Privacy Policy

1. Introduction

Soot ("we", "us", or "our") provides school management software for educational institutions in India. This Privacy Policy explains how we collect, use, store, and protect personal information when you use our website, applications, and communication services.

2. Information we collect

We may collect the following categories of information:

• School and staff data: names, email addresses, phone numbers, roles, and school affiliation provided by schools using Soot.
• Student and guardian data: names, contact details, academic records, attendance, and fee information entered by authorised school staff.
• Enquiry and lead data: information submitted via our website enquiry form (name, phone, school name, city).
• Communication data: messages sent through Soot (SMS, email, WhatsApp template messages), delivery status, and related metadata.
• Technical data: IP address, browser type, device information, and usage logs for security and service improvement.

3. How we use information

• Provide and operate school management features (admissions, fees, attendance, etc.).
• Send operational notifications to school staff, parents, and leads via permitted channels.
• Process payments and generate receipts through integrated payment providers.
• Respond to enquiries and provide customer support.
• Maintain security, prevent fraud, and comply with legal obligations.
• Improve our products based on aggregated usage patterns.

4. WhatsApp messaging

Soot uses the WhatsApp Business Platform (Meta) to send template-based messages on behalf of schools and Soot's own business account. We only send WhatsApp messages to users who have provided their phone number and where the school or Soot has a legitimate communication purpose (e.g. fee reminders, announcements, operational updates). We do not sell phone numbers or message content to third parties. Message delivery status may be received via Meta webhooks to confirm successful delivery.

5. Data sharing

We do not sell personal information. We share data only with:

• Service providers: cloud hosting (Google Cloud), payment processors (Razorpay, Cashfree), SMS providers (Twilio), and Meta (WhatsApp) — solely to deliver our services.
• Schools: student and guardian data is accessible only to authorised staff of the relevant school.
• Legal requirements: when required by law or to protect rights and safety.

6. Data retention

We retain personal data for as long as the school's account is active or as needed to provide services. Schools may request deletion of their data upon termination of service, subject to legal retention requirements (e.g. financial records).

7. Security

We implement industry-standard security measures including encrypted connections (TLS), access controls, and secure credential storage. No method of transmission over the internet is 100% secure; we continuously work to protect your data.

8. Your rights

Depending on applicable law, you may have the right to access, correct, or delete your personal information. School staff and parents should contact their school administrator for data related to student records. For enquiries about Soot's handling of data, contact us at jay@sooter.in.

9. Children's data

Soot processes student information on behalf of schools. Schools are responsible for obtaining appropriate consent from parents or guardians. We do not knowingly collect data directly from children without school authorisation.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated revision date.

11. Contact us