Privacy Policy

Erpcore is trusted with sensitive information about children, and we treat that as the foundation of the product. This page summarises how we handle data. A full Data Processing Agreement is available to schools on request.

Who controls the data

Your school is the data controller. Erpcore acts as a data processor — we store and process student and staff information only to provide the service to your school, under your instructions.

What we collect

Information your school enters to run day-to-day operations: student and guardian details, attendance, fees, marks and communications. We also collect basic account and usage data needed to operate and secure the platform.

How we protect it

Every school's data is isolated at the database level using Postgres row-level security — one school can never read another's. Personal identifiers such as Aadhaar, APAAR and PEN are encrypted at rest and masked on screen. Sessions are signed with RS256 and can be protected with two-factor authentication.

What we never do

We do not sell your data, and we do not use student information for advertising. We share data only with the processors needed to run the service (for example, Razorpay for payments), under appropriate safeguards.

Your rights

Schools and individuals may request access, correction or deletion of personal data. We aim to support obligations under India's Digital Personal Data Protection Act. Write to us and we'll help.

Contact

Questions or data requests: kartik@erpcore.tech.