Privacy Policy

EduSmartz is a school-management platform (web and mobile) operated by Edusmartz Softech Solutions(proprietor: Gautam Sharma), registered under Udyam (UDYAM-PB-11-0052718), with its registered address at A/4, Street 11, Onkar Nagar, Block A, Khothra Road, Phagwara, Kapurthala, Punjab, 144401, India (“EduSmartz”, “we”, “us”).

This policy explains what personal data we process through the EduSmartz web app and mobile app, why, and the rights you have over it, in line with India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”).

EduSmartz is provided to schools, which use it to run attendance, academics, fees, transport, hostel, library and communication records for their own students, staff and parents/guardians. Each school is the data fiduciaryfor its own students’ and staff’s records under the DPDP Act — the school decides what data is collected and why, as part of running the institution. EduSmartz acts as the technology provider that processes this data on the school’s behalf and under its instructions.

There is no public self-registration. Accounts (for staff, students, and the parents/guardians linked to a student) are created and managed by the school’s own administrators.

• Identity & contact details— name, date of birth, gender, photo, address, phone number, email, and login credentials for staff, students, and parents/guardians.
• Academic & school records— attendance, exam marks and results, homework, timetable, discipline notes, library and hostel records, transport allocation, ID card details, and fee/payment status maintained by the school.
• Communication data— notices, messages, and in-app/push notifications sent between school staff and parents/students.
• Device & usage data— login activity, device push-notification token (to deliver alerts), and basic app usage logs for security and troubleshooting.

We do not collect payment card numbers, bank details, or government ID numbers through the app; any fee collection is handled by the school through its own channels unless explicitly stated otherwise.

A significant part of the data on EduSmartz relates to students who are minors. We take this seriously and design the app around it:

• Student accounts are created by the school as part of admission and enrolment, and are linked to a parent/guardian account before the parent/guardian is given access — the school is responsible for obtaining parental/guardian consent for this processing as part of its admission process, consistent with Section 9 of the DPDP Act.
• We do not run behavioural monitoring, profiling, or targeted advertising directed at children, and the app carries no third-party ad networks or trackers.
• Parents/guardians can review the data linked to their child by signing in to their own account, and can request correction or deletion as described in Section 10 below.

• To operate core features: attendance, academics, fees status, library, hostel, transport, ID cards, and discipline records.
• To deliver notices and push/in-app notifications relevant to a student or staff member.
• To authenticate accounts and enforce role-based access, so a user only sees data relevant to their role.
• To maintain an audit trail of changes to sensitive records (e.g. fees, grades, contact details).
• To troubleshoot, secure, and improve the platform.

We do not sell personal data, and we do not use it for advertising.

We use a small number of infrastructure providers to run the platform, each processing data only to provide their service to us:

• Supabase — database hosting, authentication, and file storage.
• Vercel — web application hosting.
• Resend — transactional email (e.g. school invites, password resets).
• Google Firebase Cloud Messaging — delivery of push notifications to the mobile app.

These providers may process data on servers located outside India. We do not otherwise share personal data with third parties, except where required by law or with your school’s explicit instruction.

Data is encrypted in transit (HTTPS/TLS) and at rest. Access to records is restricted by row-level security policies tied to each user’s role and school, so a teacher, for example, can only see their own class, not the whole school. Changes to sensitive records are logged with who made the change and when.

We retain school records for as long as the school’s subscription is active, and for a reasonable period after to allow the school to export or transition its data, unless the school requests earlier deletion or a longer retention period is required by applicable education record-keeping laws. If a school account is closed, we delete or anonymise the associated data within a reasonable period, subject to any legal retention obligations.

The web app uses strictly necessary cookies/local storage to keep you signed in and to remember basic preferences. We do not use third-party advertising or analytics cookies.

Subject to the DPDP Act, you may request access to, correction of, or erasure of your personal data, and may withdraw consent where consent is the basis for processing. Because most student and staff records are created and controlled by your school, requests about those records are usually fastest through your school administrator; you can also contact us directly (Section 12) and we will coordinate with the relevant school where needed. See our Account & Data Deletion page for how to request deletion.

We may update this policy from time to time, for example as we add features or as the law changes. We will update the “Last updated” date above when we do. Material changes affecting how student data is handled will also be communicated to schools.

For any questions, requests, or complaints about this policy or your data, contact:

Gautam Sharma, Grievance Officer
Edusmartz Softech Solutions
Email: sales@edusmartz.in
Phone: +91 94172 62774
Address: A/4, Street 11, Onkar Nagar, Block A, Khothra Road, Phagwara, Kapurthala, Punjab, 144401, India