Institution Data Ownership.

1. Purpose

This policy explains data ownership, control and responsibilities for educational institutions using Arzavo by ARZAQ INSIGHTS.

2. Ownership of Data

Each educational institution ('Tenant') remains the sole owner of all data uploaded, created, collected or managed within its Arzavo workspace. ARZAQ INSIGHTS does not claim ownership of institution data.

3. Types of Institution Data

Institution data includes, but is not limited to, the following resources:

• Student records and files
• Teacher and staff profiles or contracts
• Parent or guardian contact details
• Admissions, enquiries, and lead data
• Attendance logs and examination metrics
• Fee structures, billing history, invoices, and transaction logs
• Courses, learning content, lessons, notes, and study material
• Uploaded documents, images, audio, video lectures, and private files

4. Tenant Isolation

Each tenant operates on an isolated database. Institution data is logically separated from every other tenant to reduce the risk of unauthorized cross-tenant access.

5. Access Control

The institution determines who can access its data by assigning roles and permissions. Student self-registration or approval-based registration is configurable by the institution.

6. Data Processing

ARZAQ INSIGHTS processes institution data only to provide, maintain, secure and improve Arzavo or where required by applicable law.

7. Data Export

Where supported by the platform, institutions may export their data in available formats. Export capabilities may vary depending on the subscription plan and feature availability.

8. Account Deletion

Upon permanent tenant deletion, operational data will be scheduled for deletion. Certain financial, invoice, payment, audit and legally required records may be retained in accordance with legal, tax, accounting or fraud-prevention obligations.

9. Confidentiality

ARZAQ INSIGHTS treats institution data as confidential and implements reasonable technical and organizational safeguards to protect it.

10. Legal Disclosure

Institution data may be disclosed only where required by law, valid legal process, regulatory requirements or to protect rights, safety or security.