Your data, protected with enterprise-grade care

Welcome to Universal Technologies Pvt. Ltd. ("Company", "we", "our", or "us"), operating through our official web portal at our web portal and our suite of enterprise applications, including Campus Management System (CMS-2026) and HRMS Pro.

We are committed to protecting the privacy, confidentiality, and security of our institutional clients, their administrators, faculty, employees, students, and guardians. This Privacy Policy describes how we collect, process, store, and safeguard personal and institutional data when you access our platforms, software services, cloud servers, and biometric push receivers.

By using our platforms or subscribing to our services, you acknowledge and agree to the practices outlined in this policy.

We collect information directly from client organizations (data controllers), individual authorized users, and connected hardware devices:

A. Institutional & Administrative

• Organization Details: Institutional name, registration status, physical address, and contact numbers.
• Account Credentials: Administrator/operator usernames, email addresses, and encrypted authentication tokens.
• Billing & Licensing Data: Invoiced records, bank challan references, subscription tenure, and service add-on logs (we do not store raw credit/debit card numbers on our local databases).

B. Academic, Student & Guardian (CMS)

• Student Profiles: Full name, roll number, class/grade, section, admission history, and guardian contact details.
• Academic Records: Examination marks, grade books, report cards, and automated diagnostic metrics.
• Attendance & Transaction Logs: Daily attendance timestamps, fee challans, concessions, and dues history.

C. Employee & HR Records (HRMS)

• Employee Information: Full name, employee ID, designation, department, and contact information.
• Payroll & Shift Scheduling: Basic pay structures, deductions, overtime logs, duty rosters, and leave approvals.

D. Biometric Terminal & Device Telemetry

• Terminal Data: Machine serial numbers, IP addresses, terminal models, firmware identifiers, and connection logs.
• Push Protocol Payload: Transaction logs transmitted via our ADMS push receivers (device ID, user card/badge ID, verification mode, timestamp).

Note: We process device-level verification codes and identification tags. Raw mathematical template structures remain encrypted within hardware memory partitions.

E. Technical & Browser Usage

• Usage Data: IP address, browser type (Mozilla Firefox recommended for optimal performance), operating system, access timestamps, and session activity logs.

We use collected data solely to deliver, secure, and maintain enterprise software operations, including:

1. Core Platform Operations Processing student attendance, running academic grade compilations, calculating employee payroll, and recording fee payments.
2. Real-time Notifications Dispatching automated parent SMS, transactional fee alerts, exam notifications, and official WhatsApp Business Cloud API messages.
3. Hardware-to-Cloud Synchronization Powering real-time terminal sync over TCP/IP via our centralized push receivers.
4. AI-Assisted Processing Generating structured question papers and cognitive difficulty assessments via API-level AI engines (e.g., Google Gemini).
5. System Security & Performance Monitoring server uptime, preventing unauthorized intrusions, and optimizing database concurrency.

• Generative AI Services: Where automated examination paper synthesis or test generators are utilized, prompts and syllabus structures are processed via enterprise API protocols. No student identifying data is shared with public AI training corpuses.
• Communication Gateways: We integrate with authorized SMS gateway aggregators and official Meta/WhatsApp Cloud APIs solely to deliver client-directed notifications and verification messages.
• Cloud Infrastructure Providers: Our hosting architectures operate on secure virtual private servers and dedicated clusters (including Hetzner and Hostinger) with strict firewall isolation and access controls.

Client Ownership The institutional client (School, College, University, or Enterprise) retains full ownership of its student, staff, and financial data. Universal Technologies Pvt. Ltd. acts as a Data Processor operating on behalf of the client ( Data Controller).

Logical Database Isolation All client instances and database schemas are partitioned to prevent cross-tenant data access or leakage between organizations.

• Active Subscriptions: Institutional records remain securely stored and backed up for the duration of the active software license.
• Contract Sunset & Expiry: Following service termination or system deprecation (such as migration away from legacy platforms), organizations are provided standard data export formats (e.g., encrypted Excel or SQL dumps). Inactive records are archived or permanently erased in accordance with contractual terms and local auditing regulations.

We implement enterprise-grade technical and organizational security measures:

Encryption Transport Layer Security (TLS/SSL) encryption for all browser-to-server traffic and ADMS push communication.

Role-Based Access Control Strict permission hierarchies ensuring staff, teachers, students, and operators can only access authorized data modules.

Process Management Isolated background workers (systemd services) and tuned database engines designed for resilient crash recovery and zero data loss.

Backup Mechanisms Automated database backups to off-site storage to protect against hardware or environmental incidents.

Our web portals utilize essential session cookies to maintain secure user authentication, role persistence, and interface preferences. We do not use third-party tracking cookies for targeted advertising within our core management portals.

Institutional administrators have the right to:

• Access & Correction: Access, update, or correct student, employee, and institutional records through their administration dashboards.
• Data Exports: Request automated data exports (CSV, Excel, or PDF) for auditing or migration purposes.
• Deactivation: Request the deactivation of user accounts or revocation of terminal push access.

Individual students, guardians, or employees seeking access to their records should direct inquiries to their respective institution's administrative office.

We may update this Privacy Policy periodically to reflect architectural upgrades, regulatory changes, or new platform features. Notice of material modifications will be posted directly within the CMS/HRMS system notification center or on our official website.

For any questions, data privacy inquiries, or security audit requests, please contact our administrative desk:

Company Universal Technologies Pvt. Ltd. (One Click Softwares & Services)

Web Portal our web portal

Email info@clickpak.net / support@clickpak.net

Support Helplines +92 334 8488800

+92 316 5147455

Operations Office Swabi, Khyber Pakhtunkhwa, Pakistan

Corporate Status Registered with FBR & Licensed under SECP