Privacy Policy

1. Introduction

Inter-College ("we", "our", "us") operates the school management platform available at inter-college.com. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our platform.

We aim to handle personal data in line with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable data protection laws, and we have designed the platform around data minimisation and role-based access. We have not been independently assessed or certified against any standard, and we do not claim formal compliance.

2. Data We Collect

• School administrators: Name, email, phone number, designation, school details.
• Students: Name, date of birth, gender, address, Aadhaar number (optional), medical information, academic records.
• Parents/Guardians: Name, phone number, email, relationship to student.
• Staff: Name, qualification, employment details, bank details (for payroll), PAN number.
• Usage data: IP address, browser type, pages visited, actions performed on the platform (for security and analytics).

3. How We Use Data

• Providing and improving platform services.
• Showing notices, attendance, fee and homework information inside the portal and the app. Email is currently used only for account emails such as a password reset; announcement email, SMS, WhatsApp and push delivery are not active.
• Generating reports, certificates, and documents for school operations.
• Recording fee payments against a payment mode, including Razorpay, on the receipts your school issues.
• Complying with legal obligations.

4. Data Sharing

We do not sell personal data. We share data only with:

• Service providers: Zoho, which delivers the email the platform sends today. Uploaded files are stored on the server that runs your school's instance unless we have told you otherwise in writing. Sentry may receive application error reports. Razorpay is recorded only as a label on receipts your office issues — no payment data is sent to it by the platform — and no data has been sent to Meta's WhatsApp service, which is written but not configured.
• Legal authorities: When required by law, court order, or government authority.

5. Data Retention

Student and academic records are retained as long as the school subscription is active, plus 1 year after termination (to allow data export). Financial records are retained for 7 years as per Indian tax laws. You may request data deletion by contacting us.

6. Your Rights (DPDP Act 2023)

• Right to access your personal data.
• Right to correction of inaccurate data.
• Right to erasure (subject to legal retention requirements).
• Right to raise a grievance, which we will acknowledge within two working days.

These requests are handled by our team by hand — there is no self-service screen for access, correction, export or erasure in the product. Exercise your rights by emailing: [email protected]

7. Security

Personal data is transmitted over TLS and each school's records are held in a separate PostgreSQL schema rather than in shared tables. Accounts carry roles, and access to platform-level records is restricted to platform administrators.

We state the limits plainly: we do not currently apply application-level encryption at rest beyond whatever the underlying host provides, we do not maintain an audit log of record-level changes, we do not offer two-factor authentication, and we have not commissioned an independent security audit or penetration test. Our security page describes what is in place and what is not in more detail, and we will answer specific questions from your school directly.

8. Contact

Data Protection Officer: [email protected]

Inter-College, India | +91-7897867722