1. Introduction

School ERP ("we", "our", "us") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, store, and protect information when you use our school management platform.

2. Information We Collect

2.1 School Account Information

When you create a school account, we collect:

• School name, address, and contact details
• Administrator name and email address
• Billing information (for paid plans)

2.2 Student & Staff Data

Schools input student and staff data into the platform. This may include:

• Names, dates of birth, addresses, and contact information
• Parent/guardian details
• Academic records (attendance, exam marks, homework)
• Fee payment records
• Uploaded documents and photographs

Important: This data is entered and controlled by the school. School ERP acts as a data processor on behalf of the school (data controller).

2.3 Usage Data

We automatically collect:

• Device type, operating system, and browser
• Pages and features accessed
• Timestamps and session duration
• Error logs for debugging

3. How We Use Your Information

• To provide and maintain the School ERP service
• To authenticate users and manage access control
• To process fee payments and generate receipts
• To send service notifications and updates
• To improve the platform based on usage patterns
• To provide customer support

4. Data Storage & Security

All data is stored on Google Firebase/Firestore servers with the following security measures:

• Data encryption in transit (TLS/SSL) and at rest
• Firebase Security Rules ensuring school-level data isolation
• Role-based access control within each school
• Regular security audits
• Automated backups

5. Data Sharing

We do not sell, rent, or trade personal data. We may share data only in these cases:

• Service providers: Google Firebase for hosting and storage
• Legal requirements: If required by law or legal process
• With consent: When you explicitly authorize sharing

6. Data Retention

We retain school data for as long as the account is active. When a school deletes their account:

• All data is marked for deletion within 30 days
• Backups are purged within 90 days
• Schools can request data export before deletion

7. Your Rights

School administrators have the right to:

• Access all data stored in the platform
• Export data at any time
• Correct or update any information
• Delete student or staff records
• Request complete account deletion

8. Children's Privacy

School ERP processes student data on behalf of schools. Student data is handled with the highest level of care. We comply with applicable children's data protection laws and ensure that only authorized school personnel can access student information.

9. Cookies

Our website uses essential cookies for authentication and session management. We do not use advertising or tracking cookies.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify registered users via email for significant changes. The "last updated" date at the top indicates when the policy was last revised.

11. Contact Us

If you have questions about this privacy policy or how we handle your data:

• Email: privacy@schoolerp.com
• Phone: +91 98765 43210
• Address: Rajkot, Gujarat, India

---