Data Retention & Deletion Policy

1. General retention principles

EDUJAC retains information only for the period reasonably necessary for the specified purpose, to provide the service, and to meet contractual obligations, security requirements, dispute-resolution needs and applicable legal requirements. Information that is no longer needed may be securely deleted or anonymized.

Exact retention periods have not been formally adopted for most categories; this page is structured so that specific periods can be added per category as they are adopted.

2. Active school subscriptions

While a school's subscription is active, its institutional records are retained so the service can operate. The categories below describe the approach per record type:

• School records — retained while the school account is active.
• Student records — retained while the student is enrolled in an active school account, or as the school requires.
• Parent/guardian records — retained while linked to active students.
• Teacher/staff records — retained while the staff account is active.
• Attendance records — retained for the school's operational and reporting needs.
• Academic records, marks and results — retained for the school's academic record-keeping needs.
• Report cards — retained while relevant to the student's academic record.
• Fee and payment records — invoices, payment statuses and transaction references are retained as needed for accounting, audit and applicable legal requirements. (Card numbers/CVV are never stored — payments are processed by the payment provider.)
• Leave records — retained for the school's administrative needs.
• Account and security records — retained as needed for security, audit and abuse prevention.
• Password-reset tokens — single-use and expire after a short period (currently 15 minutes); expired or used tokens are not retained beyond operational necessity.
• Support communications — retained as needed to handle and document the request.
• Website leads/enquiries — retained while the enquiry is being handled and for a reasonable period thereafter; schools/organizations may ask us to delete an enquiry using the contact details below.
• Security/log information — retained as reasonably necessary for security monitoring and incident investigation.
• Backups — backup copies, where they exist for continuity purposes, are retained at an appropriately high level and cycle out in the ordinary course; records deleted from the live system are removed from backups as backups rotate.

3. Subscription termination and data exit

When a school stops using EDUJAC, an appropriate data-export mechanism or period may be provided according to the applicable agreement and technical capabilities. School data is not intended to be retained indefinitely without purpose.

4. Secure deletion and anonymization

After applicable retention and export requirements are satisfied, information may be securely deleted or anonymized unless retention is required for legal, contractual, security or dispute-related purposes. Anonymized information is no longer associated with an identifiable individual or school.

5. Legal retention requirements

Certain records (for example, financial or fee records) may need to be retained for periods required by applicable Indian law, accounting or audit obligations, in which case those requirements prevail.

6. Data deletion requests

Schools can delete or request deletion of institutional records; parents/guardians may route requests through the relevant school for school-controlled records, or contact us using the details below. Requests are handled in accordance with applicable law, including the Digital Personal Data Protection Act, 2023 and the applicable Digital Personal Data Protection Rules, 2025 as relevant provisions become applicable.