Sala builds the operating system that institutions across ASEAN run on — which means we hold data that schools, universities, ministries and their students trust us with. This policy explains what we collect, why, and the choices you have.
This policy covers personal data processed through Sala's websites, applications and APIs (the “Services”). Sala operates in two distinct roles, and the difference matters for your rights:
If you're a student or staff member
Your records are controlled by your institution, not by Sala. To access, correct or delete them, contact your institution's administrator first — we'll support their request.
Account and roster data needed to run the platform: names, contact details, role, enrolment and program information, attendance, grades, assessments, certificates, career-profile content and event registrations.
When you create a Hero career profile, request a demo, or contact us — your name, email, institution, and anything you choose to include in messages or your profile.
We do not sell personal data, and we do not use student records to train public AI models.
Where data-protection law requires a lawful basis, we rely on one or more of: performance of a contract (running the Services), legitimate interests (securing and improving the platform), consent (e.g. optional communications), and legal obligation. Where we rely on consent, you may withdraw it at any time.
Student records are the most sensitive data we handle, and we treat them accordingly:
We retain personal data for as long as an institution's account is active, and afterwards only as long as needed for the purposes below:
Sala is headquartered in Singapore (Salatech Pte. Ltd.) with operations in Cambodia, and serves institutions across ASEAN. Where data is processed in a country other than your own, we apply appropriate safeguards — contractual protections with our providers and, where relevant, regional data-residency options. Institutions with specific residency requirements should contact us before onboarding.
Subject to applicable law, you may request to access, correct, export or delete your personal data, object to certain processing, or withdraw consent. Where Sala is the processor, we route these requests to the relevant institution and assist them in fulfilling it. To make a request, email privacy@sala.tech; we respond within 30 days.
Many institutions on Sala serve learners under 18. We process children's data only on behalf of, and under the instructions of, the institution acting in its educational capacity — and we apply the same security and minimisation standards to it as to all student records. We do not knowingly collect children's data directly for our own purposes or for marketing.
We may update this policy as the Services and the law evolve. We'll post the revised version here with a new effective date, and for material changes we'll notify institution administrators directly. Continued use after an update constitutes acceptance.
Our team answers data-protection and processing-agreement questions directly.