This policy explains how JSM Technology Solutions Int'l Limited ("JSM", "we" or "us") handles information when providing Rsheet to schools and other educational institutions ("schools"). It forms part of the Terms and Conditions.
As between the school and JSM, the school owns and controls the records it uploads to or creates through Rsheet. JSM does not acquire ownership of those records. This does not remove the privacy rights of students, staff, parents or other individuals whose personal information appears in the records.
The school determines why its records are collected and used and who may access or change them. JSM processes those records only on the school’s behalf to operate Rsheet and carry out the school’s instructions. JSM has no right to use school records for its own independent purposes.
Depending on the features used and information supplied by the school, Rsheet may hold student and staff details, account and contact details, academic results, transcripts, attendance, assessment and financial records. Schools should upload only information necessary for their authorised educational and administrative activities.
Permitted technical processing includes storing records, carrying out calculations requested through the software, displaying information to school-authorised users, generating requested documents, enabling downloads and deletion, and making the monthly cloud backups described below. Hosting and backup operations necessarily involve technical processing; they do not give JSM permission to browse or change academic records independently.
We do not sell, rent, exploit, use for advertising, use to train artificial intelligence models, or otherwise use school records for purposes unrelated to providing the school’s service. Account and contact information may be used to administer the service and communicate with the school, including sending security notices.
Only the school and users it authorises may view, use or change school records through the service, subject to the permissions assigned to their accounts. These users may include administrators, teachers, students or parents, as authorised by the school. JSM does not independently decide who may use the school’s records.
Any exceptional human access by JSM to school records for support or recovery must be specifically authorised by the school and limited to the agreed task, unless access is required by law. Automated hosting and backup processing is limited to delivering the service. Schools must manage user access, protect passwords and promptly report suspected unauthorised access.
Account security is a shared responsibility. The following requirements support the school’s control over its information:
No online service or transmission over the Internet can be guaranteed to be entirely secure. JSM’s incident notification and response commitments in Section 6 continue to apply; users’ responsibility to protect credentials does not remove JSM’s own obligations concerning the security and confidentiality of data it processes. This policy does not claim any particular encryption implementation, security certification or independent audit.
The Rsheet application server is hosted by Bluehost in the United States. Bluehost also provides the cloud backup service, with backup storage located in the United States. Use of the service therefore involves storing and processing school records outside the school’s country where applicable.
Hosting and cloud backup providers may process data only as needed to provide their infrastructure services on JSM’s behalf, subject to applicable confidentiality and data protection obligations. They are not authorised by JSM to use school records for independent purposes.
Both the live server and cloud backups are located in the United States. Schools may also download and keep local backup copies on their own devices or storage systems. Overseas hosting does not remove applicable data protection obligations; any required international-transfer arrangements must be addressed as part of deployment.
The school may download its data and keep independent local backup copies. The school is responsible for protecting the copies it downloads and restricting access to them.
JSM backs up school data to Bluehost cloud storage in the United States every month. Cloud backup copies are retained for up to 12 months from their creation and are then deleted or expire under the backup retention cycle. Monthly backups are not continuous backups: information created or changed after the latest successful backup may not be recoverable from that backup if the live data is lost. Schools should keep additional copies as needed for their operations.
The 12-month retention period applies to JSM’s cloud backups. Schools determine the retention periods for their own local backup copies. Restoration procedures, restoration-testing arrangements and any agreed recovery times should be documented in the school’s service agreement. No fixed recovery time or guarantee of complete recovery is made here.
If JSM becomes aware that school records have been exposed, lost or accessed without permission, we will notify the school by email without undue delay, using its designated contact address. We will investigate, take steps to contain the incident, address its cause and restore affected services or records where possible.
As information becomes available, we will communicate the nature of the incident, the records affected where known, actions taken and any steps the school should take. We will cooperate with the school in meeting applicable notification obligations. A shorter notification deadline required by law or a signed agreement takes precedence. Schools must keep their contact email current.
A school may stop using Rsheet at any time. It may download its records and delete its data from the live server at any time using available school-authorised functions, or request assistance through the contact below. Only an authorised school representative may request deletion of institutional records. Schools should download any records they wish to retain before deletion.
Deleting records from the live server does not immediately remove historical copies from existing cloud backups. Deleted records may remain in those backups until the relevant copies expire or are deleted, for no longer than 12 months after deletion from the live server, subject to any legally required retention described below. JSM will not use retained backup copies for independent purposes. Any recovery from an older backup must respect the school’s deletion instructions so that deleted records are not returned to active use. Copies downloaded and stored locally by the school remain under the school’s control; the school is responsible for deleting those copies when appropriate.
Any records that must be retained by law must be limited to that requirement and protected from unrelated use. Where permitted, JSM will explain the reason and applicable retention period to the school. Ending a subscription does not transfer ownership of the school’s data to JSM.
The school is responsible for the authority to upload and use its records, providing appropriate privacy information to individuals, authorising users and observing applicable record-retention requirements. The school’s ownership of institutional records does not override individuals’ rights under applicable law.
Students, parents and staff should normally contact their school to request access, correction, deletion or other action concerning school-controlled records. JSM will assist the school with requests within the scope of the service and applicable law. Individuals may also contact JSM about its handling of their information.
JSM will disclose school records only on the school’s instructions or where disclosure is legally required. Any legally required disclosure will be limited to what is required, and the school will be informed unless notification is prohibited by law.
For privacy questions, incident reports, or assistance with data downloads or deletion, contact admin@jsmtechies.com, call +234 906 004 1007, or write to JSM Technology Solutions Int'l Limited, 5, Kwaji Close, Maitama, Abuja, Nigeria.
We will notify schools by email and display a notice on the site at least fifteen (15) days before material changes to this policy take effect. Each notice will identify the changes and their effective date. Any proposed change involving a new purpose for processing school records requires an appropriate lawful basis and the school’s documented authorisation where applicable.
Protecting school records and personal information is central to providing Rsheet. In summary:
Schools can correct and update their records through their authorised users. For assistance, privacy questions or concerns about JSM’s handling of information, use the contact details in Section 10. This summary does not replace the detailed provisions above or create permission to use school records for additional purposes.