Privacy Policy

Last updated: 6 October 2026

This Privacy Policy explains how Eduvisionary ("Eduvisionary", "we", "us", "our") collects, uses, stores, shares, and protects information in connection with the Eduvisionary platform — the web-based business management software used by small businesses, freelancers, consultants, agencies, and other service-based businesses to manage customer relationships, projects, employee administration, and financial records. This Policy applies to two broad categories of information: information about Eduvisionary's own customers — the individuals and businesses who purchase and use the platform — and information that customers themselves enter into the platform about their own customers, employees, and business activity, which we refer to throughout this Policy as "customer content" or "business data." This Policy is intended to be read alongside Eduvisionary's other published terms, including its Terms of Service and Refund Policy. Where this Policy and another published term appear to conflict on a matter of data handling specifically, this Privacy Policy should be treated as the primary reference, and customers are encouraged to contact Eduvisionary directly with any questions. Eduvisionary is a software provider. The platform is designed to help businesses organise their own operational information, and this Policy reflects that role — describing what Eduvisionary itself collects and does as a service provider, while recognising that the business data entered into the platform belongs to, and remains the responsibility of, the customer who entered it.

1. Information We Collect

Eduvisionary collects several categories of information in the course of providing the platform.

1.1 Account Information

When a business or individual purchases Eduvisionary, we collect information needed to create and administer the account, such as the name of the business, the name and contact details of the person setting up the account, an email address, and billing-related details needed to process their one-off payment.

1.2 Purchase and Payment Information

Eduvisionary works with Stripe to process the one-off payment for lifetime access, by card and, where applicable, Bacs Direct Debit or Klarna. Where you choose Klarna, Klarna receives the information needed to offer and administer its payment options, and may carry out its own checks under Klarna's privacy notice. We retain records of your payment, the package purchased, payment status, and related administrative details, but Eduvisionary does not itself store full payment card numbers, which are handled directly by our payment processor in accordance with its own security standards.

1.3 Usage Information

As customers use the platform, we collect information about how the platform is used — for example, which features are accessed, how frequently the platform is used, general activity patterns, and technical information such as browser type, device type, and IP address. This information helps us operate, maintain, and improve the platform.

1.4 Support Communications

When customers contact Eduvisionary for support, billing questions, or other assistance, we collect the content of those communications, along with any information provided as part of resolving the matter raised.

1.5 Business Data Entered by Customers

Customers use the Eduvisionary platform to enter and manage information relating to their own business operations. This includes, depending on how a customer uses the platform, customer and lead records, sales pipeline information, follow-up notes, customer history, project and task details, deadlines, team assignments, employee records, leave information, onboarding details, employee documents, invoices, income and expense records, payment status, and business reports generated from this information. This business data is entered by customers for their own business purposes. Eduvisionary stores this information on the customer's behalf as part of providing the platform, but the responsibility for the accuracy, appropriateness, and lawful basis for collecting and maintaining this information rests with the customer who entered it, consistent with the position set out in Eduvisionary's other published terms regarding customer responsibility for their own records.

2. How We Use Information

Eduvisionary uses the information described above for a range of purposes connected with operating and improving the platform. We use account and billing information to create and maintain customer accounts, process one-off payments, confirm whether payments have cleared, handle refunds, communicate with customers about their account, and provide customer support. We use usage information to understand how the platform is being used overall, to identify and fix technical issues, to improve the design and functionality of the platform over time, and to help ensure the platform performs reliably as usage grows. We use support communications to respond to questions, resolve issues, and improve the quality of support provided to customers generally, including by identifying recurring issues that might indicate a need for a broader fix or improvement to the platform. Business data entered by customers is used primarily to provide the core functionality of the platform itself — displaying a customer's records back to them, generating invoices from the information they have entered, calculating and displaying reports based on their own data, and generally making the information they have stored available to them through the dashboard in an organised, useful way. Eduvisionary does not use customer business data for purposes unrelated to providing the platform, such as selling that data to third parties for marketing purposes, except as described elsewhere in this Policy. We may also use information, in aggregated or de-identified form, to understand broader patterns of platform usage across our customer base, which can help inform product decisions and improvements without identifying any particular customer or their individual business data.

