Privacy Policy

1. Introduction

Friensys Info Labs ("Friensys", "we", "us") operates the Friensys School ERP platform. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our services.

2. Data We Collect

2.1 School and Staff Data

• School name, address, and GST registration details
• Administrator names, email addresses, and phone numbers
• Staff roles, payroll data, and contact details

2.2 Student Data

• Student names, roll numbers, date of birth, and parent contact details
• Academic records: grades, attendance, report cards
• Fee payment history and outstanding balances
• Photograph (if uploaded by the school)

2.3 Usage Data

• Browser type, IP address, and pages visited within the platform
• Feature usage logs for support and product improvement
• Error logs (anonymised after 30 days)

3. How We Use Your Data

We use collected data to:

• Deliver and operate the Friensys ERP platform
• Process fee payments and generate financial reports
• Send transactional communications (invoices, alerts, notices)
• Provide technical support and resolve issues
• Improve platform features and performance
• Meet legal and regulatory obligations

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Data Sharing

We share data only with:

• Sub-processors essential for service delivery (cloud hosting, email delivery, payment gateways) under binding data processing agreements
• Legal authorities when required by a court order, government directive, or applicable law
• Successor entities in case of merger or acquisition, with advance notice to customers

A current list of our sub-processors is available on request.

5. Data Retention

| Data Type | Retention Period | |-----------|-----------------| | Active student and staff records | Duration of subscription | | Financial and fee records | 7 years (as required by Indian tax law) | | Access logs | 90 days | | Deleted account data | 30 days after deletion request |

6. Your Rights Under DPDPA 2023

Under the Digital Personal Data Protection Act 2023, you have the right to:

• Access a summary of personal data we process about you
• Correction of inaccurate or incomplete data
• Erasure of data no longer needed for the purpose collected
• Grievance redressal with our Data Protection Officer

To exercise these rights, email privacy@friensys.com with your name, school name, and the specific request.

7. Data Security

We implement appropriate technical and organisational measures:

• AES-256 encryption at rest; TLS 1.3 in transit
• Role-based access controls limiting data access to authorised users
• Regular security audits and vulnerability assessments
• Incident response procedures with 72-hour notification for significant breaches

8. Cookies

See our Cookie Policy for details on cookies and similar tracking technologies.

9. Children's Data

Friensys processes student data on behalf of schools (as data processors). Schools are responsible for obtaining necessary consents from parents or guardians before uploading student personal data.

10. Changes to This Policy

We will notify registered administrators via email at least 30 days before any material change to this policy. Continued use of the platform after the effective date constitutes acceptance.

11. Contact

Data Protection Officer
Friensys Info Labs
Greater Noida West, Uttar Pradesh – 201306
Email: privacy@friensys.com
Phone: +91 96433 14016