Privacy Policy
Last updated: 4 November 2026
Enrollex is a university management system and student portal built and run by RIGGT (riggt.com). This policy explains what personal data Enrollex handles, why, and who is responsible for it.
Who is responsible for your data
Each university that uses Enrollex decides what student, staff and applicant records it keeps in its portal and how they are used. For those records the university is the data controller. If you are a student, teacher, parent or applicant, questions about your records (for example correcting your marks or personal details) should go to your university first.
RIGGT operates the Enrollex platform and processes those records on the university's behalf. RIGGT is responsible for the data it collects for its own purposes: this website, trial signups, quote requests and the accounts of university administrators who sign up with us.
What we collect
- Account data: name, email address, phone number, role (student, teacher, parent, university admin or sub-admin) and a securely hashed password.
- Student records: enrollment number, program, department, semester, courses, marks, attendance, CGPA and transcripts, timetables, quiz results, and document requests (such as an NOC, bonafide certificate or transcript).
- Personal details and uploaded documents: where a university asks for them, details such as father's name, CNIC number, date of birth, address and emergency contact, and uploads such as CNIC images, a profile picture and matric/FSc result cards and transcripts.
- Admission applications: the name, email, phone number, program, previous education and any documents an applicant submits through a university's online application form.
- Fee and payment data: fee challans, payment status, and payment proofs such as a bank transfer screenshot uploaded for review. Card and wallet payments through JazzCash or Easypaisa are completed on the payment provider's own pages; Enrollex does not store card numbers or wallet PINs.
- Signup and quote requests: the name, university, email and phone number you enter when you start a free trial or ask for a quote.
- Technical data: IP address, browser and device information and server logs, used to keep the service running, secure and rate-limited against abuse.
How we use it
- To run each university's portal and show each person the information their role allows.
- To send service emails, such as login details, application updates, document and fee notifications and announcements, and, if you turn them on, browser push notifications.
- To process fee payments and let university staff review payment proofs.
- To set up trial portals and respond to quote and support requests.
- To keep the service secure, investigate problems and fix errors.
- To understand, in aggregate, how this public website is used.
We do not sell personal data, and we do not use student records for advertising.
Cookies and analytics
When you sign in, Enrollex sets httpOnly cookies that keep you logged in. They cannot be read by scripts on the page and are only used for authentication. The site also stores a few preferences in your browser (for example your language choice and unsaved mark drafts for teachers).
This website uses Google Analytics 4 to measure visits to its public pages. Google Analytics uses its own cookies and receives information such as the pages you view, your approximate location and your device type. You can block it with your browser settings or Google's opt-out add-on.
Where your data is stored and who we share it with
The Enrollex website is hosted on Vercel. The application server and database that hold portal data run on a separate server operated for RIGGT. Uploaded files are stored on that server or with a file storage provider used by RIGGT.
We share personal data only with service providers that help us run Enrollex, and only as needed for that purpose. Depending on the features a university uses, these can include email delivery, payment providers (JazzCash, Easypaisa), file storage, error monitoring, SMS or WhatsApp notifications, and an AI provider for the optional Enrollex AI assistant. We may also disclose data if the law requires it.
How long we keep it
Portal records are kept for as long as the university uses Enrollex, or as the university instructs us. When a university stops using Enrollex it can ask us to export or delete its data. Trial and quote request details are kept while we are in contact with you about Enrollex.
Security
Passwords are hashed, sessions use httpOnly cookies, each university's data is kept separate from other universities, and access inside a portal is limited by role. No system is perfectly secure, so please keep your password private and tell your university or us if you think your account has been misused.
Your choices
You can ask to see, correct or delete your personal data. For records held by your university, contact your university, which can make the change in its portal. For anything else, or if you cannot reach your university, email us at hello@riggt.com.
Changes to this policy
We will update this page when the way Enrollex handles personal data changes, and change the date at the top.
Contact
RIGGT, the operator of Enrollex: hello@riggt.com · riggt.com