Privacy Policy
How School Management Solutions collects, uses, stores and protects personal data — including student data held on behalf of schools.
Last updated: 19 July 2026 · Questions about this page? Email info@schoolmanagementsolutions.in or call +91 808 070 7744.
Who we are
School Management Solutions (“we”, “us”) provides the e-school ERP platform. Our head office is at 14th Floor, Arab Building, Sewree Cross Road, Sewree (W), Mumbai 400 015, India, with a branch office in Jeddah, Saudi Arabia. For any privacy question, write to us at info@schoolmanagementsolutions.in.
Two different roles
For our own website visitors and prospective customers, we are the data controller. For student, parent and staff data held inside a school’s ERP account, the school is the controller and we are the processor — we process that data only on the school’s instructions and never for our own purposes.
What we collect from website visitors
Name, school name, phone number, email address and any message you send through a form; plus standard technical data such as IP address, browser type and pages visited. We use this only to respond to your enquiry and to improve the site.
What schools store in the ERP
Depending on the modules a school enables, this may include student and staff names, contact details, photographs, academic records, attendance, fee and payment records, health and transport information. The school decides what to store; we provide the infrastructure and safeguards.
How we use data
To provide and support the service, respond to enquiries, process payments, meet legal obligations and improve the product. We do not sell, rent or trade personal data, and we do not use student data for advertising or model training.
Cookies
We use strictly necessary cookies and local storage to remember your theme preference, recently viewed pages and session state. We do not set advertising cookies. You can clear these at any time through your browser.
Sharing
We share data only with sub-processors necessary to run the service — cloud hosting, payment gateways, and SMS/WhatsApp providers — each bound by contract. We disclose data to authorities only where legally compelled, and will tell the affected school unless prohibited from doing so.
Security
Data is protected with 256-bit SSL in transit, encryption at rest, role-based access control, optional two-factor authentication, daily backups and full audit logging. Access by our staff is restricted, logged and granted only where support requires it.
Retention
We retain account data for as long as the school remains a customer, and for a limited period afterwards to allow for export and dispute resolution. On written instruction from the school, we delete the data and confirm deletion.
Your rights
You may request access to, correction of, or deletion of your personal data, and object to certain processing. If the data concerns a student ERP record, please contact the school first, as they control it; we will support them in responding.
Children’s data
We knowingly process student data only on behalf of schools with the appropriate parental consent obtained by the institution. We never market to students.
Changes
We will post any change to this policy on this page and, for material changes, notify customer schools by email.
Still have a question?
If anything on this page is unclear, ask us directly — we’d rather explain it than have you guess.