Privacy Policy

1. Introduction & Overview

This Privacy Policy governs the manner in which Shubham Nema ("we", "our", "us", or "Uttar Mitra ERP") collects, uses, maintains, and discloses information collected from users, educational institutions, school administrators, teachers, parents, and students through https://school.uttarmitra.in and related platform subdomains.

2. Scope & Information Collected

We process educational and administrative data solely on behalf of licensed educational institutions:

• Institutional Information: School name, affiliation details, administrator name, official email, phone number, and billing credentials.
• Student & Parent Information: Roll numbers, attendance timestamps, grade assessments, emergency contact numbers, and bus route assignments.
• Technical Telemetry: Anonymized device logs, IP addresses, browser types, and session metrics for high availability and DDoS prevention.

3. Compliance with Indian DPDP Act 2023

In strict compliance with India's Digital Personal Data Protection (DPDP) Act 2023 and IT Act 2000:

• We act as a secure Data Processor for participating schools (the Data Fiduciaries).
• Zero student data is ever sold, rented, leased, or monetized for third-party behavioral profiling or commercial advertising.
• All student and institutional data resides within certified Indian cloud data zones with end-to-end encryption at rest (AES-256) and in transit (TLS 1.3).

4. Security Measures & Retention

We implement industry-standard encryption, strict role-based access control (RBAC), multi-factor authentication, and regular vulnerability audits. Data is retained strictly during the active institutional contract lifecycle plus any statutory accounting retention duration.

5. Grievance Redressal Officer

In accordance with the Information Technology Act 2000 and DPDP Rules, the designated Grievance Officer is: