Privacy Policy

1. Our Role: Data Processor

KudoClass mainly functions as a Data Processor. Simply put, we handle personal data only when we are given instructions by the educational institution (referred to as the "Data Fiduciary" or "Controller"). The school is the data owner at all times.

2. Information We Collect

We collect information only as necessary to provide the ERP services:

• Institutional Data: School name, address, and contact details.
• Student & Parent Data: Names, enrollment numbers, attendance records, academic grades, and guardian contact info (as provided by the school).
• Financial Data: Payment history and transaction status details (note, we don't keep full credit card/bank details on our servers; these are managed by encrypted payment gateways). ​‍​‌‍​‍‌
• Technical Data: IP addresses, browser type, and usage logs to ensure platform security and performance.

3. How We Use Information

We use the collected data strictly for:

• Facilitating school administration (attendance, grading, scheduling).
• Automating fee collection and generating receipts.
• Sending critical notifications (SMS/Email) to parents regarding student updates.
• Improving platform stability and preventing fraudulent access.

4. Data Security & Storage

We utilize top-level security measures to safeguard institutional data:

• Encryption: All data is encrypted in transit (SSL/TLS) and at rest.
• Hosting: Data is stored on secure VPS infrastructure with restricted access protocols.
• Backups: We perform backups automatically quite frequently mainly to safeguard the data in case the hardware suddenly stop working. It is not a guarantee but it certainly adds a level of safety to our data in case of failure.

5. Third-Party Sharing

KudoClass does not sell, rent, or trade student data or the data of institutions to third parties. Data is only shared with:

• Communication Gateways: SMS/Email service providers for sending school alerts.
• Payment Processors: To facilitate secure fee payments.

6. Data Retention

We keep data only during the period the Institution holds a valid subscription. After the cancellation of the service, a 30-day period is provided to the school for data exportation, after that, all information is deleted without a trace from our live databases.

7. Rights of Users

Under the Digital Personal Data Protection Act (India), users (through their school administration) have the right to:

• Access their personal data.
• Request corrections to inaccurate information.
• Request the deletion of data (subject to educational record-keeping laws).

8. Changes to This Policy

This Privacy Policy could be revised at any time. Real updates will be sent to institutions through the KudoClass admin panel.

Privacy Inquiries

For any questions related to data protection or to raise a security concern, please get in touch with our Data Protection Officer:

KudoClass Privacy Team
KudoClass Privacy Team
Division of ONS TECH
Zirakpur, Punjab, India

Email: sales@kudoclass.com