Privacy Policy

1. Overview & Role Demarcation

SchoolEasy (“we”, “our”, or “us”) provides an integrated educational management platform designed for schools, academies, colleges, and multi-branch educational networks.

In providing our services, we operate under a clear role-based privacy demarcation:

2. Categories of Processed Data

To facilitate school administration, communication, and educational progress, the Platform processes the following information as inputted by the Institution or Users:

• Identity & Profile Records: Full name, institutional numeric username, email address, contact telephone, date of birth, gender, and school-assigned roll numbers.
• Academic & Operational Records: Enrolled branch, class, and batch; daily student and educator attendance logs; examination marks, grades, and report card summaries; educator timetables and room assignments.
• Financial & Fee Registers: Tuition installments, fee receipt numbers, payment methods, transaction references, and payment timestamps (representing school operational billing, not commercial consumer payments).
• Leave Applications & Health-Adjacent Documents: Leave requests, dates, category (including medical leave), stated reasons, and optional supporting documentation (such as doctor notes) submitted to school administrators.
• Institutional Communications: Campus notices, syllabus outlines, uploaded educational materials, and institutional feedback submissions.
• Technical Session Diagnostics: Essential session authentication tokens, IP addresses for security rate limiting, and technical user-agent metadata logged during system operation.

3. Administrative Oversight & Credential Control

The Platform is designed with centralized institutional administration to meet the daily realities of school environments:

4. Storage Architecture & Security Safeguards

All data is housed within secure, enterprise-grade cloud datacenters configured with strict technical and organizational safeguards:

• Encryption in Transit: All communications between user browsers, mobile applications, and our server infrastructure are encrypted using modern Transport Layer Security (TLS 1.2+ / HTTPS).
• Private Object Storage: Uploaded attachments, school notices, teaching syllabus files, and leave medical documents are stored in enterprise-grade private cloud object storage (Backblaze B2) protected by backend authentication, preventing unauthenticated public web access.
• Multi-Tenant Boundary Isolation: Every database query and storage asset is strictly partitioned by unique organizational identifiers (`organizationId`), ensuring that no institution can view, query, or modify the records of another institution.
• Role-Based Access Control (RBAC): Student, parent, educator, and administrator accounts operate under least-privilege permission matrices. Students and guardians access exclusively self-scoped progress routes.

5. Service Providers & Technical Subprocessors

We engage reputable tier-1 cloud and technology providers to assist in delivering platform functionality. Each provider is bound by strict confidentiality and security commitments:

6. Data Retention & Disposal

Institutional records are maintained for the active duration of the school’s subscription, or in accordance with statutory academic record-keeping standards required of educational institutions.

Upon termination of institutional service, the school is provided complete data export facilities. Following the conclusion of the thirty-day data retrieval grace period, institutional datastores and associated storage blobs are systematically removed from active production systems.

7. Rights of Guardians, Students & Staff

Because educational records are governed primarily by the subscribing institution:

• Parents and Guardians can review their children’s attendance, progress, and fee records at any time through their authenticated parent portal. Requests for corrections should be directed to the school administration.
• Educators and Staff can inspect their schedules, personal profile details, and attendance history through their staff dashboard.
• Institutional Corrections: Administrators maintain complete capability to update, correct, or archive student records within their school portal.