Privacy Policy

1. Who we are

Pontario provides a multi-tenant platform that education and migration mediation institutions ("Institutions") use to manage their programs, courses, students, faculty, attendance, assessments and fees. You can contact us at contact@pontar.io.

2. Our role

For most information on the platform, your Institution decides why and how it is processed and acts as the data controller; Pontario processes that information on the Institution's behalf.

For the account, billing and technical data needed to operate and secure the platform itself, Pontario acts as a data controller.

3. Information we collect

Depending on how you use the Services, we process:

• Account information: name, email address, phone number, password (stored in hashed form) and profile photo.
• Sign-in data shared by Google or Apple when you use social sign-in (name, email address and account identifier).
• Academic and administrative records entered by you or your Institution: enrollment and batch membership, timetables, attendance records (including QR code check-ins), exam results and grades, and lesson, quiz and assignment activity.
• Financial records managed by your Institution: fee plans, installments and payment entries.
• Content you upload, such as documents, images and assignment submissions.
• Technical data: device and browser information, log data, crash reports and product usage events.

4. How we use information

• Provide and operate the Services.
• Authenticate you and keep your account secure.
• Support your Institution's workflows, such as attendance tracking, grading and fee management.
• Send service communications, including email notifications and SMS verification codes.
• Maintain, debug and improve the platform.
• Comply with legal obligations.

5. How information is shared

We do not sell personal information. We share it only:

• With your Institution — staff members with appropriate roles can access records relevant to their work.
• With service providers that help us run the platform, such as cloud hosting and file storage (Google Cloud), payment processing (Stripe), email delivery (Zeptomail), SMS delivery (Twilio), product analytics (PostHog) and error monitoring (Sentry).
• When required by law, or to protect the rights, safety and security of users and the platform.

6. Data retention

We keep personal information for as long as your account is active or as long as your Institution needs it to provide its services. Deleted records are first deactivated and then removed from our systems. Institutions decide how long their own academic and financial records are retained.

7. Security

We protect information with encryption in transit, hashed passwords, role-based access controls and strict separation between Institutions' data. No method of transmission or storage is completely secure, but we work to protect your information using industry practices.

8. Your rights

Depending on applicable law, you may have the right to access, correct, delete or receive a copy of your personal information, and to object to or restrict certain processing.

Because your Institution controls most records on the platform, please direct requests about academic or financial records to your Institution first. We will assist with these requests. For anything else, contact us at contact@pontar.io.

9. Children

The Services are made available to students through their Institution. Where a student is a minor, the Institution is responsible for obtaining any consents required by applicable law before giving the student access.

10. International transfers

Your information may be processed in countries other than your own. Where that happens, we take steps to ensure it receives an adequate level of protection.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and, for material changes, notify you through the Services.

12. Contact

For questions about this Privacy Policy or how we handle personal information, contact us at contact@pontar.io.