1. Introduction

Posthangr Online Services Pvt. Ltd. is a technology company incorporated under the Companies Act, 2013, with its office at PTS Road, Bansagar Tiraha, Rewa, Madhya Pradesh 486001, India. We build and operate Reskooler, a cloud-based School ERP platform provided to educational institutions on an annual subscription basis.

This Privacy Policy explains what data exists within Reskooler, where it comes from, how it is protected, who can access it, and what happens to it when a school ends its subscription. It covers the Reskooler mobile application available on the Android and iOS platforms, as well as the Reskooler web portal.

Reskooler is a service provided to schools and educational institutions, not to individual users directly. Every person who uses Reskooler gains access through credentials created and issued by their own school. No individual can create a personal account on their own.

2. Who Controls the Data

The school or educational institution that subscribes to Reskooler is the data controller. The school decides what information enters the system, who gets access to it, what parents and students can see, and how long records are maintained. Those decisions rest entirely with the school.

Posthangr Online Services Pvt. Ltd. is the data processor. We operate the technical infrastructure that stores and delivers the school's data. We act strictly on the school's instructions and we have no independent interest in the personal data that passes through the platform. We do not analyse it for commercial purposes, we do not profile any user, and we do not monetise it in any form.

This means that a parent or student with a question about what personal information their school has recorded, or who wants something corrected or removed, should contact their school first. The school is the right party to receive and act on those requests. We provide full technical cooperation to the school whenever assistance is needed.

3. Who Uses Reskooler

Reskooler serves four types of users, each with a distinct and limited level of access. The school administrator creates all accounts and no user can create their own account or change their own access level.

School administrators have full platform access. They configure the system, manage all user accounts, enter and update institutional data, and carry full operational and legal responsibility for everything that happens under their school's account.

Teachers and staff access attendance records, academic data, timetables, and communications relevant to the classes or departments they are assigned to. They cannot view records outside their assigned scope.

Students can see their own academic history, attendance, timetable, fee receipts, and school notices. They have no access to any other student's information.

Parents and guardians can follow their own child's attendance, academic results, fee status, and school communications. They cannot access records belonging to other families.

Access is strictly compartmentalised. No user can view another user's records and no user can grant themselves additional permissions.

4. What Data Reskooler Holds

4.1  Data Entered by Schools

Posthangr Online Services Pvt. Ltd. does not collect personal data directly from any individual. Every piece of personal information inside Reskooler has been entered by the subscribing school in its role as data controller. We receive and hold this data only because the school chose to enter it, and we use it only to operate the services the school has configured.

Depending on which features a school enables, this data typically includes:

• Student information such as full name, date of birth, admission number, class, section, academic results, attendance records, report cards, admit cards, and marksheets
• Staff and teacher information including name, employee ID, designation, subject or class assignments, and attendance
• Parent and guardian contact details including names, phone numbers, and email addresses, used only for school communications within the platform
• Fee and payment records such as fee structure, outstanding dues, payment history, and receipts. Reskooler shows this information to authorised users but does not store card numbers, CVV codes, bank account details, or any payment credentials
• Administrative content such as timetables, notices, academic calendars, events, and class assignments

4.2  Technical Data Collected Automatically

When a user opens the Reskooler application our systems automatically record a small amount of technical information needed to keep the app running securely. This includes the device type and operating system version, the installed version of the app, the IP address for security monitoring, and crash or error reports when the app encounters a problem.

This technical information is not linked to any individual's identity. It is used only to fix bugs, maintain performance, and protect the platform from unauthorised access. It is not used for advertising and is not sold or shared with any commercial third party.

4.3  What We Do Not Collect

Reskooler does not collect location data, microphone input, camera images, phone contacts, call logs, SMS content, or browsing history from any user's device. The application requests only the permissions necessary for its stated school management functions and collects no data in the background when the app is not in active use.

5. App Permissions

The Reskooler application may request the following permissions from a user's device. Each permission is tied to a specific feature and is requested only when that feature is used for the first time.

Internet access: Required for all core platform functions including loading records, syncing attendance, and displaying fee information.

Push notifications: Required to deliver school notices, fee reminders, and important announcements that the school sends to parents and students. Users who decline this permission can still use all other features of the app.

Camera: Requested only when a school administrator or staff member uses the in-app feature to upload a photograph or scan a document. This permission is entirely optional.

Storage: Requested only when a user downloads a report, fee receipt, or certificate generated by the platform onto their own device. This permission is entirely optional.

Declining any optional permission has no effect on features that do not depend on it. The school management, academic, attendance, and communication features of Reskooler work fully without camera or storage access.

