Privacy Policy

1. Introduction

Welcome to Schools Geek Technologies ("we," "us," or "our"). We are committed to protecting the privacy and security of the personal data we process. This Privacy Policy explains how we collect, use, store, and disclose personal data when you use our AI Operating System, platform, websites, and related services (collectively, the "Services").

This policy is designed to comply with applicable Indian laws, including the Digital Personal Data Protection Act (DPDPA), 2023, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

2. Our Role: Data Processor

In the context of providing our Services to educational institutions ("Schools"), we act as a **Data Processor**. The School is the **Data Fiduciary** (or "Data Controller") that determines the purposes and means of processing personal data. Our processing of personal data is governed by the agreement we have with the School.

3. Information We Collect

We collect information in the following ways:

3.1. Information Provided by Schools

Schools provide us with personal data about their students, parents, teachers, and staff to use our Services. This may include:

• Student Data: Name, admission number, date of birth, gender, address, contact details, academic records, attendance, health information, and photos.
• Parent/Guardian Data: Name, contact details, and relationship to the student.
• Staff Data: Name, employee ID, contact details, role, and subjects taught.

3.2. Information Collected Automatically

When you use our Services, we may automatically collect technical information, such as IP address, device type, browser type, and usage logs. This helps us maintain the security and performance of our platform.

4. How We Use Personal Data

We use the personal data entrusted to us only for the purpose of providing and improving our Services to the School, as instructed by the School. This includes:

• Operating, maintaining, and providing all features of the Services (e.g., managing admissions, tracking attendance, processing fees, enabling communication).
• Providing technical support and customer service.
• Ensuring the security and integrity of our platform.
• Generating anonymized or aggregated data for statistical analysis and service improvement (this data cannot identify individuals).

We **do not** build personal profiles of students for any purpose other than supporting their education. We **do not** use personal data for advertising.

5. Data Sharing and Disclosure

We do not sell, rent, or trade any personal data. We will only disclose personal data in the following limited circumstances:

• As Directed by the School: We share data as instructed by the School (e.g., enabling parent-teacher communication).
• Service Providers: We may use third-party service providers (e.g., cloud hosting, SMS gateways) who are contractually bound to protect the data and use it only for the services we request.
• Legal Compliance: If required by law, such as in response to a court order or lawful request from a government authority in India.

6. Data Security

We take data security extremely seriously. We implement robust technical, administrative, and physical safeguards to protect personal data from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Data encryption in transit (using SSL) and at rest.
• Strict access controls and authentication protocols.
• Regular security audits and vulnerability assessments.
• Compliance with "Reasonable Security Practices" under the IT Rules, 2011.

7. Data Retention

We retain personal data only for as long as necessary to provide the Services to the School or as required by our agreement with them. When a School terminates its contract with us, we will delete or return all personal data in accordance with their instructions and our data deletion policy, unless required to retain it by law.

8. Your Rights (Data Principal Rights)

Under the DPDPA, 2023, individuals (Data Principals) have rights regarding their personal data. As we are a Data Processor, any requests to exercise these rights (such as the right to access, correct, or withdraw consent) should be directed to the **School (the Data Fiduciary)**. We will provide full assistance to the School to help them respond to such requests.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify Schools of any material changes. We encourage you to review this policy periodically. Your continued use of the Services after any changes constitutes your acceptance of the new policy.

10. Contact Us (Grievance Officer)

In accordance with the Information Technology Act, 2000 and the DPDPA, 2023, we have appointed a Grievance Officer. If you have any questions, concerns, or grievances regarding this Privacy Policy or our data practices, please contact:

• Grievance Officer Name: Deepak Yadav
• Email: myschoolsgeek@gmail.com
• Address: Schools Geek Technologies, Rajnikhand, Lucknow Uttar Pradesh