Privacy Policy

1. Introduction

Welcome to Syllabax ("we," "our," or "us"). We provide a School Management SAAS platform designed to help Educational Institutions manage student data, attendance, and academics.

We are committed to protecting the privacy of students, parents, and school administrators. This policy outlines how we handle data in compliance with the Digital Personal Data Protection Act (DPDP), 2023 and App Store guidelines.

2. Role Definition (Crucial)

• Data Controller (Data Fiduciary): The Educational Institution (School) that signs up for our service. They own the data and decide what information is collected.
• Data Processor: Syllabax. We provide the software and cloud infrastructure (via Microsoft Azure) to store and process this data on behalf of the School.

4. What Data We Collect

We collect information strictly necessary for the functionality of the school management system:

• Student Information: Name, Roll Number, Class, Date of Birth, Attendance records, Grades.
• Parent Information: Name, Phone Number, and Email Address. Note: Phone numbers are specifically utilized to deliver automated school alerts via WhatsApp and SMS (e.g., attendance notifications, fee reminders, and emergency announcements).
• Device Information: Device model, OS version, and Push Notification Tokens (for sending homework alerts).

5. WhatsApp Communication & Consent

To ensure timely updates between the School and parents, Syllabax integrates with the WhatsApp Business API.

• Opt-In: By providing their contact information to the School at the time of admission or registration, parents/guardians consent to receive administrative and educational alerts via WhatsApp.
• Opt-Out: Users may opt out of these communications at any time by contacting their School Administration to update their preferences, or by utilizing the opt-out mechanism provided directly within the WhatsApp chat interface.

6. App Permissions

Our mobile application (WebView) requires specific permissions to function correctly:

7. Data Storage & Security

Your data is hosted securely on Microsoft Azure Servers (Central India Region).

• Encryption: Data is encrypted in transit (HTTPS/TLS 1.2+) and at rest.
• Access Control: Strict role-based access control (RBAC) ensures teachers only see data relevant to their classes.
• Backups: Automated daily backups are maintained by Azure to prevent data loss.

8. Third-Party Services

We use the following third-party services to deliver our functionality. We only share the minimum necessary data required for these services to operate:

• Meta (WhatsApp Business API): We share the recipient's phone number with Meta strictly to facilitate the delivery of school alerts and notifications.
• Microsoft Azure: For cloud hosting and database management.
• OneSignal: For delivering push notifications to mobile devices.

9. Data Deletion

In compliance with Apple App Store Guideline 5.1.1, users may request data deletion. Since data is controlled by the School, students/parents must contact their School Administration for record removal. Schools may request full account termination via the Admin Dashboard or by visiting our Data Deletion Page.