3. Legal Basis for Processing

Where applicable data protection law requires a legal basis for processing personal information, Eduvisionary relies on one or more of the following depending on the specific processing activity: performance of a contract, where processing is necessary to provide the platform under the purchase agreement with a customer; legitimate interests, where processing supports the operation, security, and improvement of the platform in a way that does not override the interests or rights of the individuals concerned; compliance with a legal obligation, where processing is required to meet a regulatory or legal requirement; and, in some cases, consent, where a customer has specifically agreed to a particular use of information, such as receiving marketing communications. Where Eduvisionary processes personal information contained within business data entered by a customer — for example, information about a customer's own clients or employees — Eduvisionary generally acts as a processor of that information on behalf of the customer, who acts as the controller responsible for determining why and how that information is collected and used. The specific data protection obligations that apply to each party in this relationship may be addressed in more detail in a separate data processing agreement, where applicable, particularly for customers subject to specific regulatory frameworks.

4. How We Share Information

Eduvisionary does not sell personal information or business data to third parties. Information may, however, be shared in the following limited circumstances:

• Service providers. We work with a limited number of service providers who help us operate the platform — for example, cloud hosting providers who store platform data, Stripe, which processes payments, and Klarna, where a customer chooses to pay with Klarna. These providers are given access only to the information necessary to perform their specific function, and are expected to handle that information securely and in a manner consistent with this Policy.
• Legal requirements. We may disclose information where required to do so by law, in response to a valid legal request from a public authority, or where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Eduvisionary, our customers, or others.
• Business transfers. If Eduvisionary is involved in a merger, acquisition, reorganisation, or sale of assets, information may be transferred as part of that transaction, subject to reasonable steps to ensure the information continues to be protected in a manner consistent with this Policy, or subject to a similar policy following the transfer.
• With customer authorisation. Where a customer specifically requests or authorises Eduvisionary to share particular information with a named third party — for example, an integration the customer chooses to connect to their account — information will be shared accordingly, based on that customer's own decision and instruction.

We do not share business data entered by one customer with any other customer. Information entered into an account remains associated with that account and is not made visible to, or accessible by, other Eduvisionary customers.

5. Payment Information

Payments for Eduvisionary are a single one-off charge, processed securely through Stripe by card and, where available, Bacs Direct Debit or Klarna. Eduvisionary does not store complete payment card details on its own systems; this information is handled directly by our payment processor in accordance with applicable payment card industry security standards. Eduvisionary retains records of transactions, such as the amount charged, the date, and the package purchased, but not the full underlying card details themselves. As described in Eduvisionary's other published materials, Eduvisionary does not hold or transmit customer funds on behalf of third parties. The payment infrastructure used exists specifically to collect the one-off payment for lifetime access to the platform.

6. Data Retention

Eduvisionary retains account information and business data for as long as an account remains active, in order to provide the platform's functionality. Where an account is closed, a purchase is refunded, or a payment fails to clear, Eduvisionary retains information for a limited period afterward, to allow for account reactivation, to comply with legal or accounting obligations, and to handle any related support or payment queries that may arise shortly afterwards. Following this retention period, information associated with a closed account is generally deleted or anonymised in accordance with Eduvisionary's internal data retention practices, except where a longer retention period is required by law, such as for certain financial or billing records that may need to be kept for a specified statutory period. Customers who wish to export their business data before an account is closed or a refund is processed, are encouraged to do so using the export functionality available within the platform, since access to that data may be limited or unavailable once the relevant retention period has passed. As noted in Eduvisionary's Refund Policy, this is particularly relevant for customers who anticipate requesting a refund, since a refund is generally accompanied by a corresponding change in account access.

7. Data Security

Eduvisionary takes reasonable technical and organisational measures designed to protect the information it holds, including account information, billing records, and business data entered by customers, against unauthorised access, loss, misuse, or alteration. These measures include, among others, the use of encryption for data in transit, access controls limiting which personnel can access particular systems and information, and regular review of security practices as part of operating the platform. No system can be guaranteed to be completely secure, and Eduvisionary cannot promise that information will never be subject to unauthorised access despite these measures. Customers also play an important role in protecting their own account, including by using a strong, unique password, keeping login credentials confidential, and promptly notifying Eduvisionary if they become aware of any unauthorised access to their account. In the event of a data breach affecting personal information in a manner that requires notification under applicable law, Eduvisionary will notify affected customers and any relevant regulatory authority in accordance with the requirements of that law.

