Privacy Policy — Klasso School ERP

At Klasso, we build software for schools, parents, and students. With that comes a profound responsibility to protect sensitive personal data. This policy outlines how we collect, use, store, and protect your data, specifically structured around the requirements of the Digital Personal Data Protection (DPDP) Act 2023.

Section 01

The Data We Collect

We process data solely to deliver the Klasso school management platform. We act as a Data Fiduciary for schools, who are the primary controllers of their student and staff data.

From Schools: Administrative details, staff records, and operational data.
From Parents & Students: Basic identifying information, fee payment records, attendance logs, and academic performance data provided by the school.
Technical Data: Standard access logs (device type, IP address) necessary for security and session management.

Section 02

Purpose of Collection

We believe in strict purpose limitation. Your data is used exclusively to:

Operate the Klasso platform (e.g., sending attendance alerts, calculating grades).
Process fee payments securely via our integrated gateway (Razorpay).
Provide customer support and technical troubleshooting.

We never sell your data to third parties. We do not use student or parent data for targeted advertising.

Section 03

Storage & Security

All data is hosted securely on our Supabase infrastructure, located entirely within the Mumbai, India (ap-south-1) region to comply with data localization requirements. We employ:

Row Level Security (RLS): Ensuring data from one school is cryptographically isolated from another at the database level.
Encryption: TLS 1.3 for all data in transit, and AES-256 for all data at rest.
Zero PII Logs: All personally identifiable information is stripped before technical logs are generated.

Section 04

DPDP Act 2023 Compliance

Klasso is engineered for DPDP compliance. Parents and schools have the right to request the viewing, correction, or erasure of their personal data. Consent mechanisms are built directly into the onboarding flows for the parent application.

Section 05

Data Portability

Schools own their data. The Klasso Admin Portal provides one-click CSV exports for all major data categories (students, staff, fees, results) at any time. There is no lock-in.

Your data belongs to you. Export everything, anytime — no support ticket required.

Section 06

Contact Us

For any privacy-related requests, questions about data processing, or to exercise your rights under the DPDP Act, please contact our Grievance Officer at contactklasso@gmail.com.