We take your privacy seriously. This policy explains how Eduuis IT collects, uses, and protects your personal data.
Effective Date: 1 January 2025 | Last Updated: 1 March 2025
This Privacy Policy applies to Eduuis IT Private Limited ("Eduuis IT", "we", "our") and governs all personal data processed in connection with the SERA and SERA+ platforms and our website at eduuis.com.
Eduuis IT operates cloud-based School Enterprise Resource Planning (ERP) software under the brand name SERA, and a student safety application under the brand name SERA+. We act as a Data Fiduciary (as defined under the Digital Personal Data Protection Act, 2023) for data you provide to us directly, and as a Data Processor when we process data on behalf of schools (our clients).
We are committed to complying with the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable Indian privacy legislation.
When schools use SERA, they may upload personal data of students, parents, and staff including names, dates of birth, contact details, fee records, attendance, and academic information. This data is processed on the school's instruction and governed by our Data Processing Agreement with each school.
The SERA+ application, with explicit consent from parent/guardian, may collect the GPS location of a student's device for safety features. This data is encrypted in transit and at rest, and is accessible only to the authorised parent/guardian account.
| Purpose | Legal Basis (DPDP Act) |
|---|---|
| Providing and improving SERA / SERA+ services | Contract performance |
| Processing fee payments | Contract performance |
| Sending service notifications and updates | Contract performance / Legitimate interest |
| Marketing communications (with opt-out) | Consent |
| Security monitoring and fraud prevention | Legitimate interest |
| Legal and compliance obligations | Legal obligation |
| Analytics to improve product features | Legitimate interest |
We do not sell personal data to third parties. We do not use student data for advertising.
We share personal data only in the following circumstances:
Our website uses cookies and similar technologies:
The SERA application does not serve third-party advertising cookies. You can manage cookie preferences through your browser settings.
We implement industry-standard security measures including:
In the event of a data breach that poses a risk to your rights, we will notify you and, where required, the Data Protection Board of India, within 72 hours of becoming aware.
We retain personal data for as long as necessary to fulfil the purposes described in this policy, subject to the following:
SERA processes student data (including minors) on behalf of schools. Schools are responsible for obtaining appropriate consent from parents or guardians before enrolling students in SERA, as required under applicable law.
SERA+ location features for students under 18 require explicit, verifiable consent from a parent or guardian. We do not use student data for any commercial purpose beyond providing the contracted service.
Subject to applicable law, you have the following rights regarding your personal data:
To exercise any of these rights, please email privacy@eduuis.com. We will respond within 30 days.
Eduuis IT is committed to full compliance with the Digital Personal Data Protection Act, 2023 (once its provisions come into force by notification).
All personal data related to Indian schools and students is stored in AWS Mumbai (ap-south-1) data centres located in India. Where technical sub-processors (e.g., global analytics tools) may process anonymised telemetry outside India, we ensure appropriate contractual safeguards are in place.
We may update this Privacy Policy from time to time. We will notify you of material changes via email (to registered account holders) or a prominent notice on our website at least 14 days before the change takes effect. Your continued use of SERA after the effective date constitutes acceptance of the revised policy.
For privacy-related inquiries, requests, or complaints, please contact:
If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India once it is constituted under the DPDP Act, 2023.