Acceptable Use Policy

1.1 This Acceptable Use Policy ("AUP") is issued by EDULEDGA INNOVATIONS LIMITED (RC 9591803) ("EduLedga"). It forms part of the EduLedga Terms of Use and of the School SaaS Agreement, and applies to every person who accesses the EduLedga platform, website, demo or APIs (the "Platform") and to every subscribing School ("you").

1.2 Capitalised terms not defined here have the meaning given in the Terms of Use.

2.1 You must use the Platform: (a) lawfully, including in compliance with the Nigeria Data Protection Act 2023 ("NDPA"), the Child's Rights Act 2003 (and any applicable State Child's Rights Law) and the Cybercrimes (Prohibition, Prevention, etc.) Act 2015 as amended ("Cybercrimes Act"); (b) only for legitimate school-management, teaching, learning, parenting and administrative purposes; (c) within the permissions of your Role; and (d) with respect for the privacy, dignity and safety of pupils, parents and staff.

3.1 You must not:

(a) access, or attempt to access, any account, School, campus, class or record that you are not authorised to access, including by guessing passwords, using another person's credentials or exploiting a bug (unauthorised access to a computer system is an offence under the Cybercrimes Act);

(b) share your login, or let anyone (including a student, colleague, family member or contractor) use your account;

(c) impersonate any person or misrepresent your Role, relationship to a student or authority (identity theft and impersonation are offences under the Cybercrimes Act);

(d) probe, scan or test the vulnerability of the Platform, or breach or bypass any security or authentication measure, except under our Vulnerability Disclosure Policy;

(e) introduce malware, viruses, worms, trojan horses, ransomware or harmful code;

(f) interfere with, overload or disrupt the Platform (including denial-of-service attacks, excessive automated requests or deliberate misuse of attendance codes, including QR attendance codes where used);

(g) use bots, scrapers, crawlers or other automated means to access or extract data, except through an API we have expressly made available to you;

(h) decompile, reverse-engineer, disassemble or copy the Platform or its source code, except to the extent the law expressly permits; or

(i) remove, obscure or alter any proprietary notice, version label or "Powered by EduLedga" attribution.

4.1 You must not:

(a) download, export, print, screenshot, photograph, forward or otherwise copy School Data outside the Platform except as your Role and your School's written policy allow;

(b) post or share student records, results, report cards, attendance, fee balances, photos or videos on social media, personal WhatsApp or Telegram groups, or public websites, unless the School has a lawful basis and the required consent (including media consent);

(c) upload personal data that the School is not entitled to hold, or sensitive personal data (health, special needs, religion, disciplinary matters) except in fields designed for it and where your School's policy permits;

(d) enter pupils' personal data into AI-assisted lesson note prompts or any third-party AI tool;

(e) use the Platform to send marketing, solicitations or political or religious campaigns to parents, students or staff, unless the School has a lawful basis and any required consent (Article 18(1)(a) GAID; section 36 NDPA);

(f) contact students privately through the Platform for any purpose unconnected with their education;

(g) attempt to re-identify de-identified or aggregated data; or

(h) use data from the Platform to make decisions about any person outside the purposes for which the School collected it.

5.1 You must not upload, post, send or display any content that:

(a) is unlawful, defamatory, fraudulent, deceptive or misleading;

(b) is sexually explicit, indecent or exploitative, or that sexualises any child in any way (any such material will be preserved and reported to law enforcement as required by the Cybercrimes Act);

(c) bullies, harasses, stalks, threatens, intimidates or humiliates any person (cyberstalking is an offence under the Cybercrimes Act);

(d) promotes violence, self-harm, terrorism, hate or discrimination on the basis of ethnicity, religion, sex, disability, place of origin or any other protected characteristic;

(e) infringes copyright, trade marks or other intellectual property (see our IP Policy);

(f) contains another person's personal data without authority;

(g) is spam, a chain message, a pyramid scheme or a phishing attempt; or

(h) asks parents or staff to send card numbers, PINs, OTPs or bank passwords, or to pay school fees to any account other than through the Platform or the School's official channels.

6.1 You must not misuse the payment features, including by: recording false payments; altering fee records to conceal theft; initiating fraudulent chargebacks; changing payout or settlement details without the Director's authorisation; or using the Platform to launder money or finance unlawful activity.

7.1 You must use AI Features only in accordance with the AI Usage Policy. You must not use them to generate unlawful, harmful, plagiarised or deceptive content, to make solely automated decisions about students, or to circumvent safety controls.

8.1 Each School must: ensure its users are told about and follow this AUP; configure Roles on a least-privilege basis; remove access promptly when staff, students or guardians leave; and act promptly on our notices of suspected misuse.

9.1 Please report any breach of this AUP, any suspected security incident or any content that may endanger a child to hello@eduledga.com (subject "AUP report" or "Security") or by phone/WhatsApp on 0814 373 1505. Where a child may be at immediate risk, contact the police or the relevant State child-protection authority as well.

10.1 We may investigate suspected breaches, preserve evidence (including audit trail records) and cooperate with the School and lawful authorities. Depending on severity, we may: issue a warning; remove content; restrict features; suspend or terminate the account; require the School to take action; and report the matter to law enforcement, the NDPC, ngCERT or other authorities. Our Suspension & Termination Policy sets out the process and your right to respond.

10.2 Nothing in this AUP obliges us to monitor content in advance. We act on reports, automated security signals and the audit trail.

11.1 We may update this AUP to respond to new risks or legal requirements. Material changes will be notified in advance.