Privacy Policy

GSP School OS ("GSP", "we", "us", or "our") is committed to protecting the privacy of schools, staff, students, and parents who use our platform. This Privacy Policy explains what data we collect, how we use it, and your rights in relation to it.

By using the GSP platform, you agree to the collection and use of information as described in this policy. If you do not agree, please discontinue use of the Platform.

1. Information We Collect

1.1 Account and School Information

When a school registers, we collect:

• School name, address, and contact information
• Administrator name and email address
• Billing information (processed securely by Razorpay — we do not store card numbers)
• Subscription plan and payment history

1.2 User-Provided School Data

Through normal use of the Platform, schools upload and manage:

• Student profiles (name, date of birth, class, roll number, parent contact details)
• Staff profiles (name, designation, contact information)
• Attendance records
• Exam results and academic performance data
• Fee payment records

This data is entirely controlled by the school. We process it only on the school's instructions to provide the Platform's features.

1.3 Usage and Technical Data

We automatically collect certain technical information when you use the Platform:

• IP address, browser type, and device information
• Pages visited, features used, and time spent on the Platform
• Error logs and crash reports to help us diagnose and fix issues
• API request logs (stored for up to 30 days)

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Platform
• Process subscription payments and send billing communications
• Send product updates, support responses, and maintenance notices
• Diagnose technical issues and improve Platform performance
• Comply with legal obligations

We do not use student data for advertising, sell it to third parties, or use it for any purpose other than operating the Platform for the school that uploaded it.

3. Data Sharing and Third Parties

We share data only in limited circumstances:

Service Providers

We use trusted third-party providers to operate the Platform:

• Razorpay — payment processing (governed by Razorpay's Privacy Policy)
• Google Cloud Platform — infrastructure hosting in India (asia-south1 region)
• Email service providers — for transactional notifications only

All service providers are contractually required to protect data and use it only as instructed by us.

Legal Requirements

We may disclose information if required to do so by law, court order, or government authority, or to protect the rights, property, or safety of GSP, our users, or the public.

Business Transfers

In the event of a merger, acquisition, or sale of assets, School Data may be transferred to the acquiring entity, subject to the same privacy protections as described here. We will notify affected schools in advance.

4. Data Storage and Security

All School Data is stored on Google Cloud Platform servers located in India (Mumbai region — asia-south1). We implement industry-standard security measures including:

• TLS 1.2/1.3 encryption for all data in transit
• Encryption at rest for all databases
• Role-based access control (RBAC) to limit internal access to data
• Regular automated backups with point-in-time recovery
• Audit logs for all sensitive data access and changes

Despite our best efforts, no security system is impenetrable. In the event of a breach affecting your school's data, we will notify you within 72 hours.

5. Data Retention

We retain School Data for as long as the school's account is active. Upon account termination:

• School Data is accessible for export for 30 days after termination
• After 30 days, all School Data is permanently and irreversibly deleted from our systems and backups
• Technical/usage logs are retained for up to 90 days then deleted
• Billing records are retained for 7 years as required by Indian accounting law

6. Children's Privacy

The Platform is designed for use by schools and their authorised staff. Student data (including minors) is uploaded and controlled by the school, not directly by students or parents. Schools are responsible for obtaining any required parental consents before uploading student data to the Platform.

We do not knowingly collect personal information directly from children. Parent and student portals are accessed only through credentials issued by the school.

7. Your Rights

Schools and their users have the following rights regarding their data:

• Access: Request a copy of all School Data held by us
• Correction: Correct inaccurate data directly in the Platform or by contacting us
• Deletion: Request deletion of School Data (subject to legal retention requirements)
• Portability: Export your School Data in standard formats (CSV, Excel, PDF)
• Objection: Object to certain processing activities

To exercise any of these rights, contact us at hello@gspschoolos.com. We will respond within 30 days.

8. Cookies

The Platform uses only essential cookies required for authentication and session management. We do not use advertising or tracking cookies. The marketing website (gspschoolos.com) may use analytics cookies — you can opt out via your browser settings.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify schools of material changes via email at least 14 days before they take effect. The "Last updated" date at the top of this page will always reflect the most recent revision.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact our Data Protection contact:

GSP School OS
Email: hello@gspschoolos.com
Website: gspschoolos.com