Privacy Policy

1. Introduction

Eduflask (“we”, “our”, “us”) is a cloud-based institution management platform designed for educational organizations. This Privacy Policy explains how information is handled when institutions and their authorized users access or use the Eduflask platform.
By using Eduflask, you agree to the practices described in this Privacy Policy.

2. Data Ownership & Control

All data entered into the platform belongs solely to the respective educational institution.
Eduflask does not claim ownership over student, parent, staff, or institutional data.

• Eduflask acts strictly as a technology service provider, enabling institutions to manage their operations.

3. Data Storage and Processing

Eduflask does not permanently store or use personal data for its own purposes.
Data is processed only to provide platform functionality such as attendance, fees, notifications, reporting, and administration.

• Access to data is restricted to the respective institution through role-based permissions.

4. Types of Data Handled

Depending on institution usage, the platform may handle:

• Student information
• Parent or guardian details
• Teacher and staff information
• Academic, attendance, and administrative records
• Fee and billing records

5. Access Control & Confidentiality

• Data is accessible only to authorized users of the institution.
• Institutions control:
  • User roles
  • Access permissions
  • Visibility of records
• Eduflask support staff do not access institutional data, except where strictly required for platform functionality and system-level operations, without viewing or using personal content.

6. Payments & Third-Party Payment Processing

• All payments are processed via Razorpay.
• Eduflask does not store, process, or retain card or payment information.
• Razorpay's Privacy Policy applies to all payment transactions: https://razorpay.com/privacy/

7. Analytics & Usage Monitoring

Eduflask uses the following analytics tools across its web and mobile platforms:

• Google Analytics
• Microsoft Clarity

• Page views
• Interaction patterns
• Performance and error metrics

8. Notifications & Messaging

• Eduflask uses Meta WhatsApp Business API for institutional notifications and communication.
• Messages are sent only as configured by the institution.
• Eduflask does not use messaging data for marketing or external purposes.

9. Data Security Measures

Eduflask implements reasonable technical and organizational safeguards, including:

• Secure cloud infrastructure across multiple providers
• Role-based access control
• Encrypted data transmission
• Continuous system monitoring

10. Backup & Recovery

• Platform data is backed up every 24 hours.
• In case of system failure, recovery is limited to the most recent 24-hour backup.

11. Data Retention & Deletion

• Data remains accessible during the active subscription period.
• Upon termination of service:
  • Institutions may request data export
  • Data is retained for 30 days
  • After 30 days, data is permanently deleted

12. Data Export & Portability

• Institutions have the right to export their data upon request.
• Export requests must be raised through official support channels.
• Data is provided in a commonly used, readable format where feasible.

13. Legal & Regulatory Compliance

Eduflask complies with applicable:

• Indian Information Technology laws
• Platform and payment regulatory requirements
• Educational data handling standards

14. Children's Privacy

Eduflask is intended for use by educational institutions, not for independent use by children.
All student access is managed and controlled by the institution.

15. Changes to This Privacy Policy

• Eduflask may update this Privacy Policy from time to time.
• Continued use of the platform after updates constitutes acceptance of the revised policy.

16. Contact

For privacy-related queries, data requests, or concerns, please contact Eduflask through official support channels.