Privacy Policy

Staff account data: name, work email address, role, and authentication credentials (passwords are stored hashed; sign-in sessions are kept in a secure cookie).

Conversation data: phone numbers, WhatsApp profile names, message text, and media (images, documents, audio, video) exchanged between the organisation and contacts through the WhatsApp Business Platform, plus message delivery status and timestamps.

Operational data: conversation assignments, notes, templates, availability status, activity logs, and analytics derived from messaging activity.

Device and technical data: a push-notification token (if you enable notifications), browser/device type, and basic diagnostic data needed to keep the service secure and working.

We do not collect your precise location, contacts list, photos, or other files from your device unless you explicitly attach a file to a message.

• To authenticate staff and control access by role.
• To receive, display, route, and send WhatsApp messages and templates.
• To send notifications about new or unanswered messages.
• To produce internal analytics, billing reports, and audit logs.
• To maintain security, prevent abuse, and fix errors.

We do not sell personal data and do not use it for third-party advertising.

• Meta Platforms (WhatsApp Business Platform): messages and phone numbers are transmitted to and from WhatsApp to deliver conversations. Meta's own privacy policy applies to that processing.
• Cloud hosting and database providers (including Google Firebase/Firestore and our application hosting): store and process data on our behalf under confidentiality and security obligations.
• Push notification services (e.g. Firebase Cloud Messaging): receive a device token and notification content to deliver alerts.
• Legal and safety: authorities or advisers where required by law or to protect rights, safety, or security.

Within the organisation, data is visible only to staff whose role permits it.

Conversation and account data is kept while it is needed for the purposes above or as required by law, then deleted or anonymised. Staff accounts are removed when access is revoked, subject to audit-log retention.

Data is encrypted in transit (HTTPS/TLS), access is role-based and authenticated, and credentials are hashed. No system is perfectly secure, but we take reasonable measures to protect your data.

Depending on where you live, you may request access to, correction of, or deletion of your personal data, or object to its processing. WhatsApp contacts can stop messages at any time by replying "STOP" or asking us to stop. Staff can disable notifications in their device or browser settings. To make a request, contact us at the address below.

To request deletion of your account or the personal data we hold about you, email app@internationalschooling.org from the address on the account (or the phone number used for WhatsApp). We will respond within a reasonable time and delete the data unless we must retain it by law.

IsGp is a staff tool and is not directed to children. Messages from parents or guardians may concern students; we handle that information only to provide school-related support.

Our providers may process data in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.

We may update this policy; the "Last updated" date above will change when we do. Continued use of the app means you accept the updated policy.

International Schooling
Email: app@internationalschooling.org