Privacy Policy
Last updated: January 2025
NexSyrus ("we", "our", "us") provides school management and administration software ("Services"). This Privacy Policy explains how we collect, use, disclose, and protect information when you access or use our Services.
Table of contents
- Information we collect
- How we use information
- Legal bases (where applicable)
- How we share information
- Security
- Data retention
- Your rights and choices
- Children and student data
- International transfers
- Changes to this policy
- Contact
1. Information we collect
We collect information in the following categories:
1.1 Information you provide
- Account and contact details (name, email, phone number, designation).
- School/institution details (school name, address, identifiers, billing information).
- Content and data submitted to the Services by authorized users (for example attendance, fee records, exam schedules, notices, messages).
- Support requests and communications (including emails and call logs where applicable).
1.2 Automatically collected information
- Device and browser information, IP address, and approximate location derived from IP.
- Usage and event data (pages visited, actions performed, timestamps, referrers).
- Log data for reliability and security (authentication events, error logs, audit logs).
- Cookies or similar technologies used for session management and preferences.
1.3 Information from third parties
- Messaging providers for SMS/WhatsApp delivery status and routing information.
- Email delivery providers for deliverability, bounces, and engagement metrics.
- Cloud infrastructure providers for hosting, storage, and monitoring telemetry.
2. How we use information
We use information to operate, maintain, and improve the Services, including to:
- Provide the Services, authenticate users, and manage accounts.
- Process payments and administer subscriptions, where applicable.
- Send service communications (security notices, password resets, transactional messages).
- Provide customer support and respond to requests.
- Monitor, prevent, and investigate fraud, abuse, and security incidents.
- Comply with legal obligations and enforce our agreements.
- Analyze usage trends and improve product performance and user experience.
3. Legal bases (where applicable)
Depending on your location, we process personal data under one or more of the following legal bases: performance of a contract, legitimate interests (such as securing and improving the Services), compliance with legal obligations, and consent (where required).
4. How we share information
We may share information in these circumstances:
- With service providers who process data on our behalf (hosting, analytics, support tooling, messaging providers), subject to contractual confidentiality and security obligations.
- With your institution where the institution is the customer and controls user accounts and permissions.
- For legal reasons if required to comply with law, court orders, or lawful requests, or to protect rights and safety.
- Business transfers in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards.
We do not sell personal information.
5. Security
We implement technical and organizational measures designed to protect information, including access controls, encryption in transit, secure authentication, and monitoring for suspicious activity. No method of transmission or storage is 100% secure; you are responsible for maintaining the confidentiality of your credentials.
5.1 Data isolation
Each school's data is logically isolated from other schools. Access is governed by role-based permissions and tenant separation.
6. Data retention
We retain information for as long as necessary to provide the Services, meet legal and accounting requirements, resolve disputes, and enforce agreements. Retention periods may vary depending on the type of data and contractual requirements.
7. Your rights and choices
Subject to applicable law, you may have the right to:
- Access, correct, or update your personal information.
- Request deletion of certain information.
- Object to or restrict certain processing.
- Request a copy of your information in a portable format.
- Withdraw consent where processing is based on consent.
If your account is managed by a school/institution, requests may need to be directed to your institution administrator first.
8. Children and student data
Our Services are intended for use by schools and authorized staff. Student information is provided and controlled by the school/institution (acting as the data controller) and is processed by NexSyrus as a service provider/processor for the purpose of providing the Services.
9. International transfers
Your information may be processed in countries other than your own depending on our infrastructure and service providers. Where required, we implement appropriate safeguards for cross-border transfers.
10. Changes to this policy
We may update this Privacy Policy from time to time. If changes are material, we will post the updated policy on this page and update the “Last updated” date.
11. Contact
If you have questions or requests related to this Privacy Policy, contact us at:
- Email: nexsyrus@gmail.com
- Phone: +91 7892654731