Information handled by the service
The information stored depends on the school’s use of the application. It can include account names, email addresses, phone numbers, school details, role and access records, student and guardian details, class and academic records, attendance, examination results, fee records, notices, messages, and uploaded images or attachments.
Users acting for a school may enter information about students, parents or staff. They should only provide information they are authorized to submit for the school.
How information is used and stored
The application stores account and school-operation records in its database and stores uploaded files through the configured media storage. Records are associated with schools and roles so the application can provide its school-management workflows and access controls. The exact records available to a user depend on their role and the relevant workflow.
Information is used to create and administer accounts, authenticate users, support school operations, display reports and records, send account verification or password-reset email, and maintain security and audit records.
Passwords and account security
Passwords are handled by Django’s authentication system, which stores password hashes rather than the original password text. The application uses role-based access, session authentication and CSRF protections. Users should keep their credentials private and notify their school administrator if an account may be compromised.
No website can promise absolute security. Do not send a password by email when contacting support.
Cookies and browser cache
The application uses session and CSRF cookies needed for sign-in and request protection. Browsers may also temporarily store page and static-file data in their cache. Clearing a browser’s cookies or cache affects local browser data; it does not delete records held by the application.
Email and third-party services
Account verification and password-reset messages are sent using the email service configured for the deployment. Public pages also load fonts from Google Fonts and interface icons from the unpkg content-delivery service. Those providers may receive connection information from the browser when their resources are requested; their own privacy terms apply.
Retention and data deletion
The application does not currently provide a self-service data deletion page. Disabling an account is not the same as deleting school records. To ask about access, correction or deletion, contact your school administrator and email ops@nextgenengineai.cloud. Requests may need review with the school, and records linked to operational or audit history may not be removable through the application.
This page does not promise a specific retention period or that every requested record can be deleted.
Contact
For privacy questions, contact ops@nextgenengineai.cloud.