Privacy Policy

Devzuno Technologies Private Limited ("Company", "we", "our", "us") operates the School Thinker platform ("Service", "Product"). We are committed to protecting the privacy and security of the schools, administrators, teachers, parents, and students who use our platform. This comprehensive Privacy Policy outlines our practices regarding the collection, use, processing, and safeguarding of your data in compliance with applicable data protection laws.

1. Information We Collect

We collect various types of information to provide and improve our Service. This includes:

• Personal and Administrative Data: When a School registers, we collect details such as the school name, administrator name, email address, phone number, and billing address.
• Educational and User Data: Through the use of the Service, the School may upload data including student records, teacher profiles, attendance logs, academic performance, and disciplinary records. We act as a Data Processor for this information, while the School remains the Data Controller.
• Device Permissions (Camera & Storage): The mobile application requests access to your Camera and External Storage. This is strictly required to allow users to upload profile pictures, submit assignments, and attach documents (e.g., medical certificates for leaves). We do not access or collect photos/files other than those explicitly uploaded by the user within the app.
• Automatically Collected Data: When you access School Thinker, we automatically collect certain information about your device and usage, including your IP address, browser type, operating system, diagnostic data, and the time and date of your visits.

2. How We Use Your Information

We use the collected information for the following specific purposes:

• To provide, operate, and maintain the School Thinker platform.
• To authenticate users and ensure secure access to educational data.
• To process transactions, manage subscriptions, and issue invoices.
• To send administrative emails, technical notices, and security alerts.
• To provide customer support and respond to user inquiries.
• To monitor platform usage and perform analytics to improve our Service.

Strict Limitation: We never use educational records or student data for targeted advertising or marketing purposes.

3. Legal Basis for Processing

We process your personal data under the following legal bases: (a) Performance of a Contract: Processing is necessary to provide the Service as per our Terms & Conditions. (b) Legitimate Interests: For platform security, fraud prevention, and operational improvements. (c) Consent: Where the School has obtained explicit consent from users or parents to upload their data to our platform.

4. Data Sharing and Protection (No-Selling Clause)

We categorically do not sell, rent, or trade your personal data or student data to any third parties. We only share information in the following limited circumstances:

• Service Providers: We share data with trusted third-party vendors (e.g., AWS for cloud hosting, payment processors, SMS gateways) strictly as necessary to operate the Service. These providers are bound by strict confidentiality agreements.
• Legal Requirements: We may disclose information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

5. Data Security Measures

The security of your data is paramount. We employ a robust, multi-layered security architecture, including:

• Encryption: All data is encrypted during transit (using SSL/TLS) and at rest using industry-standard AES encryption.
• Access Control: We implement strict Role-Based Access Control (RBAC) to ensure that users can only access data relevant to their specific role.
• Audits: We conduct regular security audits and vulnerability assessments to protect against unauthorized access, alteration, disclosure, or destruction of data.

6. Data Retention and Deletion

We retain your information only for as long as your school's account is active. If the School terminates its subscription, all associated data (including all student and staff records) will be permanently and securely deleted from our active systems within 30 days of the account closure. Note that some minimal transactional data may be retained longer solely to comply with legal and tax obligations.

7. User Rights and Data Access

Subject to applicable laws, you possess several rights regarding your data: the Right to Access, the Right to Rectification (correction), the Right to Erasure (deletion), and the Right to Data Portability. School Administrators have full control over the data uploaded to their workspace and can manage these requests directly through the School Thinker dashboard. Account & Data Deletion Request: Any end-user (teacher, parent, student) who wishes to permanently delete their account and associated data can directly request this by emailing our support team at support@devzuno.com or contact@schoolthinker.com. We will process all deletion requests within 15 working days.

8. Children's Privacy & Age Restrictions

School Thinker is a B2B platform provided to educational institutions. We do not directly solicit, interact with, or collect personal data from minors (children under the age of 18) outside the context of the educational service. It is the sole legal and ethical responsibility of the School to obtain verifiable, documented consent from parents or legal guardians before uploading student data or providing students with access to the platform.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to ensure the proper functioning of the Service. We utilize Session Cookies (to keep you logged in securely), Preference Cookies (to remember your settings), and Security Cookies (to prevent CSRF attacks). You can instruct your browser to refuse all cookies, though this will significantly limit your ability to use the secure areas of School Thinker.

10. Data Breach Notification

In the highly unlikely event of a security breach that compromises personal information or student data, School Thinker commits to notifying the affected School Administrators within 72 hours of discovering the incident. Our notification will provide transparent details of the breach, the potential impact, and the mitigation steps being actively taken by our security team.

11. Third-Party Links

School Thinker may occasionally contain links to external websites, educational resources, or third-party tools. Please note that we do not operate these external sites. Therefore, we strongly advise you to review the Privacy Policy of these websites. We assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

12. Data Localization & International Transfers

Your information, including Personal Data, is processed at our operating offices and on highly secure cloud servers located primarily in India. By using School Thinker, you consent to the transfer, storage, and processing of your data in India, fully subject to Indian data protection laws and the Information Technology Act.

13. Changes to This Privacy Policy

We may dynamically update our Privacy Policy from time to time to reflect changes in our operational practices or to comply with new legal and regulatory requirements. We will notify School Administrators of any material changes via a prominent notice on the platform and via email prior to the change becoming effective. You are advised to review this Privacy Policy periodically.

14. Grievance Officer & Contact Information

In strict accordance with the Information Technology Act, 2000 and applicable data protection laws, if you have any grievances, concerns about data privacy, or wish to exercise your legal rights, please contact our Grievance Officer at:

Devzuno Technologies Private Limited
Email: support@devzuno.com / contact@schoolthinker.com
We will endeavor to investigate and resolve your concerns within the legally mandated timeframes.