Privacy Policy

This Privacy Policy governs the collection, use, processing, and protection of personal data on BYDO ("Platform"), a SaaS-based ERP platform developed and operated by SYNSWIFT INFOTECH LLP ("Company"). By using this Platform, users consent to the collection and processing of their data in accordance with this policy.

1. Data Collection

1.1 Personal Data Collected

Student Data: Name, email, Aadhaar last 4 digits, photos, phone numbers, addresses, parent/guardian details.
School Administrator & Staff Data: Name, email, contact details, role-based permissions.
Behavioral Data: Student performance reports, attendance tracking, examination scores, academic progress, and disciplinary records.
Financial Data: Payment records for school fees and other transactions.
Device & Usage Data: IP addresses, device details, browser information, and system logs.

2. Data Processing & Storage

2.1 Data Hosting & Cross-Border Transfers

All collected data is stored securely on OVH Canada and AWS S3 cloud servers. The Company shall ensure compliance with any future notifications from the Government of India regarding cross-border data transfers.

2.2 Security Measures

Data is encrypted at rest and in transit using industry-standard AES-256 and TLS encryption.
Multi-factor authentication (MFA) and role-based access control (RBAC) restrict unauthorized access.

3. Third-Party Data Sharing

The Platform does not share or sell user data to third-party service providers, advertisers, or marketers.

4. Compliance & Legal Requirements

This Privacy Policy complies with applicable laws including the DPDP Act, IT Act, and other relevant regulations.

5. Data Retention & Deletion

Data is retained for 30 to 90 days after termination of a school’s contract. Schools may request data deletion via [email protected].

6. User Rights & Access

Users have the right to access, review, correct, or delete their personal data, subject to applicable conditions.

7. Security Measures & Breach Notification

Users shall be notified of a data breach if it results in significant harm, unauthorized access, or reputational damage.

8. Grievance Redressal & Data Protection Officer

Users may contact the Data Protection Officer at [email protected] for privacy concerns.

9. Changes to Privacy Policy

The Company reserves the right to modify this Privacy Policy periodically. Users will be notified of significant changes.

10. Contact Information & Data Controller

For any privacy-related concerns, users may contact SYNSWIFT INFOTECH LLP at [email protected].