Privacy Policy
Last Updated: June 5, 2026
1. Introduction
Welcome to School Matrix ERP, owned and operated by Blog Matrix. We are committed to protecting the privacy of your educational institution, its administrators, teachers, students, and parents. This Privacy Policy describes how we collect, use, share, and protect your information when using our school ERP platform.
2. Information We Collect
We collect data to provide operational school management services under instructions from the subscribing School Admin:
- Institutional Information: School name, address, affiliation numbers, and administrative contacts.
- User Accounts: Names, emails, phone numbers, and encrypted password credentials for staff, teachers, and guardians.
- Student Records: Student names, class assignments, roll numbers, attendance records, exam marks, and links to parent profiles.
- Billing & Fees: Fee heads, class fee allocations, and payment receipts. Note: We do not store credit card or raw bank account numbers directly; all payments are processed securely through partner gateways.
3. How We Use Information
We process your data strictly to fulfill our service commitments:
- To generate academic configurations (timetables, sessions, sections).
- To track student attendance and notify parents of updates.
- To process fee receipts and reconcile transactions.
- To dispatch automated WhatsApp notifications via official Meta Cloud APIs.
4. Data Scoping & Multi-Tenant Isolation
We enforce rigorous database-level isolation. Each school's data is strictly bound to its assigned school ID in MySQL. No administrator, teacher, student, or parent from one school can view, modify, or query any records belonging to another school.
5. Data Sharing & Third Parties
We do not sell, rent, or trade student or institutional data to third parties. Data is only shared with authorized sub-processors necessary for operations:
- Meta Platforms, Inc.: To deliver WhatsApp notifications requested by the school.
- Authorized Gateway Partners: To handle fee payment routing and instant receipt generation.
6. Data Security
All data is encrypted in transit using SSL/TLS and stored securely in certified databases. Access credentials utilize industry-standard bcrypt hashing. Regular security audits are conducted to prevent vulnerabilities.
7. Contact Information
If you have questions regarding this Privacy Policy or wish to request data deletion under India's DPDP framework, please contact our compliance officer at privacy@blogmatrix.com.