Privacy Policy

This Privacy Policy explains how [Your Registered Legal Name] ("we", "us"), operator of Anminira School ERP(the "Platform"), handles personal data. We act as a processor of data on behalf of each school (the data fiduciary/controller); schools determine what data is collected and why.

1. Data we process

• School & account data: school details, user accounts, roles, contact info.
• Student data (including minors): names, dates of birth, guardian details, enrolment, attendance, marks, fees and related records entered by the school.
• Staff data: profiles, attendance, salary/payroll details.
• Payment data: fee transaction records. Card/bank details for online payments are handled by the payment gateway, not stored by us.
• Technical data: log/audit records, device/browser type, and approximate location (country) derived from IP for security and anonymous website analytics. We do not store raw IP addresses in our analytics.

2. Children's / minors' data

The Platform processes data about children as part of school administration. This data is entered and controlled by the school, which is responsible for obtaining the consents required under applicable law (including the Digital Personal Data Protection Act, 2023 in India), such as verifiable parental consent where required. We process children's data only to provide the service to the school and do not use it for advertising or profiling.

3. How we use data

• To provide and operate the Platform's features for the school.
• To secure the Platform (authentication, audit logs, abuse/fraud prevention).
• To send transactional communications (e.g. account setup, notices, alerts) the school configures.
• To provide support and to maintain, back up and improve the service.

We do not sell personal data.

4. Sharing & third parties

We share data only as needed to run the service, with providers such as:

• Communication: SMS/WhatsApp/email providers (e.g. Twilio, MSG91) to deliver messages a school sends.
• Payments: payment gateways (e.g. Razorpay, PayU) for online fee collection.
• Infrastructure: our hosting/server provider.
• Geolocation: an IP-to-country lookup service for security and analytics.

We may also disclose data where required by law or to protect rights and safety.

5. Data security

We use technical and organisational measures to protect data, including role-based access control, encryption in transit (HTTPS), encrypted database backups, audit logging and server hardening. No system is perfectly secure, but we work to protect your data and respond to incidents.

6. Data retention

We retain a school's data for as long as its account is active and as needed to provide the service. On termination, we provide an export on request and then delete or anonymise the data within a reasonable period, except where law requires longer retention.

7. Your rights

Individuals may have rights to access, correct, or request deletion of their personal data. Because schools control their data, please direct such requests to your school in the first instance; we will assist the school in fulfilling valid requests as required by law.

8. Cookies & local storage

The Platform uses essential cookies/local storage to keep you signed in and remember preferences. We do not use third-party advertising cookies. Website-visit analytics are anonymous and do not rely on tracking cookies.

9. Changes

We may update this Policy. Material changes will be notified through the Platform or by email; the "Last updated" date above reflects the latest version.

10. Grievance & contact

For privacy questions or to raise a grievance, contact our grievance officer ([Grievance Officer Name]) at support@anminiraerp.com, [Registered Office Address]. We aim to respond within the timelines required by applicable law.