Privacy Policy

Student Data: Name, class, section, attendance records, marks, co-scholastic grades, and learning progress data as entered by authorized school staff.

Parent/Teacher Data: Name, email address, phone number, and relationship to students. Teachers may also have subject assignments and attendance records.

School Data: School name, board type, address, class configuration, section names, and subjects offered.

Device Information: When using our mobile app, we may collect device type, operating system version, and app version for technical support purposes.

Game Scores: When students play learning games, we collect scores and performance data to track educational progress.

Service Delivery: To provide the school management platform, including student management, attendance tracking, marks entry, report card generation, and parent communication.

Educational Analytics: To generate student analysis, rankings, and award recognition (class toppers, subject toppers, perfect attendance).

Communication: To send announcements, event notifications, and workshop updates to parents and teachers through the platform.

AI/ML Features: To provide career advice recommendations and personalized learning suggestions through our AI service.

Platform Improvement: To improve our services, fix bugs, and enhance user experience.

We take children's privacy seriously. VedaLoop operates under a school consent model:

Schools act as the authorized agent providing consent for the collection of student data in the educational context. We do not collect personal information directly from children — all student data is entered by authorized school administrators and teachers.

Data Minimization: We only collect student information that is necessary for educational purposes and school management.

Parental Rights: Parents can view their child's data through the parent app and may request access, correction, or deletion of their child's information by contacting us or their school administration.

No Advertising: We do not use student data for advertising purposes or share it with advertisers.

VedaLoop supports compliance with the Family Educational Rights and Privacy Act (FERPA) principles:

Education Records: Student data stored in VedaLoop is treated as education records under the school's control. Schools maintain ownership of all student data.

School Authorization: We only process student data as directed by the school under our service agreement. Schools determine what data is entered and who has access.

Access Control: Multi-tenant architecture ensures each school's data is isolated. Teachers and parents only see data relevant to their students.

Cloud Infrastructure: Data is stored on TiDB Cloud (database) with industry-standard security measures.

AI Processing: Our AI features use Groq for processing. Queries are anonymized and not stored by the AI provider.

No Sale of Data: We never sell, rent, or trade personal information to third parties.

Legal Requirements: We may disclose information if required by law, court order, or to protect the safety of our users.

Encryption: All data in transit is encrypted using TLS/SSL. Passwords are hashed using industry-standard algorithms.

Authentication: JWT-based authentication with role-based access control. OTP verification for parent and teacher accounts.

Multi-Tenant Isolation: Each school's data is logically isolated using tenant identifiers. Cross-tenant data access is prevented at the application and database level.

Access Controls: Role-based permissions ensure users only access data appropriate to their role (Super Admin, School Admin, Teacher, Parent).

Active Accounts: Data is retained as long as the school maintains an active subscription with VedaLoop.

Account Deletion: Schools may request complete deletion of their data. Upon request, all tenant data (students, parents, teachers, marks, attendance, etc.) will be permanently deleted within 30 days.

Individual Deletion: Parents may request deletion of their child's data through the school administration or by contacting us directly at support@vedaloop.in.

Backup Retention: Backup copies may be retained for up to 90 days after deletion for disaster recovery purposes, after which they are permanently purged.

You have the right to:

• Access your personal data stored on our platform
• Correct inaccurate or incomplete information
• Delete your account and associated data
• Export your data in a portable format (data portability)
• Restrict processing of your data in certain circumstances
• Object to processing of your data for specific purposes

To exercise any of these rights, please contact us at support@vedaloop.in.

If you have questions about this privacy policy or our data practices, please contact us:

Email: connect@vedaloop.in

Website: vedaloop.in

We may update this privacy policy from time to time. When we make significant changes, we will notify schools and users through the platform and update the "Effective Date" at the top of this page.

Continued use of our services after changes are posted constitutes acceptance of the updated policy.