Privacy Policy

SUMMARY OF KEY POINTS

This summary provides key points from our privacy notice, but you can find out more details about any of these topics by using the table of contents below to find the section you are looking for.

• What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with Simple Shiksha School and the Services, the choices you make, and the products and features you use.
• Do we process any sensitive personal information? We may process sensitive personal information when necessary with your consent or as otherwise permitted by applicable law. This may include student academic records and biometric data for AI-based attendance.
• Do we receive any information from third parties? We do not receive any information from third parties.
• How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We process your information only when we have a valid legal reason to do so.
• In what situations and with which parties do we share personal information? We may share information in specific situations, such as with service providers who assist our operations or as required by law.
• How do we keep your information safe? We have organizational and technical processes and procedures in place to protect your personal information. All data is encrypted and stored securely on the cloud with regular automated backups. However, no electronic transmission over the internet or information storage technology can be guaranteed 100% secure.
• What are your rights? Depending on your location, applicable privacy law may give you certain rights regarding your personal information, such as access, correction, or deletion.
• How do you exercise your rights? The easiest way to exercise your rights is by contacting us. We will consider and act upon any request in accordance with applicable data protection laws.

Want to learn more about what Simple Shiksha does with any information we collect?

WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us
In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services. This may include:

• Student details (name, class, roll number, parent contact, academic records)
• Teacher and staff information (qualifications, employment history)
• School administrative data
• Attendance records (including AI-based facial recognition data)
• Fee payment details and history
• Login credentials and activity logs
• Names, phone numbers, email addresses, usernames, and passwords of users
• Contact preferences and communication data

Sensitive Information. When necessary, with your consent or as otherwise permitted by applicable law, we process student academic performance data, biometric data for attendance (with appropriate consent), and financial information for fee processing.

Payment Data. We may collect data necessary to process your fee payments, such as payment instrument numbers (credit/debit card details, UPI IDs). All payment transactions are securely processed through Razor Pay. You may find their privacy notice at https://razorpay.com/privacy/.

Social Media Login Data. We may provide you with the option to register using your existing social media account details. If you choose this option, we will collect the information described in the "HOW DO WE HANDLE YOUR SOCIAL LOGINS?" section.

Mobile Device Data. If you use our mobile application(s), we may collect mobile device access (camera for attendance features), push notification tokens, and device information (model, operating system, unique device ID) to maintain security, enable features, and for analytics.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes.

HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

We process your personal information for a variety of reasons, including:

• To facilitate school operations: manage admissions, attendance, fees, exams, timetable, and academics.
• To create and manage user accounts for administrators, teachers, students, and parents.
• To deliver and facilitate services: provide access to personalized dashboards, parent portal, and communication tools.
• To respond to user inquiries and provide support.
• To send administrative information: updates about Services, terms changes, and important notices.
• To enable user-to-user communications: facilitate messaging between parents and teachers.
• To process payments: handle fee collection, generate receipts, and manage financial records.
• To send non-marketing communications: attendance alerts, exam schedules, fee reminders, and academic updates.
• To protect our Services: monitor for fraud, prevent unauthorized access, and ensure platform security.
• To improve our Services: analyze usage trends, fix issues, and enhance user experience.
• To comply with legal obligations: respond to lawful requests from courts or public authorities.

WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason to do so under applicable Indian laws (primarily the Information Technology Act, 2000 and forthcoming data protection legislation).

We may rely on the following legal bases:

• Consent: We may process your information if you have given us specific permission (e.g., for AI attendance or sharing certain student data). You can withdraw your consent at any time.
• Contractual Necessity: We may process your information to fulfill our obligations under our agreement with your school, or at your request prior to entering into a contract.
• Legitimate Interests: We may process your information for our legitimate business interests, such as improving our platform, preventing fraud, and ensuring security, provided these interests do not override your rights.
• Legal Obligations: We may process your information where necessary for compliance with Indian laws, regulations, or legal processes.
• Vital Interests: We may process your information where necessary to protect someone's physical safety or vital interests.

WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share information in specific situations described in this section.

We may share your personal information in the following situations:

• With Service Providers: We may share information with third-party vendors who perform services on our behalf, such as payment processing (Razor Pay), cloud hosting, and analytics. These providers are contractually obligated to protect your data.
• With Your School: As a school management platform, certain data (e.g., student records, attendance) is accessible to the school's authorized administrators and teachers for educational purposes.
• Legal Requirements: We may disclose your information if required by law, court order, or government regulation (e.g., to comply with a subpoena from an Indore court).
• Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
• With Your Consent: We may share your information for any other purpose with your explicit consent.

We do not sell your personal information to third parties.

DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: We may use cookies and other tracking technologies to collect and store your information to improve your experience, maintain session security, and analyze usage. You can disable cookies in your browser settings, but this may affect certain features of our Services.

HOW DO WE HANDLE YOUR SOCIAL LOGINS?

In Short: If you choose to register or log in using a social media account (e.g., Google, Facebook), we may receive certain profile information from the provider, typically your name and email address. We use this information only for account creation and authentication. We recommend reviewing the privacy policies of your social media providers.

IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

In Short: Our primary servers are located in India (Asia-Pacific South-1 region). Your information is generally stored and processed within India. If you are accessing our Services from outside India, your information may be transferred to, stored, and processed by us in India. Indian data protection laws apply, and we take measures to protect your information in accordance with this policy.

HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice, unless otherwise required by law. We will retain your personal information for the duration of your school's active subscription with us. After termination, you may request data export within 30 days. Thereafter, we may retain certain information for legal compliance, fraud prevention, or dispute resolution, after which it will be securely deleted or anonymized.

HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We aim to protect your personal information through a system of organizational and technical security measures. We use industry-standard encryption, secure cloud infrastructure, regular backups, access controls, and monitoring to protect your data. However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to children under 18 years of age without parental consent. Our platform is used by schools to manage student data, and we rely on schools to obtain appropriate consent from parents or guardians. If we learn that personal information from a child under 18 has been collected without verifiable parental consent, we will take steps to delete that information. If you become aware of any such data, please contact us at suraj@foxaisr.com.

WHAT ARE YOUR PRIVACY RIGHTS?

In Short: You have certain rights regarding your personal information under Indian law, including the right to access, correct, or request deletion of your data. These rights may be exercised through your school administrator or by contacting us directly.

Your rights include:

• Access and Portability: You may request a copy of your personal information.
• Correction: You may request correction of inaccurate or incomplete data.
• Deletion: You may request deletion of your data, subject to legal limitations.
• Withdraw Consent: You may withdraw consent where processing is based on consent.

To exercise these rights, please contact us at support@simpleshiksha.com. We will respond to your request within a reasonable timeframe as required by law. Parents and students should first contact their school administrator for assistance with student-related data.

Opting out of communications: You can unsubscribe from promotional emails by clicking the "unsubscribe" link. Service-related messages (e.g., fee reminders, attendance alerts) may still be sent as necessary.

CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers include a Do-Not-Track ("DNT") feature. No uniform technology standard has been finalized, so we do not currently respond to DNT signals. If a standard is adopted in the future, we will update our practices accordingly.

GOVERNING LAW & DISPUTE RESOLUTION

This Privacy Policy and your use of our Services shall be governed by and construed in accordance with the laws of India. Any dispute arising out of or relating to this policy or our Services shall be subject to the exclusive jurisdiction of the courts located in Indore, Madhya Pradesh.

QUESTIONS OR CONCERNS?

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data practices, please contact us at:

For data-related requests or to report a privacy issue, please email us with "Privacy Request" in the subject line.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. We will notify you of any material changes by posting the updated policy on our website or through the dashboard, and by updating the "Last updated" date at the top of this policy. We encourage you to review this policy periodically.