Legal
Privacy Policy
Last updated: August 2026
This policy explains how Shikshaloy collects, uses, and protects information across our school management platform. It's written in plain language as a general reference — schools with specific regulatory or contractual requirements should have their legal counsel review it against those needs.
1. Information we collect
We collect information you provide directly (school, staff, student, and parent profile details entered by a school's administrators), information generated by using the platform (attendance records, grades, fee transactions, messages), and basic technical data (login timestamps, device/browser information) needed to operate the service securely.
2. How we use it
We use collected information to operate the platform's features (attendance, academics, fees, communication, and the other modules described on our Features page), to provide support, to secure accounts, and to improve the product. We do not sell personal data, and we do not use school or student data to train external models.
3. Children's data
Shikshaloy is used by schools to manage student records, and many students are minors. Student data is entered and controlled by the school (the data controller); Shikshaloy acts as a processor on the school's behalf. Parents and guardians should direct requests about a student's data to their school's administration, who can manage or export it through the dashboard.
4. Data isolation and security
Every school's data is isolated at the database level — access policies ensure staff, students, and parents can only see records belonging to their own school. Data is encrypted in transit. Access to production data by our team is limited to what's needed for support and maintenance.
5. Data sharing
We share data with sub-processors only as needed to run the service (e.g. hosting and payment processing infrastructure), under agreements requiring them to protect it. We do not share school or student data with third parties for advertising purposes.
6. Data retention
Data is retained for as long as a school's account is active, plus a reasonable period afterward to allow account recovery, unless a school requests earlier deletion or applicable law requires a different retention period.
7. Your rights
Depending on your role, you can request access to, correction of, or deletion of personal data through your school's administrator, who can action most requests directly from the dashboard. You may also contact us directly using the details below.
8. Cookies & analytics
We use essential cookies to keep you signed in and to remember basic preferences. We also use Google Analytics to understand how the platform is used and to improve it; this sets analytics cookies and shares usage data (such as pages visited and general device/location information) with Google. We do not use third-party advertising cookies or sell data to advertisers.
9. Changes to this policy
We may update this policy as the platform evolves. Material changes will be reflected here with an updated date.
Contact us
Questions about this policy or a data request can be sent to [email protected] or +91 99327 97131.