Privacy Policy

1. Data Protection & Compliance

iSCARB operates in strict compliance with the Saudi Personal Data Protection Law (PDPL) and National Data Governance policies. We are committed to protecting student academic records, faculty content, and organizational data.

2. Information We Collect

We collect necessary information to provide academic and assessment services:

• Account Credentials: Institutional email, name, role, and university affiliation.
• Academic Data: Assessment responses, submissions, grades, and competency progression records.
• System Analytics: Usage logs, session durations, and telemetry required for performance and security audit trails.

3. How We Use Your Data

Your data is strictly utilized for educational and institutional governance purposes:

• Generating personalized AI feedback and learning recommendations.
• Facilitating faculty lecture curation, NCAAA quality alignment, and Jaheziah accreditation reporting.
• Providing institutional deans and admins with aggregated, anonymized performance metrics.

4. Data Security & Storage

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). We employ role-based access control (RBAC) and row-level security (RLS) to ensure that users can only view authorized academic records.

5. Third-Party Services

We do not sell, rent, or share personal data with third-party advertisers. AI model requests are processed securely using privacy-preserving endpoints without using student data for model re-training.

6. Contact Privacy Team

For privacy inquiries or data access requests, please contact our Data Protection Officer at dpo@iscarb.edu.sa.