Legal
Privacy Policy
How ZSchool4u collects, uses, stores, and protects personal data for schools, staff, students, and parents in India.
Last updated: 15 September 2026
1. Who we are
ZSchool4u ("we", "us", "our") provides a school ERP and management platform (web portal and Android app) for schools in India. This Privacy Policy explains what personal information we process when you use our websites, portal, and mobile application. For privacy requests email privacy@zschool4u.com. For legal notices email legal@zschool4u.com.
2. Scope & roles
Schools that subscribe to our platform are typically the "Data Fiduciary" (or data controller) for student, parent, and staff records they enter. ZSchool4u acts as a technology service provider / Data Processor for school-managed records, and as a Data Fiduciary for account credentials, support tickets, billing contacts, and product analytics we control. Schools must obtain lawful consent (including parental consent for minors) before uploading personal data.
3. Information we collect
Depending on your role and school configuration, we may process: • Identity & contact: name, email, phone, address, role, employee/student ID • School & academic: class, section, attendance, fees, exams, homework, timetable, messages • Profile media: profile photo, school logo (where uploaded by authorized users) • Biometric / RFID attendance: device identifiers, scan timestamps, and biometric template references where the school enables biometric attendance • Technical: IP address, device/app version, browser type, session logs, crash diagnostics, and security events • Communications: OTP emails, in-app notifications, SMS alerts sent on behalf of the school, and support correspondence • Billing (schools): school name, admin contact, subscription and invoice metadata
4. How we use information
We use personal data to: • Authenticate users (including OTP) and enforce role-based access • Deliver school operations: attendance, fees, academics, messaging, and parent updates • Operate, secure, troubleshoot, and improve the platform • Communicate service notices, security alerts, and (for school admins) product updates • Comply with applicable law, respond to lawful requests, and protect users and the service We do not sell personal data.
5. Legal basis (India — DPDP & related laws)
We process personal data as permitted under the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000 and rules thereunder, and other applicable Indian laws, based on: • Consent (where required), including school/parental consent for minors • Contractual necessity to provide the subscribed school service • Legitimate uses permitted by law for security, fraud prevention, and service integrity • Compliance with legal obligations Schools are responsible for collecting and recording required consents before enrolling users or enabling biometrics.
6. Children & student data
ZSchool4u is used by schools that serve minors. Student accounts are created and managed by the school, not by children independently. Parents/guardians should contact the school for access, correction, or deletion of a minor's school records. See our Child Safety & Student Data page for more detail. We do not knowingly use children's data for advertising.
7. Biometric & attendance data
Where a school enables biometric or RFID attendance, related data is processed only for attendance, security, and school reporting configured by that school. Schools must comply with applicable biometric, labour, and education privacy requirements before enrolment. We do not sell biometric data.
8. Sharing & processors
Data may be shared only as needed: • Within your school (admins, teachers, accountants, and other authorized roles) • With linked parents/guardians for their students • With infrastructure and service providers (hosting, email/SMS delivery, analytics, crash reporting) under confidentiality and security obligations • With professional advisors or authorities when required by law or to protect rights and safety If we transfer data outside India, we will do so in accordance with applicable law and contractual safeguards.
9. Retention
We retain data while a school subscription/account is active and thereafter as needed for legal, tax, audit, academic-record, dispute, or security purposes. Schools may request deletion or export subject to statutory retention duties. Backup copies may persist for a limited period before automatic purge.
10. Security
We use industry-standard safeguards including HTTPS/TLS, access controls, authentication (including OTP where enabled), and least-privilege role permissions. No method of transmission or storage is 100% secure. Report suspected incidents promptly to privacy@zschool4u.com or support@zschool4u.com.
11. Your rights
Subject to applicable law (including the DPDP Act), you may request access, correction, updating, or erasure of personal data, and withdraw consent where processing is consent-based. School-managed records should first be requested via your school administrator. Platform-level requests: privacy@zschool4u.com. Account/data deletion instructions: /account-deletion. Grievance: /grievance.
12. Cookies & similar technologies
Our website and portal use essential cookies (e.g. authentication session) and may use limited analytics cookies. Details are in our Cookie Policy (/cookies).
13. Changes
We may update this policy. The "Last updated" date at the top of the page will change. Continued use after updates constitutes acceptance where permitted by law. Material changes may also be communicated to school administrators.
14. Contact
Privacy: privacy@zschool4u.com Support: support@zschool4u.com Legal: legal@zschool4u.com Grievance Officer: grievance@zschool4u.com Website: https://www.zschool4u.com
This page is provided for transparency and compliance. It is not a substitute for formal legal advice. Schools should review their own policies and obtain counsel where needed for local education and privacy obligations.