Privacy Policy

• Institute — a coaching centre or school tenant on the Platform.
• Institute User — staff authorised by an Institute.
• Student Data — personal data about students in the ERP.
• Parent Data — parent/guardian contact and portal data.
• Personal Data — as defined under the DPDP Act, 2023.

• For staff account data, Scholant OS is a Data Fiduciary.
• For Student and Parent Data entered by an Institute, the Institute is the Data Fiduciary and we act as a Data Processoron the Institute's instructions.
• Institutes must process data lawfully and obtain consent where required.

Institute Users

• Name, email, role, permissions, session logs, password hashes
• Institute branding and subscription status

Students & academics

• Identity, class/section, attendance, fees, exams, admissions
• Documents when admission uploads are enabled

Parents

• Contact details, portal/OTP sessions, payment references

Integrations & technical

• WhatsApp (Meta), email delivery, optional Razorpay
• IP, cookies, security and rate-limit logs

We process data to operate the ERP, authenticate users, send service emails, enable integrations, and keep the Platform secure.

We do not sell student data or use it for unrelated third-party advertising or AI training.

Processing is based on contract, legitimate operational needs, legal compliance, and consent where the DPDP Act requires it (e.g. parent OTP or WhatsApp, as arranged by the Institute).

We share data only to run the service, including with:

• Hosting (e.g. Vercel), database (e.g. Supabase), storage (e.g. AWS S3)
• Email (e.g. Resend), payments (Razorpay), WhatsApp (Meta)
• Authorities when required by law

Subprocessor details: contact@scholantos.com

• Active tenants — for the subscription period
• After termination — typically deleted within 90 days unless law requires longer
• Billing — as required for tax/accounting

Deletion requests: contact@scholantos.com

• HTTPS, httpOnly sessions, RBAC, tenant isolation
• Hashed passwords, rate limits, managed secrets

1. Notify parents/staff about data use
2. Process data lawfully for education/admin purposes
3. Respond to Data Principal requests for data they control
4. Keep fee, attendance, and result records accurate

Data Principals may have rights to access, correct, erase, withdraw consent, and lodge grievances under the DPDP Act.

Parents/students: contact your Institute first.

Platform matters: contact@scholantos.com (we respond within applicable timelines, ordinarily within 30 days).

We process minor's data only as instructed by Institutes for legitimate school operations—not for unrelated commercial profiling.

Essential cookies only (auth, locale, security). No advertising cookies on the ERP interface.

Institutes connect their own Meta Business account. Meta's terms apply to message delivery and retention.

We will notify Institutes and authorities as required if a breach poses risk to Data Principals.

We may update this Policy; the date above will change. Material changes may be notified by email or in-app notice to institute owners.

• Email: contact@scholantos.com
• Platform: https://app.scholantos.com

Privacy grievances: contact@scholantos.com (Scholant OS).

Governed by the laws of the Republic of India, including the DPDP Act and IT Act, 2000. See also our Terms of Service.