Privacy Policy

Effective Date: June 1, 2026

Welcome to ASE (accessible via www.appschooledu.com), which is owned, operated, and maintained by BHOOMI SOFT TECH PRIVATE LIMITED ("we," "our," or "us"). We provide a cloud-based, multi-tenant school management application designed to assist educational institutions ("Schools") in automating administration, managing student records, processing payment links, and distributing academic progress updates.

This Privacy Policy explains how data is collected, used, and safeguarded when Schools utilize our platform to communicate with parents, guardians, and students, specifically concerning our outbound text notification services via the WhatsApp Cloud API.

1. Our Role as a Data Processor (Multi-Tenant Framework)

Our platform operates as a software infrastructure provider.

• The School as Data Controller: The individual school using our app is the owner and controller of all student and parent records. They determine what information is uploaded, sent, and managed.
• Our App as Data Processor: We process student grades, names, registration details, and parent contact phone numbers solely under the explicit direction of the respective school. We do not sell, rent, or use this data for any independent or marketing purposes.

2. Information We Process

To execute core administrative operations and handle automated notifications, our platform processes the following data variables provided by the School:

• Parent/Guardian Information: Mobile phone numbers (for notification delivery) and names.
• Student Academic Records: Names, enrollment numbers, class sections, marks/grades, and attendance metrics.
• Transaction/Billing Data: Tuition fee amounts, outstanding balance tallies, and unique transactional payment links.

3. How Data is Used for WhatsApp Communications

Outbound text notifications sent through our system rely entirely on the WhatsApp Cloud API infrastructure. Data processed via this channel is used exclusively to:

• Deliver dynamic billing alerts and secure online payment hyperlinks.
• Dispatch academic terminal progress reports directly to authenticated parent mobile numbers.
• Send critical transactional system notifications (e.g., unexpected holiday announcements or urgent attendance warnings).

4. Data Sharing and Third-Party API Processing

We strictly safeguard personal data and do not share it with third parties, except under the following direct operational requirements:

• Meta Platforms, Inc. (WhatsApp Cloud API): To deliver outbound text notifications, data variables (such as target phone numbers, student names, and marks) are passed via secure REST API payloads directly to Meta's servers. This data transfer is subject to Meta's strict WhatsApp Business Messaging Policies.
• Legal Obligations: We may disclose information if required by applicable local laws, regulations, or a valid legal process.

5. Data Security & Storage Architecture

We implement enterprise-grade technical and organizational safeguards to secure multi-tenant data sets:

• Isolation: Each school’s database records are strictly isolated using unique tenant identifiers to ensure data from one school can never be queried or viewed by another.
• Encryption: Data transferred between the school administration portal, our backend servers, and Meta's Graph API endpoints is fully encrypted using industry-standard Secure Sockets Layer (SSL/TLS) protocols.
• Retention: We retain personal data only for as long as directed by the respective school tenant contract or as necessary to fulfill the system's operational objectives.

6. Children's Privacy

Our platform processes information regarding students under the age of 18 only when explicitly inputted by authorized school administrative staff or educators. We do not collect information directly from students. It is the responsibility of the participating school to ensure proper institutional authorization is in place before using our platform.

7. Contact Us & Data Rights

Parents wishing to access, update, correct, or delete any personal information sent via our text notification systems must contact their respective school's administrative office directly.

For inquiries regarding this software platform's technical data handling practices, please contact our support desk: