Privacy Policy

Last updated: April 2026

VidyaSuite ("we", "us", "our") is a school-management platform operated from India. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using VidyaSuite you agree to this policy. If you do not agree, please do not use the service.

1. Who controls your data

For school staff, parents, and student records stored inside a school's VidyaSuite account, the school is the data controller and VidyaSuite is the data processor. Schools decide what information is entered and how long it is kept. Requests to see, correct, or delete student or parent data should be sent to the school administrator in the first instance.

For the school-administrator account itself (the person who signs the school up, the billing email, and anyone who registers directly on vidyasuite.com), VidyaSuite is the data controller.

2. Information we collect

• Account information — name, email address, phone number, password (hashed), school name, subdomain.
• Student / parent records — entered by the school; can include names, contact details, class, section, fee status, attendance, marks, and documents the school uploads.
• Usage data — IP address, browser, pages visited, timestamps. Used to operate and secure the service.
• Billing data — subscription plan, amount paid, invoice metadata. Payment card numbers are handled by our payment processor and never stored on VidyaSuite servers.
• Communications — emails, OTP verifications, and support messages you send us.

3. How we use information

• Provide, operate, and maintain the platform.
• Verify identity via one-time passwords (OTPs) sent to your email.
• Send transactional emails (reset links, receipts, critical alerts).
• Prevent abuse, fraud, and unauthorised access.
• Improve the product and troubleshoot issues.
• Comply with legal obligations.

We do not sell personal data. We do not use student data for advertising.

4. Sharing

We share data only with:

• Service providers who run parts of our infrastructure (hosting, email delivery, payments) under contract.
• Your school (for parent / student data inside a school account).
• Law enforcement or regulators when we're legally required to.

5. Security

We store data on Hostinger Cloud hosting with HTTPS in transit, passwords hashed with bcrypt, per-tenant database row isolation, OTP-verified email sign-up, and brute-force rate limiting. No system is perfectly secure — please use a strong password and tell us immediately if you suspect your account has been compromised.

6. Retention

School data is retained for as long as the school's account is active. If a school cancels, we retain the data for 90 days to allow reactivation, then delete it. Billing records are retained for 7 years to meet tax requirements.

7. Your rights

You can request a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. Email us at support@vidyasuite.com — we respond within 30 days.

8. Children

VidyaSuite is not directed at children to sign up on their own. Student accounts are created only by their school. Parents who wish to review or have their child's data removed should contact the school administrator.

9. Changes

We may update this policy. Material changes will be announced by email to the school administrator at least 30 days before they take effect.

10. Contact

VidyaSuite
Email: support@vidyasuite.com