Privacy Policy

1. Introduction

Welcome to ShikshaDuar ("we", "our", or "us"). We provide school management software, enterprise resource planning (ERP) services, and interactive mobile applications (including the KG Campus student portal). This Privacy Policy explains how we collect, process, store, and protect personal data belonging to schools, administrators, teachers, parents, and students who use our platform.

2. Information We Collect

In order to provide comprehensive school ERP services, we collect information under the following categories:

• Institutional Information: School name, trust or society affiliation, official email address, office phone number, physical address, and designated unique school code.
• Student & Guardian Information: Student full name, date of birth, gender, admission form number, auto-generated unique student ID, academic year, medium of instruction, class/grade, roll number, father/mother's name, primary phone number, and registered WhatsApp contact number.
• Fee & Financial Data: Admission billing records, tuition fee schedules, bus route subscriptions, discount assignments, and receipt histories. (Note: We do not store raw credit/debit card details on our servers).
• System Logs & Authentication: Temporary one-time passcodes (OTPs), verification timestamps, IP addresses, and session tokens.

3. How We Use Collected Data

Collected information is utilized exclusively for genuine educational and administrative objectives:

• To authenticate school personnel and verify students entering the KG Campus app using secure 4-digit WhatsApp OTPs.
• To generate official student IDs, fee books, admission invoices, and academic reports.
• To maintain institutional daily balance sheets, fee due registers, and bus transport allotments.
• To ensure platform security, troubleshoot technical bugs, and comply with applicable statutory laws.

4. WhatsApp Communications (Meta Cloud API)

ShikshaDuar integrates with Meta's official WhatsApp Cloud API to deliver transactional messages such as authentication OTPs and fee updates.

• We do not sell, rent, or share student or parent WhatsApp phone numbers with third-party advertisers or telemarketers.
• WhatsApp communications are strictly limited to transactional and administrative functions initiated or authorized by the school.
• OTPs sent to WhatsApp carry an automated expiration window (5 minutes) and are permanently purged after consumption.

5. Data Protection & Security Measures

We implement industry-grade technical and organizational safeguards:

• Role-Based Access Control: Strict segregation ensures school administrators can access only their own institution's student records.
• Cryptographic Protection: User passwords are encrypted using one-way Bcrypt hashing with high cost factors.
• Encrypted Transport: All data transmitted between client devices, our servers, and third-party gateways utilizes Transport Layer Security (HTTPS/TLS).

6. Student & Minor Privacy

As our platform serves educational institutions teaching primary, kindergarten, and secondary students, student data is entered and supervised directly by authorized school authorities or legal guardians. We never use student information for profiling, advertising, or commercial exploitation.

7. Data Retention & Deletion

School records and student archives are retained throughout the active duration of the school's subscription agreement. In the event of subscription termination or an official Transfer Certificate (TC) issuance, data is archived or purged in accordance with the school's instructions and institutional data retention regulations.

8. Grievance Redressal & Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to our Grievance Officer: