Back to Home

Privacy Policy & Student Data Safety

Last updated: September 13, 2026 | Effective immediately

1. Scope and Multi-Tenant Privacy Commitment

EduCloud ("we", "our", "us") operates the EduCloud School Management SaaS Web Platform and the EduCloud Mobile Application (Android/iOS). This Privacy Policy applies to all students, parents, guardians, teachers, and school administrators whose educational data is processed within tenant-isolated environments.

2. Information We Collect

We process educational records strictly as an authorized data processor on behalf of the subscribed school:

  • Student Profile: Full name, admission number, roll number, gender, date of birth, class and section.
  • Academic & Attendance Data: Daily attendance status (present, absent, late, mid-day meal records), examination marks, and term grades.
  • Parent / Guardian Contact: Name, phone number, email address, and billing invoice references.
  • Government Compliance Identifiers: UDISE+ school identifiers, APAAR/PEN numbers, and RTE quota designations where mandated by educational authorities.

3. Children's Online Privacy Protection & DPDP Act 2023 Compliance

Because our mobile application and web portals process student data, we adhere to strict protections under the Children's Online Privacy Protection Act (COPPA) and the Digital Personal Data Protection (DPDP) Act 2023:

  • We NEVER serve behavioral advertising or sell student data to any third party.
  • We do NOT track location or device identifiers outside of authenticated school sessions.
  • Student accounts and parental links are provisioned directly by the registered school administration.

4. Data Security & Storage Isolation

All communications between mobile clients and the EduCloud backend are encrypted using TLS 1.3 in transit. Multi-tenant database entries are logically separated using non-transferable school tenant tokens, preventing any cross-school data access.

5. Google Play Families Policy & Child Privacy Declarations

In strict accordance with the Google Play Families Policy, COPPA, and India DPDP Act 2023:

  • Zero Advertising: The EduCloud Mobile App does not contain any advertisements, ad SDKs, or interest-based marketing.
  • Zero Behavioral Tracking: We do not collect AAID (Google Advertising ID) or use third-party analytics that transmit persistent device identifiers of children.
  • Parental Supervision: All student accounts are managed directly under school administration with verified parental oversight.
  • Data Localization: Student records and database backups are strictly hosted within sovereign data centers located in the Republic of India.

6. Right to Erasure & Account Deletion

Parents, adult students, and faculty may exercise their statutory Right to Erasure under the DPDP Act 2023 and Google Play Account Deletion guidelines. You can submit an instant deletion request online:

Request Account & Student Data Deletion →

Note: Legally mandated educational records (such as passed board examination results and audited fee receipts) are retained in read-only statutory archives for 7 years under General Financial Rules (GFR).

7. Grievance Redressal Officer (DPDP Act India & IT Rules)

Designation: Chief Data Protection & Grievance Officer

Email: grievance@edusaas.com

Address: EduCloud Systems Pvt. Ltd., Tech Cyber Park, New Delhi, India

All grievance appeals and minor data inquiries are redressed within a statutory timeframe of 30 working days.