Privacy Policy

1. Introduction

Welcome to eSchool Saas - School Management System, a comprehensive School Management System designed to streamline and enhance educational operations. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our platform. Our system manages all aspects of school operations including student management, academics, examinations, fees, staff management, communication, and more.

By accessing and using our School Management System, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with any part of this policy, please do not use our services.

2. Information We Collect

2.1 Student Information

For students enrolled in our system, we collect:

Personal Details: Full name, date of birth, gender, admission number, roll number, admission date, photograph, current address, permanent address, email, mobile number, and parent/guardian contact information.
Academic Information: Class and section assignments, subject enrollments, academic session year, semester information, stream (if applicable), shift details, medium of instruction, and promotion/transfer records.
Academic Performance: Exam schedules, exam marks, grades, results, online exam responses, assignment submissions, attendance records, lesson progress, and topic completion status.
Custom Form Data: Additional information collected through custom admission form fields as configured by the school.

2.2 Parent/Guardian Information

Full name, email address, mobile number, relationship to student
Occupation, address, and emergency contact details
Payment information for fee transactions (processed through secure payment gateways)
Communication preferences and notification settings

2.3 Teacher Information

Personal details: name, email, mobile, address, date of birth, gender, photograph
Professional information: qualifications, subject expertise, class assignments, timetable schedules, and teaching subjects
Academic data: lesson plans, assignment creation, exam paper preparation, marks entry, and student evaluation records
Communication data: messages sent to students and parents through the chat module

2.4 Staff Information

Personal and employment details: name, email, mobile, address, position, role, department, and employment status
Payroll information: salary structure, allowances, deductions, payroll history, and payment records
Leave management: leave requests, leave balance, leave history, and leave without pay (LWP) records
Attendance records and work schedules

2.5 Financial Information

Fee Management: Fee structures, class-wise fees, compulsory fees, optional fees, fee installments, payment history, receipts, and transaction records
Payment Processing: Payment transactions processed through integrated payment gateways including Razorpay, Stripe, Paystack, and Flutterwave. We do not store complete payment card details; all sensitive payment information is handled by secure third-party payment processors.
Expense Records: School expense categories, expense entries, and financial reports

2.6 Academic Management Data

Class structures, sections, subjects, timetables, and academic schedules
Exam management: exam creation, exam timetables, grade systems, marks entry, result publication, and progress cards
Online exam data: exam questions, student answers, exam attempts, and online exam results
Lesson plans, lesson topics, study materials, and educational resources
Assignment details, submission records, and grading information
Holiday calendars and academic session year information

2.7 Communication Data

Announcements sent to students, parents, teachers, and staff
Chat messages between parent-teacher, student-teacher, and teacher-staff
Notifications and alerts sent through the system
Email communications and support requests

2.8 Technical Information

IP address, browser type, device information, and operating system
Login credentials (encrypted passwords), authentication tokens, and session data
Usage logs, access patterns, and system activity records
Cookies and similar tracking technologies
API usage data for mobile applications
Two-factor authentication settings and verification codes

3. How We Use Your Information

3.1 Educational and Academic Purposes

Managing student enrollment, admissions, and registration processes
Maintaining academic records, class assignments, and subject enrollments
Creating and managing timetables, class schedules, and academic calendars
Conducting examinations (both offline and online), recording marks, generating results, and publishing progress cards
Managing assignments, lesson plans, study materials, and educational content
Tracking attendance, academic performance, and student progress
Handling student promotion, transfer, and academic year transitions

3.2 Communication and Notifications

Sending announcements, notifications, and alerts to students, parents, teachers, and staff
Facilitating communication through the chat module between parents, students, teachers, and staff
Sharing exam results, attendance reports, fee reminders, and academic updates
Sending email notifications and SMS alerts (where configured)
Providing push notifications through mobile applications

3.3 Financial Management

Managing fee structures, fee types, and fee configurations
Processing fee payments through integrated payment gateways
Generating receipts, invoices, and payment transaction records
Managing staff payroll, salaries, allowances, and deductions
Tracking school expenses and generating financial reports
Handling partial payments and fee installments

3.4 Administrative Functions

Managing staff, teachers, roles, and permissions
Assigning class teachers and subject teachers
Managing leave requests, approvals, and leave records
Generating ID cards and certificates for students and staff
Maintaining school gallery, website content, and public-facing information
Managing database backups and system maintenance

3.5 Security and Authentication

Authenticating users and managing access controls
Implementing two-factor authentication (2FA) for enhanced security
Monitoring system access, detecting unauthorized activities, and preventing fraud
Maintaining audit logs and security records
Protecting against security threats and data breaches

4. Data Sharing and Disclosure

4.1 Payment Gateway Providers

We integrate with the following payment gateway providers for processing fee payments:

Razorpay: For payment processing in India
Stripe: For international payment processing
Paystack: For payment processing in Africa
Flutterwave: For payment processing in Africa

When you make a payment, your payment information is securely transmitted to the respective payment gateway. We do not store your complete payment card details. All payment data is handled according to the privacy policies of these third-party providers, which comply with PCI DSS standards.

4.2 Cloud and Hosting Services

Our system may use cloud hosting services and database management systems to store and process your data. These service providers are contractually obligated to protect your information and maintain appropriate security measures.

4.3 Mobile Application Services

If you use our mobile applications, we may use services like Firebase Cloud Messaging (FCM) for push notifications. These services process device tokens and notification preferences according to their respective privacy policies.

5. Data Security

We implement comprehensive security measures to protect your personal information:

Encryption: Sensitive data is encrypted both in transit (using SSL/TLS) and at rest using industry-standard encryption algorithms
Access Controls: Role-based access control (RBAC) ensures that users can only access information relevant to their role (Student, Parent, Teacher, Staff, Admin)
Authentication: Secure password hashing, two-factor authentication (2FA) support, and session management
Database Security: Separate database instances for each school, regular security updates, and database backup encryption
Network Security: Firewall protection, intrusion detection, and secure network configurations
Regular Updates: System updates, security patches, and vulnerability assessments
Backup and Recovery: Regular automated backups with encryption and disaster recovery procedures

6. Your Rights and Choices

Depending on your location and applicable laws, you may have the following rights:

Access: You can request access to your personal information and receive a copy of the data we hold about you
Correction: You can request correction of inaccurate or incomplete information
Deletion: You can request deletion of your personal information, subject to legal and educational record retention requirements
Objection: You can object to certain processing of your information
Data Portability: You can request transfer of your data to another service provider where technically feasible

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our platform:

Essential Cookies: Required for the system to function properly, including authentication and session management
Performance Cookies: Help us understand how users interact with our system to improve functionality
Functionality Cookies: Remember your preferences, language settings, and display preferences
Analytics Cookies: Used to analyze system usage and performance metrics

8. Children's Privacy

Our School Management System is designed for educational institutions and collects information from students, including minors. We take special care to protect children's privacy:

We collect only the minimum information necessary for educational and administrative purposes
Parental consent is obtained where required by law for student data collection
Parents and guardians have full access to their child's academic and personal information
We do not knowingly collect personal information from children without appropriate authorization from parents or school administrators
Student data is accessible only to authorized school personnel, teachers, and parents
We implement additional security measures to protect student information

9. Consent

By using our School Management System, you consent to the collection, use, storage, and disclosure of your information as described in this Privacy Policy. If you do not agree with any part of this policy, please do not use our services.

For students who are minors, consent is provided by parents or legal guardians through the school enrollment process.