8. International Data Transfers

Depending on where Eduvisionary's infrastructure and service providers are located, information may be transferred to, stored in, or processed in countries other than the country in which a customer or their business is based. Where such transfers occur, Eduvisionary takes steps intended to ensure that information continues to receive an appropriate level of protection, consistent with applicable data protection law, which may include the use of standard contractual clauses or equivalent safeguards recognised under the relevant legal framework. Customers with specific questions about where their information is stored or processed, particularly where this is relevant to their own regulatory obligations, are encouraged to contact Eduvisionary directly for further detail.

9. Cookies and Similar Technologies

Eduvisionary's website and platform may use cookies and similar technologies to support core functionality, such as keeping a customer logged in between sessions, remembering certain preferences, and understanding general usage patterns to help improve the platform over time. Some cookies are necessary for the platform to function correctly, while others support analytics or performance monitoring. Where required by applicable law, Eduvisionary will provide appropriate notice and, where necessary, obtain consent for the use of non-essential cookies. Customers can typically manage cookie preferences through their browser settings, though disabling certain cookies may affect the functionality of the platform. Further detail on the specific cookies we use, why we use them, and how you can manage your preferences is set out in our separate Cookie Policy.

10. Your Choices and Rights

Depending on the jurisdiction in which a customer or individual is located, applicable data protection law may provide certain rights in relation to personal information, which can include the right to access the personal information held about you, the right to request correction of inaccurate information, the right to request deletion of information in certain circumstances, the right to object to or restrict certain kinds of processing, and the right to request a copy of your information in a portable format. Where these rights apply, requests can generally be made by contacting Eduvisionary directly using the contact details provided at the end of this Policy. Requests relating to an individual's own account information will be handled directly by Eduvisionary. Requests relating to business data entered by a customer about their own clients or employees — for example, a request from one of a customer's own clients — should generally be directed to that customer in the first instance, since the customer, as the party responsible for collecting and using that information, is typically best placed to respond, though Eduvisionary will provide reasonable assistance to customers in fulfilling such requests where appropriate, consistent with our role as a service provider. Eduvisionary will respond to legitimate requests within the timeframes required by applicable law, and may need to verify the identity of the person making a request before acting on it, in order to protect the security of the information involved.

11. Marketing Communications

Eduvisionary may send customers communications related to their account, such as payment receipts, service updates, or important changes to the platform or its policies. These operational communications are necessary to the service relationship and are not considered optional marketing. Eduvisionary may also send marketing communications, such as information about new features or relevant updates, where permitted by applicable law or where a customer has opted in to receive them. Customers who no longer wish to receive marketing communications can generally opt out using the unsubscribe option included in those communications, or by contacting Eduvisionary directly. Opting out of marketing communications does not affect the operational communications necessary to maintain the account.

12. Children's Information

Eduvisionary is a business management platform intended for use by businesses and business professionals, and is not directed at, or intended for use by, children. Eduvisionary does not knowingly collect personal information from children. If Eduvisionary becomes aware that information has been collected from a child in a manner inconsistent with applicable law, appropriate steps will be taken to address the situation, including deletion of that information where required.

13. Third-Party Links and Integrations

The Eduvisionary platform may, from time to time, include links to third-party websites, or may support integrations with third-party services that a customer chooses to connect to their account. This Privacy Policy applies only to information collected by Eduvisionary itself, and does not extend to the privacy practices of any third-party website or service, even where accessed from within the platform. Customers who choose to connect a third-party integration to their Eduvisionary account should review that third party's own privacy practices separately, since information shared with that third party as part of the integration will be governed by that party's own policies rather than by this one.

14. Automated Decision-Making

Eduvisionary does not use business data entered by customers to make automated decisions that produce legal or similarly significant effects concerning individuals, without meaningful human involvement. Where the platform generates reports, summaries, or calculations based on business data, these outputs are provided as tools to help customers review and understand their own information, consistent with the description of Eduvisionary's reporting functionality elsewhere in its published materials, and are not intended to represent automated decisions made independently by Eduvisionary about any individual.

15. Changes to This Privacy Policy

Eduvisionary may update this Privacy Policy from time to time, for example to reflect changes in how the platform operates, changes to applicable law, or changes in our service providers. Where changes are made, the updated policy will be published, along with an updated effective date. Where changes are significant, Eduvisionary will take reasonable steps to bring them to the attention of customers, such as by email notice or a notice within the platform itself. Continued use of the Eduvisionary platform following the publication of an updated Privacy Policy constitutes acceptance of the updated terms, to the extent permitted by applicable law. Customers are encouraged to review this Policy periodically to stay informed about how their information is handled.

