Shishya ERP - Privacy Policy

1. Information We Collect

a. Personal Information:
Teacher: name, email, employee ID, phone number, profile photo
Student: name, date of birth, gender, contact info, guardian details, profile photo
Payment details: fee amounts, payment mode, transaction references

b. Usage Information:
Attendance records, exam marks, fee status, and notifications sent
Login activity and IP address for security purposes

c. Files & Attachments:
Uploaded documents (ID proof, admit card, assignment files, PDFs)

2. How We Use Your Information

We use the information collected to:

• Provide and maintain the Shishya ERP app features (student management, attendance, fees, exams, communication).
• Generate reports, PDFs, and receipts for administrative and academic purposes.
• Send notifications via email or SMS to guardians and students.
• Monitor app usage for security, auditing, and quality improvements.
• Comply with legal and regulatory requirements.

3. Data Sharing & Disclosure

We do not sell or trade personal information.
We may share data with authorized personnel of the institute for administrative purposes.
Third-party providers (e.g., email, SMS, file storage, PDF generation) may process limited data to deliver their services, under strict confidentiality agreements.
In rare cases, we may disclose information if required by law or to protect the rights, property, or safety of users.

4. Data Storage & Security

All data is stored securely using encryption where applicable.
Passwords are hashed using industry-standard algorithms (bcrypt/argon2).
File uploads are restricted by type and size, and sensitive information like phone numbers can be encrypted at rest.
We implement role-based access controls to ensure only authorized users (teachers/admin) can access specific data.
Regular backups are performed to prevent data loss.

5. User Rights

Teachers can update their profile information and change passwords.
Institutes can manage student and teacher accounts.
Users may request data export or deletion in accordance with applicable laws.

6. Cookies & Tracking

The app may use cookies or local storage for session management and basic analytics.
No third-party tracking is used in the MVP version.

7. Children’s Privacy

Student data is managed by the institute and teacher; parents/guardians are the point of contact.
The app is designed to comply with privacy norms for minors; personal information is only used for academic purposes.

8. Third-Party Services

Email & SMS: Twilio, SendGrid, or local providers for notifications.
File Storage: AWS S3 or equivalent cloud storage.
PDF Generation: Server-side libraries for receipts and reports.
We ensure these providers follow strict security and privacy measures.

9. Changes to This Policy

We may update this Privacy Policy periodically.
Users will be notified of significant changes via email or in-app notifications.