1. Introduction

EduNet Limited ("we," "us," or "our") respects the privacy of our employees and the students/clients whose data we manage. This Privacy Policy explains how we collect, use, and protect information within the EduNet CRM ecosystem.

2. Information We Collect

We collect two categories of information:

• Employee Account Data: Name, email address, role, and login credentials (managed via Google Workspace or standard email/password) necessary to grant access to the system.
• Client/Student Data: Information entered by our employees regarding students, including names, academic records, contact details, and visa application status, for the purpose of providing educational consultancy services.

3. How We Use Information

The information collected is used strictly for internal business operations, including:

• Authentication and access control.
• Managing student applications and university placements.
• Internal communication and task assignment.
• Compliance with visa and immigration processing requirements.

4. Google User Data & Scopes

Our application integrates with Google Services to facilitate login and productivity.

• Authentication: We use Google Sign-In (`email`, `profile`, `openid`) to verify the identity of our employees.
• Limited Use: We do not request or access restricted or sensitive scopes such as reading your personal emails (`gmail.readonly`) or accessing your private files unless explicitly authorized for a specific upload feature.
• Data Sharing: Data obtained from Google APIs is not shared with external third parties (like advertisers) and is used solely to enhance the functionality of the CRM for the logged-in user.

5. Data Security

We implement industry-standard security measures to protect data, including:

• Encryption of data in transit (TLS/SSL) and at rest.
• Role-Based Access Control (RBAC) to ensure employees only access data relevant to their duties.
• Regular security audits of our infrastructure.

6. Data Sharing

We do not sell data. We may share student data with:

• Educational Institutions: For the purpose of securing admissions.
• Visa Offices/Embassies: As required for visa processing.
• Service Providers: Cloud hosting and database providers (e.g., Firebase/Supabase) bound by confidentiality agreements.

7. Contact Us

If you have questions about this policy or data security practices, please contact the EduNet IT Department:

EduNet Limited
Dhaka, Bangladesh
Email: admin@edunet.com