One School Privacy Policy

1. Who we are

One School is owned and operated by One Path Business Solutions ("OnePath", "we", "us" or "our"), 8-1-21/146, Level 1, Mirza Arcade, Shaikpet Road, Surya Nagar, Toli Chowki, Hyderabad, Telangana 500008, India.

2. Our role

• Website visitors, demo requests and school account owners. We decide how this data is used, so we act as the data fiduciary (or controller).
• Student, parent and staff data that a school stores in One School. The school decides what to collect and why, so the school is the data fiduciary. We process that data only on the school's instructions, as a data processor. Parents and students should send privacy requests to their school first.

Because One School holds data about children, we also follow the One School Student and Children's Data Policy.

3. Information we collect

Information you give us

• Demo requests: full name, school name, work email, phone or WhatsApp number, country, number of students, current system and your message.
• School account details: admin names, work emails, phone numbers, roles and passwords (stored only in hashed form).
• Billing details: school or trust name, billing address, tax or GST number and plan. Payments are handled by our payment partners. We do not store full card numbers.
• Newsletter sign ups: email address.

Information schools store in One School

• Student records: name, photo, date of birth, gender, admission number, class and section, roll number, ID card details, address, transport route, library records, attendance, homework, exam marks, report cards and fee records.
• Parent and guardian details: names, relationship, phone and WhatsApp numbers, email addresses and fee payment history.
• Staff records: name, contact details, subjects, classes, attendance, leave and, on plans with HRMS, payroll details.
• Messages and notices: diary entries, announcements, emergency broadcasts and communication between parents and staff.
• Transport data: bus routes and, where the school enables GPS tracking, vehicle location during trips. We do not track the location of students' phones.

Information collected automatically

IP address, browser type, device type, operating system, pages viewed, actions taken, timestamps and error logs. See our Cookie Policy.

Information from connected services

WhatsApp delivery and read status for alerts, payment status from payment gateways used for online fee collection, and GPS device data where transport tracking is used.

4. How we use information

• To run the Service: student management, attendance, fees, homework, report cards, transport, library, reports and dashboards, as the school configures them.
• To send alerts the school sets up, such as attendance, fee reminders and receipts, exam schedules, results, homework and emergency broadcasts, by WhatsApp, email, SMS or in the app.
• To process online fee payments made by parents to the school.
• To run AI tools and advanced analytics on Scale plans, only within the school's own data and only for that school.
• To verify identity, secure accounts and prevent misuse.
• To provide support, bill schools and keep financial records.
• To improve the Service using aggregated or de-identified usage data.
• To send product news to school contacts, with an unsubscribe link in every email.
• To meet legal obligations.

We do not sell personal data. We never use student data for advertising, profiling for marketing, or behavioural monitoring, and we do not use it to train AI models for other customers.

5. Legal basis

In India we process personal data under the Digital Personal Data Protection Act, 2023. The school is responsible for giving notice and obtaining verifiable consent from a parent or lawful guardian before processing a child's personal data. Where the GDPR or UK GDPR applies, we rely on performance of a contract, legitimate interests, legal obligations and, where needed, consent.

6. How we share information

• Service providers for hosting, storage, email, SMS and WhatsApp delivery, payment processing, analytics and support, under written contracts.
• Payment gateways used for fee collection, which receive the payment details needed to complete a transaction.
• People inside the school, according to roles. Parents see only their own child's records.
• Authorities, when the law or a valid order requires it, or to protect a child's safety.
• A buyer or successor in a merger, acquisition or sale of assets, under this Policy.

A current list of our sub-processors is available on request.

7. International transfers

Data may be stored in India or in other countries where our cloud providers run data centres. We use contractual and technical safeguards when data leaves your country.

8. How long we keep data

• School data is kept while the subscription is active.
• After cancellation or expiry, the school has 90 days to export its data. We then delete or anonymise it.
• Backups are cleared within 30 days of deletion from live systems.
• Invoices and payment records are kept as long as tax and accounting laws require.
• Demo requests and enquiries are kept for up to 24 months after our last contact.

9. Security

We use encryption in transit, encryption at rest through our hosting providers, role based access, audit logs and regular backups. Only staff who need access to support a school can reach its data. No system is fully secure. If a personal data breach affects school data, we will inform the school without undue delay and help it notify parents, the Data Protection Board of India and other authorities where required.

10. Your rights

Depending on where you live, you may have the right to access, correct, complete or erase your personal data, withdraw consent, nominate someone to act for you, object to or restrict processing, ask for a portable copy and complain to a data protection authority. Parents can use these rights for their child. Email info@onepathsolutions.com, or contact your school directly. We may need to verify your identity.

11. Children

Our website is meant for adults such as school staff and parents. Students' data enters One School only through their school, with the safeguards in the Student and Children's Data Policy.

12. Changes to this Policy

We will post any update here with a new effective date, and notify school admins by email or in the app about important changes.

13. Contact

• One Path Business Solutions
• Email: info@onepathsolutions.com
• Phone: +91 96523 01382
• Address: One Path Business Solutions, 8-1-21/146, Level 1, Mirza Arcade, Shaikpet Road, Surya Nagar, Toli Chowki, Hyderabad, Telangana 500008, India

We aim to acknowledge complaints within 2 business days and resolve them within 30 days.