Privacy Policy

Allotix is a product of PankoByte. If you have any question about this policy or about how your data is handled, write to us at [email protected].

Information you give us

When you submit the demo request form, we ask for your name, email address, institution, the estimated number of students you expect to allocate, and anything you write in the message field. We use it to respond to your enquiry, run the walkthrough, and discuss pricing.

Form submissions are delivered to our team through Web3Forms, which relays the message to us by email. If you would rather not use the form, email us directly at [email protected].

Information collected automatically

This website uses Google Analytics (via Firebase) to understand which pages people visit and how they arrive. This produces aggregate usage statistics — pages viewed, approximate region, device and browser type, and referring site. We do not use it to build an advertising profile of you, and we do not sell it. Details, and how to opt out, are in our Cookie Policy.

Our hosting provider also keeps standard server logs, which may include your IP address and request details. These are used to serve the site and keep it secure.

The Allotix application holds data your institution puts into it — administrator and staff accounts, and the student records, courses, capacities, eligibility rules, preferences, and allocation results for each allocation event.

Your institution controls that data. We use it to operate the service for them: running allocation, producing results, sending the notification emails they configure, and providing support. We do not use student data to train models, sell it, or share it with advertisers.

If you are a student and want your data corrected or removed, contact your institution — they decide what happens to their records. We will support them in acting on your request.

We rely on the following grounds:

• Contract — to provide Allotix to an institution that has purchased it, and to run the account.
• Legitimate interests — to respond to sales enquiries you send us, to keep the service secure, and to understand aggregate website usage so we can improve it.
• Consent — for optional analytics cookies, where your local law requires consent for them.
• Legal obligation — to keep tax, accounting, and transaction records.

We do not sell personal data. We share it only with service providers that help us run Allotix, and only to the extent they need it:

• Google Cloud and Firebase — hosting, database, application infrastructure, and website analytics.
• Web3Forms — delivery of demo request form submissions to our inbox.
• Payment providers — to take payment for credit purchases. Card details go to the payment provider, not to us; we never see or store your full card number.
• Email delivery providers — to send the notifications and transactional email the service depends on.

We may also disclose data if the law requires it, or to establish, exercise, or defend a legal claim.

Our providers may process data on servers outside your country. Where that happens, we rely on the safeguards those providers offer for international transfers, such as standard contractual clauses. If your institution requires data to stay in a specific region, raise it with us before deployment and we will tell you what is possible.

Demo enquiries are kept for as long as we are in contact with you about the enquiry, and for a reasonable period afterwards in case you come back to us. Account and allocation data is kept for the life of your institution's subscription. On termination, we delete or return institutional data as described in our Data Processing & Security page. Records we must keep by law — invoices, for example — are kept for the period the law requires.

Subject to your local law, you can ask us to give you a copy of your personal data, correct it, delete it, restrict how we use it, or object to our use of it. You can also withdraw consent to analytics at any time.

Write to [email protected] and we will respond. If your data sits inside an institution's Allotix account, we will pass your request to that institution, since it is their data to act on.

Allotix separates roles, scopes data to the allocation event it belongs to, and enforces access checks on the backend rather than trusting the browser. Data is encrypted in transit. Our Data Processing & Security page describes the controls in more detail.

Allotix is sold to institutions and used by their staff and enrolled students. It is not directed at children, and we do not knowingly collect data from children outside an institution's own enrolment records.

If we change this policy we will update the date at the top of this page. If a change materially affects how we use your data, we will give notice — by email to account administrators, or a notice on this site.

Privacy questions: [email protected]. Everything else: [email protected].