This Privacy Policy explains how JEduManage (“JEduManage”, “we”, “us”) collects, uses, shares, and protects personal data when you use our school management software — the website at jedumanage.com, the web application, and the JEduManage mobile app (collectively, the “Services”). We are committed to handling the data of schools, staff, parents, and students responsibly and in line with India’s Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Who we are and how this policy works

JEduManage is a multi-tenant school ERP. Each school (the “institution”) operates its own isolated workspace, or “tenant”. For most student, staff, and parent data, the institution is the data fiduciary (the party that decides why and how data is processed) and JEduManage is the data processor acting on the institution’s instructions. For data you provide to us directly — for example a demo request on this website — JEduManage is the data fiduciary.

If you are a parent, student, or staff member, your relationship is primarily with your school, and your school’s own notices may also apply. This policy describes the practices common to the JEduManage platform.

2. Information we collect

Account information

When an account is created, we process identifying and contact details such as full name, email address, phone number, role (for example admin, principal, teacher, or parent), the school you belong to, and an encrypted password. Staff and parents may also have a profile photo.

Student and academic data

On behalf of the institution, we process student records entered by school staff, which may include admission details, class and section, roll number, guardian details, attendance, examination marks and report cards, fee structures and payment history, and homework and announcements. This data is entered and controlled by the school.

Login and authentication data

We process credentials to sign you in and keep you signed in. Staff sign in with email and password; parents sign in with phone number and password. Passwords are never stored in plain text — they are hashed using a strong, salted algorithm (argon2id). Schools may enable a one-time password (OTP) sent by SMS for additional verification of certain roles. We record sign-in timestamps and may keep short-lived session and refresh tokens.

Payment information

When a parent pays school fees online, the payment is processed by our payment gateway (Razorpay). We receive a transaction reference and status; we do not store full card numbers, UPI PINs, or banking credentials — those are handled directly by the gateway under its own security standards.

Device, technical, and usage data

When you use the Services we automatically receive technical data such as IP address, device and browser type, app version, and basic interaction events used to keep the Services secure and to understand aggregate usage. On the mobile app we may process a push notification token (see “Notifications” below).

3. Mobile app permissions

The JEduManage mobile app requests the following device permissions. Each is used only for the stated purpose, only when you choose to use the related feature, and you can decline or revoke them in your device settings (some features will then be unavailable).

Camera. Used only when you choose to take a photo — for example to capture a profile picture, a gallery image, or a homework attachment. The app does not access the camera in the background.
Storage / Files (uploads and downloads). Used to let you select files and images to upload (such as homework attachments or documents) and to save files you download (such as report cards, fee receipts, and hall tickets) to your device.
Notifications. Used to deliver push notifications about announcements, attendance, homework, and fee reminders via Firebase Cloud Messaging (FCM). See “Notifications” below.
Internet / network access. Required for the app to function — it connects securely to the JEduManage servers to sync your school’s data. The app does not work offline for live data.

4. How we use your information

To provide and operate the Services — accounts, attendance, fees, exams, communication, and the parent and teacher portals.
To authenticate users and keep accounts secure.
To send transactional communications such as login OTPs, fee reminders, absentee alerts, and announcements (by SMS, email, or push notification), as configured by the school.
To process online fee payments through our payment gateway.
To maintain audit logs of administrative actions for accountability and security.
To respond to demo requests and support enquiries you submit to us.
To monitor, troubleshoot, secure, and improve the Services.
To comply with legal obligations.

5. Cookies, sessions, and analytics

The web application uses essential session storage and tokens to keep you signed in and to protect against abuse — these are required for the Services to function. The public website may use privacy-respecting analytics (Google Analytics) to understand aggregate visitor behaviour using cookies or similar identifiers; this helps us improve the site. We do not use third-party advertising cookies. You can control cookies through your browser settings.

6. Notifications (Firebase Cloud Messaging)

Push notifications on the mobile app are delivered using Google’s Firebase Cloud Messaging (FCM). To route a notification to your device, FCM uses a device registration token. We use this token only to send you school-related notifications you are entitled to receive (such as announcements, homework, attendance, and fee reminders). You can turn off notifications at any time in your device or app settings. Google processes FCM data under its own terms.

7. Third-party services and data processors

We rely on a small number of trusted service providers to operate the Services. They process data only as needed to provide their service to us and under appropriate confidentiality and security obligations:

Amazon Web Services (AWS). Cloud hosting, databases, and file storage.
Razorpay. Online fee payment processing.
MSG91. SMS delivery (OTPs, reminders, alerts) using DLT-compliant templates.
Google Firebase Cloud Messaging. Push notification delivery.
Google Analytics. Aggregate website usage analytics.
Email delivery (SMTP). Transactional email such as account and notification messages.

We do not sell your personal data, and we do not share it with third parties for their own marketing.

8. Data security

We apply technical and organisational measures appropriate to the sensitivity of school data, including:

Strict per-tenant data isolation, so one school can never access another school’s data — enforced at the database query layer, not just in the interface.
Role-based access control, so each user sees only what their role permits (for example, a class teacher sees only their sections; a parent sees only their own children).
Encryption of data in transit using HTTPS/TLS.
Passwords hashed with a strong, salted algorithm (argon2id); we never store or display plain-text passwords.
An immutable audit log of sensitive administrative actions.
Regular, managed backups of school data.

No system can be guaranteed perfectly secure, but we work continuously to protect your data and to respond promptly to any incident.

9. Data retention

We retain personal data for as long as the institution maintains its account and as needed to provide the Services, comply with legal and academic record-keeping obligations, resolve disputes, and enforce agreements. When a school closes its account, its data is deleted or anonymised within a reasonable period, except where retention is required by law. Demo enquiry details are retained only as long as needed to respond and follow up.

10. Children’s data and the role of the school

JEduManage processes the personal data of students, who are often minors, strictly on the instructions of the school and for legitimate educational administration. The school is responsible for obtaining any consent required from parents or lawful guardians for the processing of a child’s data, as required under the DPDP Act. We do not use children’s data for advertising or profiling, and access to it is limited by role.

11. Your rights

Subject to applicable law, including the DPDP Act, you have the right to:

Access the personal data we hold about you and obtain a summary of how it is processed.
Request correction or updating of inaccurate or incomplete data.
Request erasure of your data where it is no longer required.
Withdraw consent where processing is based on consent.
Nominate another individual to exercise your rights in the event of death or incapacity.
Raise a grievance and, if unsatisfied, escalate to the Data Protection Board of India.

Because most student, staff, and parent data is controlled by your school, please direct such requests to your school in the first instance; we will support the school in fulfilling them. For data you provided to us directly, contact us using the details below.

12. Sharing and legal disclosure

We may disclose personal data if required to do so by law, regulation, legal process, or enforceable governmental request, or where necessary to protect the rights, safety, and security of our users, the public, or JEduManage. In the event of a business transfer, data may be transferred as part of that transaction, subject to this policy.

13. Hosting and data location

The Services are hosted on cloud infrastructure (AWS). We aim to host data in data-centre regions appropriate for our users in India. Where any processing occurs outside India through a service provider, we take steps to ensure appropriate safeguards consistent with applicable law.

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Services after an update constitutes acceptance of the revised policy.

15. Contact us

For any questions about this Privacy Policy, or to exercise your rights or raise a grievance, you can reach our Grievance Officer at:

Email: contact@jedumanage.com
JEduManage, Hyderabad, Telangana, India

You can also reach us through our contact page. We aim to respond to privacy requests within a reasonable timeframe.

See also our contact page and product features.