support@centrack.app.