Privacy Policy

Version 2026-11-13 · MinutesTracker, a product of EduGlobally (SMC-Pvt) Ltd

This policy explains what personal information EduGlobally (SMC-Pvt) Ltd ("we") handles when you use MinutesTracker, why, and what you can ask of us. We follow the law of Pakistan, including the Prevention of Electronic Crimes Act, 2016 (as amended in 2025) and the Electronic Transactions Ordinance, 2002. Pakistan does not yet have a general data protection law in force. Until it does, we follow the principles of the draft Personal Data Protection Bill as good practice: we collect only what is needed, use it only for the purpose given, keep it secure, and let you see, correct and remove it.

Who is responsible for what

Each organisation that uses MinutesTracker decides what goes into its own workspace: its members, meetings, minutes, actions and documents. For that content the organisation is responsible, and we handle it only on its instructions. If your name appears in an organisation's records and you have a question about it, please ask that organisation first.

We are responsible for the account and subscription information described below.

What we collect

• Account details: your name, work email address, role and organisation.
• Sign in data: a protected form of your password that cannot be turned back into the password. We never store or see the password itself.
• Meeting content entered by your organisation: boards and committees, members and their roles, agendas, papers, attendance, declarations of interest, discussion, outcomes, actions and documents.
• Acts you take on a record: when you acknowledge an agenda, confirm your attendance, endorse or sign minutes, we record what you did, the time, the name you typed, the internet address and the type of browser. This is what gives an endorsement or signature its value.
• Acceptance of these policies: the name, email, time, internet address, country and browser of the administrator who accepted, and the version accepted.
• Subscription records: your subscription code, the payments we have recorded for your organisation, their amounts, dates, method and reference. We do not collect or store bank card numbers.
• Activity record: who did what and when inside your workspace, so that changes can be traced.
• Security records: counts of failed sign in and code attempts against an internet address, kept for a short time to slow down guessing.

Why we use it

To provide the Service to your organisation, to keep it secure, to send the emails the Service needs (invitations, password resets, circulation of agendas and minutes, signing codes, and notices about your trial or subscription), to keep proper records of subscriptions and payments, and to meet our legal duties. We do not use your information for advertising. We do not sell it. We do not use the content of your meetings to train any artificial intelligence system.

Cookies and storage in your browser

We use only what the Service needs to work:

• mt_session: keeps you signed in, for up to 14 days.
• mt_operator: used only by the owner of the Service when signed in to the owner's console.
• A short note kept in your browser's own storage for the current tab, so that the page returns to the same place after you save something. It is never sent to us.

There are no advertising or tracking cookies. If the trial form shows a check that you are a person, that check is run by Cloudflare and may set its own cookie for that purpose.

Who we share it with

Only with the providers we need to run the Service, each for its own task:

• Cloudflare, which hosts the Service, its database and its document storage.
• Zoho (ZeptoMail), which delivers the emails the Service sends.

We also disclose information where the law of Pakistan requires it, for example under a lawful order. If a card payment provider is added later, this policy will be updated before it is used.

Where it is stored

With Cloudflare, with the Asia Pacific region preferred for the database. Cloudflare and Zoho operate in many countries, so information may be processed outside Pakistan. By using the Service your organisation agrees to this.

How we keep it secure

Every connection is encrypted. Passwords are stored only in a protected form. Each organisation's records are kept apart and every request is checked against the organisation it belongs to. Documents are never publicly reachable and open only for a signed in user of the organisation that owns them. Repeated wrong passwords or codes are slowed down. The chairperson's signature needs a one time code sent to their own email address.

What the owner of the Service can see

The owner's console shows the health of each account: subscription and payments, storage used, counts of records, the names of boards and committees, the user list, meeting references and dates, and the activity record. It does not show minutes, agenda outcomes, papers or documents.

How long we keep it

• Your organisation's records: for as long as it uses the Service, and for at least 90 days after a trial or subscription ends, after which we may delete them. Ask us and we will delete them sooner.
• Records of accepting these policies and of payments: for as long as the law requires us to keep business records.
• Security records of failed attempts: for a short time only.

What you can ask of us

You may ask to see the personal information we hold about you, to have it corrected, or to have it removed. An administrator can download the whole of the organisation's data from the Subscription page at any time. We reply within 30 days. Where the information is part of an organisation's meeting record, we will pass your request to that organisation, because the record is theirs.

If something goes wrong

If we learn of a breach of security that affects your organisation's information, we will tell the organisation's administrator without undue delay, say what we know, and say what we are doing about it.

Children

The Service is for organisations and the adults who work with them. It is not intended for children.

Changes to this policy

We may update this policy. The version date at the top changes when we do, and we give at least 30 days' notice of a change that matters where we reasonably can.

Contact and complaints

Write to info@edu-globally.com. If you are not satisfied with our answer, you may take the matter to the authority that has power over it under the law of Pakistan.