SchoolSuite
Effective March 1, 2025

We value your privacy almost as much as you do.

A transparent overview of how Edulama collects, uses, and protects your information across our School Management Platform and mobile services.

Applicability
Schools, Parents, Students
Compliance
GDPR, FERPA, IT Act
Data Officer
[email protected]

Introduction

We are committed to protecting the privacy of schools, administrators, teachers, students, staff, and parents. Your privacy is fundamental to our mission of providing secure and reliable school management solutions.

Policy Scope
This policy explicitly outlines what data we collect, the rationale behind collection, our usage protocols, protection mechanisms, and your sovereign rights over your data.

By utilizing our platform, you acknowledge and agree to the practices described herein.

Information We Collect

We collect information across three distinct categories to provide and facilitate our services.

A. Institutional Data

School registration & legal entities
Physical & digital contact coordinates
Administrator credentials
Billing & financial instruments
Academic calendars & structures
Staff employment records
Configuration policies

B. User Data

Parents & Students
  • Biographical data & photographs
  • Academic performance & history
  • Attendance & disciplinary records
  • Medical & allergy information
Faculty & Staff
  • Qualifications & employment history
  • Payroll & banking details
  • Performance evaluations

C. Telemetry & Metadata

We automatically collect technical data to ensure system integrity:

IP Addresses
Device Models
OS Versions
Crash Logs

Usage of Information

Data is utilized strictly for service delivery. We utilize a strict "No Sell" policy regarding student data.

Operations

Platform access, feature delivery, fee processing.

Advanced Features

AI insights, automated reporting, GPS tracking.

Security

Fraud detection, audit logging, vulnerability testing.

Compliance

Regulatory reporting, educational research (anonymized).

Information Sharing

Third-Party Processors
We engage with vetting infrastructure partners. All partners are bound by strict DPAs (Data Processing Agreements).
Provider TypeExamplesPurpose
Cloud HostingAWS, AzureEncrypted Storage
PaymentsStripe, RazorpayFee Processing
MessagingTwilio, WhatsAppAlerts & OTPs
Strict Prohibition
We do not sell, rent, or trade personal data. Student data is never utilized for behavioral targeting or advertising.

Security & Protection

We employ defense-in-depth strategies to safeguard data integrity and confidentiality.

AES-256
Encryption at Rest
TLS 1.3
Encryption in Transit
SOC2
Compliant Process
24/7
Threat Monitoring

Additional Protocols

Bcrypt Hashing
WAF Intrusion Prevention
Daily Encrypted Backups
Role-Based Access (RBAC)
Vulnerability Disclosure Program

Children's Privacy

We adhere to the strictest standards regarding minor's data. Our platform operates as a School Official under FERPA and similar global regulations.

  • Direct School Supervision
  • No Direct Solicitation
  • Parental Control Portal
Compliance
FERPA
COPPA
GDPR-K
DPDPA (India)

Cookies & Tracking

We utilize essential cookies for platform functionality. We do not use cross-site tracking cookies for advertising.

Essential

Authentication, Security, Session. Cannot be disabled.

Functional

Preferences, Locale. Duration: 1 year.

Performance

Load balancing, Uptime monitoring.

Analytics

Anonymized usage patterns. Opt-out available.

Data Retention

Data is retained only as long as legally or operationally required.

Active School DataSubscription Duration + 90 Days
Academic Records7 Years (Legal Requirement)
Financial Logs10 Years (Tax Compliance)
Backups30-90 Days (Rolling)
Inactive Accounts2 Years

Your Rights

Right to Access
Right to Correction
Right to Deletion
Right to Portability
Right to Restrict Processing
Controller vs Processor
Schools act as the Data Controller for student records. Requests regarding student data (deletion/correction) should primarily be directed to the school administration. We process data on their behalf.

Contact

Primary Contacts

Privacy Office
[email protected]
Security Team
[email protected]
24/7 Emergency Response

Mailing Address

SchoolSoft Technologies Pvt. Ltd.
Privacy & Compliance Office
#1234, Tech Park, 5th Floor
HSR Layout, Sector 7
Bengaluru, Karnataka 560102
ID: POL-2025-V2End of Document