Privacy Policy

1. Introduction

Welcome to Xpert Solutions ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website xpert-solutions.in, use our School Management Software (School ERP), mobile applications, or engage with our services.

By accessing or using our services, you agree to the terms of this Privacy Policy. If you do not agree with our practices, please do not use our services.

2. Information We Collect

We collect information to provide better services to our users. The types of information we collect include:

2.1 Personal Information

• Contact Information: Name, email address, phone number, postal address
• School/Organization Details: School name, role, designation, department
• Student Information: Student name, date of birth, class, roll number, academic records, attendance data, examination results
• Parent Information: Parent/guardian names, contact details, relationship to student
• Staff Information: Employee name, contact details, qualifications, employment records
• Account Credentials: Username, password (encrypted), security questions
• Payment Information: Billing address, payment card details (processed securely through payment gateways)

2.2 Technical Information

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent on pages, click data, referring URLs
• Location Data: Approximate location based on IP address (when applicable)
• Cookies and Tracking: Session cookies, preference cookies, analytics cookies

2.3 Biometric Data (When Applicable)

• Attendance Systems: Fingerprints, facial recognition data, RFID card information
• This data is collected only with explicit consent and is used solely for attendance tracking and security purposes

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Service Delivery

• Provide and maintain our School ERP software and related services
• Process admissions, manage student records, and track academic performance
• Facilitate fee collection and financial management
• Generate reports, certificates, and transcripts
• Enable communication between school, parents, teachers, and students

3.2 Service Improvement

• Analyze usage patterns to improve our products and services
• Develop new features based on user feedback
• Troubleshoot technical issues and provide customer support
• Conduct research and testing

3.3 Communication

• Send service-related notifications and updates
• Respond to inquiries and provide customer support
• Send promotional materials (with your consent)
• Notify you of changes to our services or policies

3.4 Legal and Security

• Comply with legal obligations and regulatory requirements
• Protect against fraud, unauthorized access, and security threats
• Enforce our Terms of Service and other agreements
• Resolve disputes and legal claims

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Within School Ecosystem

• With authorized school administrators, teachers, and staff members
• With parents/guardians for their child's academic information
• Information is shared on a need-to-know basis with appropriate access controls

4.2 Service Providers

• Cloud hosting services (AWS, Google Cloud, etc.)
• Payment processing partners
• SMS and email service providers
• Analytics and performance monitoring services
• All third-party service providers are bound by confidentiality agreements

4.3 Legal Requirements

• When required by law, regulation, or legal process
• To comply with government requests or court orders
• To protect our rights, property, or safety
• To prevent fraud or security threats

4.4 Business Transfers

• In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity
• We will notify you of any such change in ownership

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: Data is encrypted in transit (SSL/TLS) and at rest
• Access Controls: Role-based access with authentication and authorization
• Regular Backups: Automated daily backups stored securely
• Security Audits: Regular security assessments and vulnerability testing
• Employee Training: Staff trained on data protection best practices
• Incident Response: Procedures in place to respond to security breaches

However, no system is 100% secure. We cannot guarantee absolute security but will notify you of any significant data breaches as required by law.

6. Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this policy:

• Active Accounts: Data retained while your account is active
• Student Records: Academic records retained as per institutional and legal requirements (typically 5-10 years)
• Financial Records: Retained for accounting and tax purposes (minimum 7 years as per Indian law)
• Closed Accounts: Personal data deleted within 30-90 days after account closure (unless legally required to retain)
• Backup Data: May persist in backup systems for up to 90 days

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data we hold
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your data (subject to legal retention requirements)
• Opt-Out: Unsubscribe from marketing communications
• Data Portability: Request your data in a portable format
• Restriction: Request restriction of processing in certain circumstances
• Consent Withdrawal: Withdraw consent for data processing (where applicable)

To exercise these rights, contact us at jagjeet.sohal@xpert-solutions.in or call +91 9130566700.

8. Children's Privacy

Our School ERP system processes information about students, including minors. We take special care to protect children's privacy:

• Student data is collected only with school and parental consent
• Access to student information is restricted to authorized personnel and parents/guardians
• We do not use student data for marketing or advertising purposes
• Parents have the right to review and request deletion of their child's information
• We comply with applicable child privacy laws including COPPA (if applicable)

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance user experience:

Types of Cookies:

• Essential Cookies: Required for basic website functionality
• Performance Cookies: Help us understand how visitors use our website
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Collect anonymous usage statistics

You can control cookies through your browser settings. Note that disabling certain cookies may affect website functionality.

10. International Data Transfers

Your data is primarily stored on servers located in India. If we transfer data outside India, we ensure appropriate safeguards are in place:

• Data transfer agreements with service providers
• Compliance with applicable data protection laws
• Adequate security measures during transit

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date
• Sending email notifications for material changes
• Displaying prominent notices in our application

Your continued use of our services after changes indicates acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry within 30 days.

13. Legal Compliance

This Privacy Policy is designed to comply with:

• Information Technology Act, 2000 (India)
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• Personal Data Protection Bill (India) - when enacted
• General Data Protection Regulation (GDPR) - for EU users
• Other applicable privacy and data protection laws