Vaaritek SLIPPrivacy Policy
This Privacy Policy explains how Vaaritek Solutions Pvt. Ltd. ("Vaaritek", "we", "us") collects, uses, and protects information when you use the Vaaritek SLIP web and mobile applications and related services (the "Service").
1. Who we serve & our role
Vaaritek SLIP is a school-management platform. Schools (our customers) use it to manage students, staff, fees, attendance and parent communication. For data that a school enters about its students, staff and parents, the school is the data controller and Vaaritek acts as a data processor on the school's instructions.
2. Information we collect
- Account data: name, email, phone, role (owner/principal/teacher/accountant), and password (stored only as a secure hash).
- School records (entered by the school): student names, admission numbers, roll numbers, photos, guardian name & phone, class/section, attendance, fees, marks and report cards.
- Messaging data: SMS/WhatsApp messages sent to and received from parents (for Pro schools).
- Usage & security logs: audit logs of changes, IP address, device/app version, and timestamps — used for security and support.
3. How we use information
- To provide the Service: run the ERP, generate fees/report cards, send parent notifications.
- To secure accounts: authentication, two-factor verification, fraud/abuse prevention, audit trails.
- To support and improve the Service and to communicate important account/service notices.
- To comply with legal obligations.
We do not sell personal data, and we do not use student data for advertising.
4. Children's data
The Service stores information about students, who may be minors, on behalf of their school. This data is provided and controlled by the school. We process it only to deliver the Service to that school and protect it with the safeguards in section 6. Parents/guardians may contact their school to access, correct or remove a student's information.
5. Sharing & sub-processors
We share data only as needed to run the Service, with vetted providers under contract:
- Cloud/infrastructure & database hosting (self-hosted Supabase/PostgreSQL).
- MSG91 — SMS & WhatsApp delivery to parents.
- ZeptoMail (Zoho) — transactional email (verification, password reset).
- Cloudflare — content delivery, DNS and security.
We may disclose information if required by law, or to protect rights, safety and security.
6. Data security
- Encryption in transit (HTTPS/TLS); passwords stored as salted hashes.
- Row-Level Security so each school can only access its own data.
- Two-factor authentication (TOTP) available for all roles.
- Append-only audit logging of changes; least-privilege access.
7. Data retention
We retain school data for as long as the school's account is active. When a school is deleted, its data enters a grace period and is then permanently purged. Backups are rotated on a fixed schedule. You may request earlier deletion as described below.
8. Your rights
Subject to applicable law (including India's Digital Personal Data Protection Act), you may request access, correction, or deletion of your personal data, and withdraw consent. Schools should contact us; parents/students should contact their school. Email support@vaaritek.com.
9. Cookies
The web app uses strictly-necessary cookies/local storage to keep you signed in and remember preferences (e.g. light/dark theme). We do not use third-party advertising cookies.
10. International transfers
Data is primarily processed in India. Where a sub-processor operates elsewhere, we use appropriate safeguards.
11. Changes
We may update this policy; the "Last updated" date will change and material changes will be notified in-app or by email.
12. Contact
Vaaritek Solutions Pvt. Ltd.
The Hive, Sec-102, Gurugram, Haryana 122006, India
Email: support@vaaritek.com