Draft for legal review — not yet in force. Placeholders in [brackets] are completed before launch.

SmartShala Privacy Policy

This policy explains what [legal entity name] ("SmartShala") does with the personal data of the people who register and run schools on SmartShala. The data of students, families and staff that a school keeps in SmartShala is the school's: the school is its data fiduciary under the Digital Personal Data Protection Act, 2023, and each school publishes its own privacy notice.

What we collect about you

Your name, role, mobile number and email; the school's name, district and UDISE+ code; your sign-ins and the actions you take in the platform; invoices and payments. We do not use advertising or analytics trackers.

Why

To create and secure your account, to verify that a school is genuine before it reaches families, to bill and support you, and to meet our legal duties.

Who sees it

Our staff who need it to support you, and the service providers listed in our processor register (hosting in India, messaging, email, payments). We do not sell personal data.

How long

While your account is open, then as long as the law requires (tax records: 8 years). Signups that never became a school are deleted after 90 days.

Your rights

You can ask to see, correct or erase your data, and to withdraw consent where we rely on it, by writing to [grievance officer email]. You may also complain to the Data Protection Board of India.

Grievance officer: [name] · [email] · [address]