Privacy Policy

1. Information We Collect

Welcome to School Songi, operated by Dahuk Infotech. We respect your privacy and are committed to safeguarding personal information collected across our website, web control server, and mobile applications (Parent App, Teacher App, Driver App).

• Institutional & Administrator Information: School name, administrative contact person, phone number, email address, school domain, and billing records.
• Student & Guardian Information: Student names, guardian contact numbers, attendance logs, exam records, and fee payment status as supplied by the respective school.
• Communication & SMS Records: Mobile numbers, delivery logs, message purpose (OTP, fee alert, general notice), and gateway transaction timestamps.
• Payment Information: When you recharge SMS credits or renew subscriptions via Razorpay, transaction identifiers, payment status, amount, and timestamp are recorded. We do not store complete credit card numbers, CVVs, or NetBanking passwords on our servers.

2. How We Use Collected Information

We process information strictly for operational and service fulfillment purposes, including:

• Enabling schools to send automated SMS, WhatsApp alerts, and emergency notifications to parents.
• Facilitating school fee records, exam result generation, and daily attendance.
• Processing online SMS wallet recharges and generating official payment receipts.
• Authenticating administrator sessions and securing account access.
• Providing ongoing technical assistance and customer support.

3. Payment Gateway & Third-Party Disclosure

We do not sell, rent, or trade your personal or institutional information. Data is shared solely in the following instances:

• Payment Processing: Online transactions are handled via Razorpay (razorpay.com), an RBI-authorized payment aggregator adhering to PCI-DSS Level 1 compliance standards.
• Telecom & Messaging Operators: Mobile numbers and message text are transmitted to registered telecom gateways (e.g. Fast2SMS / WhatsApp Business API) for DLT-compliant message delivery.
• Legal Mandates: Where required by applicable Indian laws, judicial orders, or government regulations.

4. Data Protection & Security Measures

We employ enterprise-grade security protocols, including HTTPS/TLS encryption for all data in transit, encrypted session tokens, salted password hashing, and restricted database permissions. Access to institution databases is strictly limited to authorized personnel.

5. Data Retention & Institution Rights

School data is retained for the duration of the institutional subscription contract. School administrators may review, update, or request archival of their data by contacting our technical team.

6. Grievance Officer & Contact

In accordance with the Information Technology Act 2000 and rules made thereunder, questions or grievances regarding privacy practices may be addressed to: