Privacy Policy

ZEVIQ SOFTWARES PRIVATE LIMITED ("Scholva", "we", "our", or "us") is committed to protecting the privacy of the schools, administrators, teachers, parents, and students who use our school management platform. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you access or use the Scholva platform (the "Service").

By accessing or using our Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with these terms, please discontinue use of the Service immediately.

This policy applies to all information collected through our web application, mobile applications, and any related services or communications.

We collect several categories of information to provide and improve our Service:

• Account Information: When you register for Scholva, we collect your name, email address, phone number, job title, and school or institution name.
• Student and Staff Data: As a school management platform, we process data about students (names, dates of birth, enrollment records, attendance, grades, and health information where applicable) and staff (employment records, qualifications, and performance data) on behalf of the institution acting as data controller.
• Usage Data: We automatically collect information about how you interact with our Service, including IP addresses, browser type, device identifiers, pages visited, features used, and timestamps of activity.
• Communications: When you contact us for support or send messages within the platform, we retain the content of those communications.
• Payment Information: Billing details are processed directly by our payment processor (Razorpay) and are not stored on Scholva servers. We retain transaction records but not full card details.

We use the information we collect for the following purposes:

• To provide, operate, and maintain the Scholva platform and all its features.
• To process transactions, send invoices, and manage subscription billing.
• To send administrative communications, security alerts, and product updates.
• To provide customer support and respond to requests, questions, and feedback.
• To analyse usage patterns, diagnose technical problems, and improve the performance and features of our Service.
• To detect, investigate, and prevent fraudulent transactions, abuse, and other illegal activities.
• To comply with applicable laws and regulations, including data protection obligations.

We do not sell, rent, or trade personal information to third parties for their marketing purposes. We do not use student data to build advertising profiles or target advertisements.

We may share your information only in the following circumstances:

• Service Providers: We engage trusted third-party vendors who assist us in operating the Service (such as cloud hosting providers, email delivery services, and analytics platforms). These parties process data only under our instructions and are contractually bound to protect it.
• The Institution: Data entered by or on behalf of a school remains accessible to authorised personnel at that institution. Scholva acts as a data processor; the institution is the data controller for its own data.
• Legal Requirements: We may disclose information if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, personal data may be transferred. We will notify affected users before data is transferred and becomes subject to a different privacy policy.

We implement industry-standard security measures to protect your information from unauthorised access, disclosure, alteration, or destruction:

• All data is encrypted in transit using TLS 1.2 or higher.
• Data at rest is encrypted using AES-256.
• Access to production systems is restricted to authorised personnel using multi-factor authentication.
• We conduct regular security audits and penetration testing.
• Daily encrypted backups are maintained with a 30-day retention period.

Despite these measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security and encourage you to use strong, unique passwords and to report any suspected security incidents to security@scholva.com.

Depending on your jurisdiction, you may have the following rights with respect to your personal data:

• Access: You may request a copy of the personal data we hold about you.
• Rectification: You may ask us to correct inaccurate or incomplete data.
• Erasure: You may request deletion of your personal data, subject to our legal and contractual obligations. You can delete your own account at any time; see how to delete your account.
• Restriction: You may request that we limit the processing of your data in certain circumstances.
• Portability: You may request that we provide your data in a structured, machine-readable format.
• Objection: You may object to processing based on legitimate interests or for direct marketing.

To exercise any of these rights, please contact us at privacy@scholva.com. We will respond within 30 days. Note that rights relating to student data should generally be directed to the school acting as the data controller.

Scholva is a platform designed for use by educational institutions and is not directed to children under the age of 13 for independent use. All student data processed through our platform is done so under the direction of the school or institution, which is responsible for obtaining appropriate consents from parents or guardians as required by applicable law (including the Digital Personal Data Protection Act, 2023 in India, COPPA in the United States, and similar legislation in other jurisdictions).

Schools are responsible for ensuring that any use of our platform with student data complies with applicable laws regarding children's privacy. Our Data Processing Agreement sets out the obligations of schools in this regard.

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

• Email: privacy@scholva.com
• Company: ZEVIQ SOFTWARES PRIVATE LIMITED, Data Privacy Team

If you believe we have not adequately addressed your privacy concerns, you may lodge a complaint with the Data Protection Board of India or, if you are located in the European Economic Area, with your local data protection authority.