Privacy Policy

1. Introduction

This Privacy Policy complies with the Digital Personal Data Protection Act, 2023 and governs personal and business data processed on the ERP platform.

2. Data Collected

• Personal: Name, contact, login identifier, and role.
• Business: Organization records, invoices, configurations.
• Technical: Log data, device, usage analytics, and IP location.

3. Purpose and Legal Basis

Processing occurs for contract fulfillment, consented operations, statutory compliance, and system security. Data is never sold or processed beyond disclosed purposes.

4. Roles

The Provider serves as Data Processor, while the Client is Data Fiduciary determining collection purpose. Both adhere to consent and purpose limitation provisions under Section 5 of DPDP Act.

5. Storage, Retention, and Transfer

Data is stored in Indian data centers. Cross-border transfer requires written Client consent per Rule 7 of DPDP Rules, 2025. Retention shall not exceed service duration.

6. Rights of Data Principals

Users may request access, correction, withdrawal, or erasure of personal data by emailing the Data Protection Officer at DPO@schoolforschools.com. Requests are completed within statutory timelines.

7. Security Controls

Multi-factor authentication, encryption, periodic audits, and least-privilege access practices are implemented. Annual security audits shall be conducted by independent assessors.

8. Breach Notification

In case of breach, the Provider shall notify the Client and Data Protection Board of India within 72 hours detailing scope and remedial actions.

9. Children's Data (If Applicable)

If the ERP is deployed in educational domains, parental consent mechanisms and restricted access controls will apply for users under 18 years.

10. Policy Review and Updates

This policy is reviewed annually or as required by law, with updates shared through platform notifications.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us: