Privacy policy

Website visitors and demo requests: name, institution name and type, approximate student count, city, phone number, email and your message, plus basic technical logs (IP address, browser, pages visited).

Platform data processed for institutions: student and staff records (identity, academic, contact, address, emergency and medical notes, transport), guardian details, attendance and leave records, bus trip events and GPS points, notification preferences and delivery logs, and audit logs.

Biometric data: where an institution enables face recognition and verifiable consent has been given, we process face templates (encrypted numeric codes) and short-lived verification snapshots. Raw video is processed on devices at the institution and is not stored by us.

• Responding to demo requests and sales enquiries (your consent / legitimate business contact).
• Providing attendance, leave, transport-safety, notification and reporting services to institutions, on their instructions.
• Face recognition solely for attendance and safety - never for emotion or behaviour analytics, profiling or advertising.
• Security, fraud prevention, troubleshooting and legal compliance.

A child under the DPDP Act is anyone under 18. Processing of a child's personal data requires verifiable consent of a parent or lawful guardian. Face enrollment is technically blocked until a biometric consent record exists (guardian, method such as OTP, DigiLocker or signed form, notice version and timestamp).

We do not track or behaviourally monitor children and we do not use children's data for targeted advertising. Students without biometric consent can use RFID, QR or manual attendance with no loss of service.

We do not sell personal data. We share it only with:

• The institution that controls it and the users it authorises.
• Sub-processors that help deliver the service - cloud hosting in India, SMS (DLT-registered), WhatsApp Business API, push notification and email providers - under contracts requiring equivalent protection. A current list is available on request.
• Authorities where required by law.

TLS 1.2+ in transit, AES-256 encryption at rest, per-tenant encryption keys for face templates, encrypted and masked Aadhaar numbers, role-based access with object-level scope, two-factor authentication for administrators and an immutable audit log of exports and biometric access. See our Security & privacy page for details.

• Verification snapshots: 7-30 days, then automatically purged.
• Face templates: deleted when a student leaves or consent is withdrawn, including on all devices.
• Bus GPS points: 90 days.
• Attendance, leave and audit records: as set by the institution's policy and applicable law.
• Demo requests: up to 24 months after our last contact, unless you ask us to delete them earlier.

Platform data is hosted in India. We do not transfer it outside India except as permitted by law.

Subject to the DPDP Act, you may request access to a summary of your personal data, correction, completion, updating or erasure, withdraw consent, nominate another person, and seek grievance redressal. Parents can exercise most rights directly in the parent portal (view, download, correction request, consent withdrawal).

For platform data, please contact your institution first; we will assist it in responding. If you are not satisfied, you may approach the Data Protection Board of India.

The website uses only essential storage, such as remembering your light/dark theme preference. We do not use advertising cookies. The platform uses authentication tokens required to keep you signed in.

We maintain an incident response runbook. In the event of a breach we will notify the affected institution without undue delay and support notification to the Data Protection Board and affected individuals as required by the DPDP Rules.

[Grievance Officer Name], Grievance Officer / Data Protection Contact
Email: grievance@edupresence.example · Phone: +91 90000 00001
Address: Placeholder Address, Sector 00, City, State 000000, India
Acknowledgement within 48 hours; resolution within 30 days.

We will post changes on this page and update the date above. Material changes affecting consent will be notified to institutions and, through them, to guardians, with a new notice version where required.