EduSuite OS (“EduSuite OS”, “we”, “us”) provides a school operating system used by schools, staff, students, and parents. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and the rights you have over your data.
This policy applies to the EduSuite OS product, our marketing website, and any related services. School-controlled data is processed by us as a data processor on behalf of the contracting school.
1. Data We Collect
We collect data in three categories:
- Account data — name, email, role, school affiliation, login credentials, and authentication metadata.
- School operational data — student records, attendance, grades, fee transactions, communications, and supporting documents uploaded by school staff.
- Technical data — IP address, device and browser information, cookie identifiers, and usage logs needed to operate the product securely.
2. How We Use Data
- To deliver the EduSuite OS product to your school and your role within it.
- To process billing, invoicing, and platform subscription fees where applicable.
- To secure the platform, detect abuse, and meet audit and compliance obligations.
- To provide support and respond to questions or incidents.
- To improve product quality through aggregated, de-identified analytics.
We do not sell personal data. We do not use student data for advertising or profiling.
3. Legal Basis
Where required by law, we rely on the following bases:
- Contract — to deliver the services you or your school subscribed to.
- Legitimate interest — to secure the platform and improve product quality.
- Consent — for optional communications you opt into.
- Legal obligation — to meet tax, audit, and statutory record-keeping rules.
4. Data Sharing
We share data only with:
- Infrastructure and processing subprocessors (cloud hosting, database, email delivery, payment providers).
- The contracting school for school operational data, under their access controls.
- Authorities where compelled by valid legal process.
A current list of subprocessors is available on request to privacy@edusuiteos.in.
5. International Transfers
Where data crosses borders to a subprocessor, we use standard contractual clauses or equivalent legal mechanisms as required by your jurisdiction (GDPR, DPDP Act, Data Privacy Act of 2012, etc.).
6. Retention
School operational data is retained for the duration of the school's contract plus the period required by local law for academic and financial records. Account and technical data are retained for the period required to operate the platform and meet legal obligations, then deleted or de-identified.
7. Security
We use role-based access controls, encryption in transit, encrypted backups, audit logging, and secure software development practices. Schools are responsible for managing user access within their tenant.
8. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request deletion, subject to legal retention requirements.
- Object to or restrict processing.
- Lodge a complaint with your data protection authority.
For school-controlled data, please contact your school administrator first. For other requests, email privacy@edusuiteos.in.
9. Children's Data
Student records may include data about minors. EduSuite OS processes this data only on instruction from the contracting school and applies the security and access controls described above. Parents and legal guardians should direct requests to the school.
10. Changes to This Policy
We will update this policy as the product evolves or as laws change. Material changes will be communicated through the product or the marketing website.
11. Contact
For privacy questions: privacy@edusuiteos.in
For general support: hello@edusuiteos.in