16. Customer Responsibility for Business Data

As set out in Eduvisionary's other published materials, customers remain responsible for the business data they enter into the platform, including customer information, project information, employee information, invoices, income records, expense records, and other business information. This includes responsibility for ensuring that the collection and use of any personal information contained within that business data — such as the personal details of a customer's own clients or employees — complies with applicable data protection law as it relates to that customer's own business. Eduvisionary provides the software tools and infrastructure that allow customers to organise this information, and processes it on their behalf in order to provide the platform, but Eduvisionary does not independently verify whether a customer's collection or use of particular personal information is lawful, appropriate, or compliant with the obligations that apply to that customer's specific business and jurisdiction. Where a customer has questions about their own obligations in this respect, they are encouraged to seek independent legal advice, consistent with the general position that Eduvisionary does not provide legal advice as part of the platform.

17. Data Processing Roles

For the purposes of applicable data protection law, Eduvisionary generally acts in two different capacities depending on the type of information involved. In relation to account information, billing details, and other information collected directly from Eduvisionary's own customers for the purpose of managing the customer relationship and their purchase, Eduvisionary acts as a controller, determining the purposes and means of that processing. In relation to business data that a customer enters into the platform about their own clients, employees, or other individuals, Eduvisionary generally acts as a processor, processing that information on behalf of, and under the instructions of, the customer, who acts as the controller responsible for determining why that information is collected and how it should be used. This distinction can be relevant to understanding which party is primarily responsible for responding to particular requests or obligations under applicable data protection law, as described in the sections above.

18. Categories of Personal Information in More Detail

To make this Policy as clear and practical as possible, this section sets out, in more detail, the specific types of personal information involved in each of the broad categories described earlier. Within account information, we typically collect a name, business name, email address, telephone number where provided, and job title or role where relevant to account administration. Within billing information, we typically collect billing address, package purchased, payment history, and payment status, while full card details are handled directly by Stripe rather than being stored by Eduvisionary itself. Within usage information, we typically collect device and browser type, IP address, general location information derived from IP address at a city or regional level rather than precise geolocation, pages and features accessed within the platform, timestamps of activity, and general session information such as login times and duration of use. Within business data entered by customers, the specific personal information involved will vary considerably depending on how each customer uses the platform, since this information is defined by the customer's own business rather than by Eduvisionary. It may include the names, contact details, and interaction history of a customer's own clients and leads; the names, contact details, employment information, leave records, and onboarding documentation of a customer's own employees; and any personal information that happens to appear within invoices, project notes, or other free-text fields a customer chooses to enter. Because this content is determined by each customer individually, Eduvisionary does not maintain a fixed, exhaustive list of every possible category of personal information that might appear within business data, and customers should bear in mind their own obligations regarding the personal information of their clients and employees when deciding what to enter into the platform.

19. How We Use Cookies in Practice

Building on the general description of cookies above, it may help to describe the practical categories of cookies used across the Eduvisionary website and platform in a little more detail. Strictly necessary cookies are used to support core functions such as maintaining a logged-in session, remembering security-related settings, and ensuring the platform functions correctly as a customer moves between different areas of the dashboard. These cookies cannot generally be disabled without affecting the ability to use the platform at all. Performance and analytics cookies help us understand, in aggregate, how the platform and website are used — for example, which pages are visited most often, how long users typically spend in a particular area of the dashboard, and where users may be encountering difficulty navigating the platform. This information is used to guide improvements to the platform's design and functionality over time, and is generally reviewed in an aggregated form rather than tied to a specific identifiable individual. Where cookies are used for purposes beyond what is strictly necessary for the platform to function, and where applicable law requires consent for such use, Eduvisionary will provide a mechanism for customers and website visitors to manage their preferences, consistent with the requirements of the relevant jurisdiction. Full detail on cookie categories, durations, and how to manage your preferences is set out in our separate Cookie Policy.

