Privacy Policy

1. Our Role: Data Processor

KudoClass mainly functions as a Data Processor. Simply put, we handle personal data only when we are given instructions by the educational institution (referred to as the "Data Fiduciary" or "Controller"). The school is the data owner at all times.

2. Information We Collect

We collect information only as necessary to provide the ERP services:

• Institutional Data: School name, address, and contact details.
• Student & Parent Data: Names, enrollment numbers, attendance records, academic grades, and guardian contact info (as provided by the school).
• Financial Data: Payment history and transaction status details (note, we don't keep full credit card/bank details on our servers; these are managed by encrypted payment gateways). ​‍​‌‍​‍‌
• Technical Data: IP addresses, browser type, and usage logs to ensure platform security and performance.

3. How We Use Information

We use the collected data strictly for:

• Facilitating school administration (attendance, grading, scheduling).
• Automating fee collection and generating receipts.
• Sending critical notifications (SMS/Email) to parents regarding student updates.
• Improving platform stability and preventing fraudulent access.

4. Data Security & Storage

We utilize top-level security measures to safeguard institutional data:

• Encryption: All data is encrypted in transit (SSL/TLS) and at rest.
• Hosting: Data is stored on secure VPS infrastructure with restricted access protocols.
• Backups: We perform backups automatically quite frequently mainly to safeguard the data in case the hardware suddenly stop working. It is not a guarantee but it certainly adds a level of safety to our data in case of failure.

5. Third-Party Sharing

KudoClass does not sell, rent, or trade student data or the data of institutions to third parties. Data is only shared with:

• Communication Gateways: SMS/Email service providers for sending school alerts.
• Payment Processors: To facilitate secure fee payments.

6. Data Retention

We keep data only during the period the Institution holds a valid subscription. After the cancellation of the service, a 30-day period is provided to the school for data exportation, after that, all information is deleted without a trace from our live databases.

7. Rights of Users

Under the Digital Personal Data Protection Act (India), users (through their school administration) have the right to:

• Access their personal data.
• Request corrections to inaccurate information.
• Request the deletion of data (subject to educational record-keeping laws).

9. Location Information

KudoClass may collect precise and approximate location information when the bus tracking feature is enabled.

Location data is used to:

• Provide real-time school bus tracking.
• Show bus locations to authorized parents and school administrators.
• Improve transportation and route management services.
• Send transportation-related notifications.

Location information is collected only with user permission and is used solely for providing transportation-related functionality.

Users may revoke location permissions at any time through their device settings.

9. Changes to This Policy

```

KudoClass reserves the right to update or modify this Privacy Policy at any time. Any material changes will be communicated to institutions through the KudoClass Admin Panel and/or other appropriate notification channels.

Privacy Inquiries

For any questions related to data protection or to raise a security concern, please get in touch with our Data Protection Officer:

KudoClass Privacy Team
KudoClass Privacy Team
Division of ONS TECH
Zirakpur, Punjab, India

Email: sales@kudoclass.com