Privacy Policy

At EduNest, we take your privacy and the security of your school's data seriously. This Privacy Policy explains how we collect, use, and protect information within the EduNest platform.

1. Information We Collect

• Account Information: When an owner registers, we collect names, email addresses, phone numbers, and organization details to manage the subscription.
• User & Student Data: As a school management tool, our users (admins/teachers) upload data regarding students, staff, and parents. This includes attendance records, exam marks, and academic history. We act as a Data Processor for this information.
• Usage Data: We may collect technical data such as IP addresses, browser types, and usage patterns to optimize performance and security.

2. How We Use Information

We use the collected information to:

• Provide, operate, and maintain the EduNest platform.
• Process transactions and send invoices.
• Send critical service notifications (e.g., student attendance alerts, exam results).
• Improve our services based on anonymized usage trends.
• Verify legal acceptance of our Terms of Service.

3. Data Sharing & Third Parties

We do not sell your data. We only share information with third-party services that are essential for our operations, such as:

• Payment Processors: To handle subscription billing securely.
• Email/SMS Services: To deliver notifications and activation links.
• Cloud Hosting Providers: For secure database and application storage.

4. Data Security

We implement industry-standard security measures, including:

• Encryption: All data is transmitted over secure HTTPS (SSL) connections.
• Access Controls: Role-based access ensures that only authorized staff within your school can see specific data.
• Administrative Transparency: System administrator access for support is strictly controlled, authorized, and logged for your review.
• Audit Trails: We maintain a rolling 180-day history of all sensitive administrative actions, accessible to the School Owner via the Audit Log panel.
• Backups: Regular backups are conducted to prevent data loss.

5. Data Retention

We retain your school data as long as your account is active. Upon account termination, we allow a grace period for data export, after which data is securely deleted from our active servers in accordance with our data retention policy.

6. Your Rights

Owners and users have the right to access, correct, or request deletion of their personal information. For student data, parents should contact their respective school administration, and we will assist the school in fulfilling these requests.

7. Changes to this Policy

We may update this Privacy Policy periodically. Significant changes will be communicated via the platform or email.