20. Employee and HR Data Handled Through the Platform

Because Eduvisionary provides HR administration functionality, including employee records, leave management, onboarding, and employee document storage, it's worth addressing this category of business data specifically, given that employee information often involves particularly sensitive personal details. Information entered into the HR administration areas of the platform — such as an employee's contact details, employment history within the business, leave records, onboarding documentation, and any documents uploaded as part of employee administration — is entered and controlled by the customer using the platform, in their capacity as that employee's employer. Eduvisionary processes this information on the customer's behalf, as part of providing the underlying software functionality, and does not use employee information entered by a customer for any purpose beyond providing that functionality back to the customer. As set out elsewhere in Eduvisionary's published materials, Eduvisionary does not process payroll and does not act as an employer-of-record service. This means Eduvisionary's handling of HR-related personal information is limited to supporting the administrative record-keeping functionality described in the platform itself, rather than extending into a broader employment relationship with the individuals whose information happens to be stored. The customer, as the employer, remains responsible for ensuring that its collection, storage, and use of employee information through the platform complies with the employment and data protection obligations that apply to its own business.

21. Financial Data Handled Through the Platform

Similarly, because the platform includes invoicing, income and expense recording, and payment-status tracking, it's worth being clear about how this category of business data is treated from a privacy perspective. Financial records entered into the platform — such as invoice details, recorded income and expenses, and payment status — often contain personal information about a customer's own clients, such as billing names, addresses, and payment references. This information is entered and controlled by the customer for their own business record-keeping purposes, consistent with the description of Eduvisionary's financial record-keeping functionality provided elsewhere. Eduvisionary processes this information in order to provide the relevant functionality — generating invoices, calculating reports, and displaying payment status back to the customer — but does not use this financial business data for any purpose unrelated to providing the platform itself, and does not use it to provide accounting, tax, or financial advice, consistent with Eduvisionary's position as a software provider rather than a provider of regulated financial or advisory services.

22. Data Minimisation and Purpose Limitation

Eduvisionary aims to collect only the information reasonably necessary to provide and improve the platform, and to use that information only for the purposes described in this Policy, rather than repurposing information collected for one reason toward an unrelated purpose without appropriate notice. Where new uses of information are introduced that go beyond what is described in this Policy, Eduvisionary will update this Policy accordingly and take reasonable steps to notify affected customers, consistent with the section on changes to this Policy above. This principle extends to internal access as well: access to personal information and business data within Eduvisionary's own systems is limited to personnel who require that access to perform their role, such as customer support staff assisting with a specific account issue, or engineering staff maintaining the underlying infrastructure, rather than being broadly accessible across the organisation without a specific operational reason.

23. Data Subject Requests From a Customer's Own Clients or Employees

Because business data entered into the platform frequently includes personal information about a customer's own clients and employees, those individuals may, from time to time, wish to exercise data protection rights — such as requesting access to, or deletion of, information held about them. As noted earlier, such requests are generally best directed to the customer whose account holds the relevant information, since the customer, acting as controller of that data, is typically the party responsible for determining how such a request should be handled. Where a request of this kind is instead received directly by Eduvisionary, we will generally refer the individual to the relevant customer, while also providing reasonable technical assistance to that customer, where appropriate, to help them locate, export, correct, or delete the relevant information within their account using the platform's own functionality. This approach reflects Eduvisionary's role as a processor of this particular category of business data, supporting the customer's own compliance obligations rather than acting independently on requests that concern information the customer, not Eduvisionary, is responsible for.

24. Contacting Eduvisionary About Privacy

Customers or other individuals with questions about this Privacy Policy, or who wish to exercise any of the rights described above, should contact Eduvisionary through the contact details provided on the Eduvisionary website or within their account. Providing relevant details, such as the account email address, will help ensure that any request can be handled as efficiently as possible. Eduvisionary aims to respond to privacy-related queries and requests promptly, and to provide clear, straightforward answers about how information is collected, used, and protected in connection with the platform. If you have concerns about how we handle your personal data, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO) or another relevant data protection authority.

25. Summary

Eduvisionary collects account, billing, usage, and support information to operate and improve the platform, and stores business data entered by customers so they can manage their own customers, projects, employees, and financial records through the dashboard. Eduvisionary does not sell personal information, shares information only in limited circumstances necessary to provide the service or comply with the law, and takes reasonable steps to keep information secure. Customers remain responsible for the business data they choose to enter into the platform, while Eduvisionary remains responsible for handling that data securely and in accordance with this Policy, in its role as the software provider supporting their business operations.