6. How We Use This Data

All data within Reskooler exists to serve the school's operational needs. We process it for the following purposes only:

• Delivering the day-to-day features of the school ERP including academic records, attendance tracking, timetabling, fee management, and report generation
• Sending notifications and updates to parents, students, and staff through push notifications, SMS, email, and WhatsApp as the school configures and authorises
• Processing online fee payments that the school has set up through an integrated payment gateway
• Providing technical support to the school, which may on occasion require authorised company staff to access data for maintenance or error correction as agreed with the school
• Monitoring and improving app stability using anonymised and aggregated crash data

We do not run advertisements on the platform. We do not build profiles of individual users for any purpose. We do not use data from one school for anything related to another school or to our own business development. The basis for everything we do with data is the contractual obligation we hold toward the subscribing school.

7. Third-Party Technology Providers

To run Reskooler we work with a small number of external technology companies. Each of them processes data strictly on our instructions, only for the purpose of keeping the platform operational, and under binding confidentiality obligations. None of them has any independent right to use, retain, or share the data they handle on our behalf.

Cloud Infrastructure: The Reskooler platform is hosted on cloud servers provided by Amazon Web Services or Google Cloud Platform. All stored data is encrypted at rest and access is restricted to authorised personnel only.

Firebase: We use Firebase for app crash reporting, performance monitoring, and push notification delivery. Firebase receives only anonymised and aggregated technical data about app behaviour. It does not receive student names, academic records, attendance information, or any personal data belonging to school users, and it is not used in connection with advertising.

Payment Gateways: When a school enables online fee collection, transactions are processed through a licensed payment gateway provider such as Razorpay or PayU. The entire payment transaction takes place within the gateway's own secure environment. Reskooler does not see or store card numbers, CVV codes, or bank account details. The gateway processes the transaction under its own security standards and is responsible for the security of all payment data.

Messaging Providers: When a school sends SMS or WhatsApp messages through the platform, delivery is handled by a licensed messaging provider. That provider receives only the recipient's phone number and the message content the school has authorised. No other personal data is shared.

We do not use advertising networks, data brokers, behavioural analytics platforms, or social media tracking tools. No personal data from Reskooler is ever shared with companies of that nature.

Schools may request a written list of our current technology providers at any time by writing to support@posthangr.in.

8. Who We Share Data With

We do not sell, rent, trade, or share personal data with any third party for commercial purposes. The school's data belongs to the school and we treat it as strictly confidential.

Data may leave the platform in only three circumstances. The first is when Indian law or a competent court requires us to disclose specific information. We will comply to the extent the law requires and, where the law permits, we will inform the school before making any such disclosure. The second is where there is a genuine and immediate safety concern requiring action to prevent serious harm or illegal activity. The third is with the technology providers described in Section 7, who process data only on our instructions and only to keep the platform running.

In no other circumstance does personal data from Reskooler leave our control.

9. School Communications

Reskooler provides tools that allow schools to communicate with parents, students, and staff through push notifications, SMS, WhatsApp, and email. When a school uses these tools, Posthangr Online Services Pvt. Ltd. acts only as the delivery channel. The school decides who receives each message and what it contains. The school is also responsible for holding the appropriate permissions from each recipient under applicable law and for ensuring all communications comply with relevant regulations.

The company accepts no liability for the content of any message composed and sent by a school through the platform.

10. Security

All data transmitted between a user's device and our servers is protected using TLS encryption. Data held on our servers is encrypted at rest. Access within the platform is governed by role-based permissions so that each user sees only what their school has assigned to their role. No user can escalate their own access or view records outside their assigned scope.

When authorised company staff need to access a school's data for support purposes their access is individually logged and they are bound by internal confidentiality obligations. We review our security arrangements regularly and address identified vulnerabilities promptly.

No system can be made entirely immune to risk. Incidents caused by the actions of a school's own users, by outages at third-party infrastructure providers, by cyberattacks beyond our reasonable control, or by events of force majeure are outside our ability to prevent. In any such situation our financial liability is limited to the subscription fees paid by the affected school in the financial year in which the incident occurred.

11. Data Retention and Deletion

We hold school data for the duration of the active subscription. At any point a school administrator can contact us at support@posthangr.in to request the export or deletion of specific records and we will action that request without delay.

When a school ends its subscription, for any reason, we allow up to 30 days from the termination date for the school to request and receive a complete export of all their data. After that window closes, all data belonging to that institution is permanently and irreversibly deleted from our servers, databases, and all backup systems. We do not retain shadow copies or archived versions of a departed school's records.

Schools that want written confirmation of deletion are entitled to request it and we will provide it.

We delete data in accordance with the Digital Personal Data Protection Act 2023, the Information Technology Act 2000 and its Rules, and any other applicable data protection law relevant to the school's location.

We may retain anonymised statistical data that cannot be linked to any individual, student, or institution. This is used only to understand usage patterns and improve the platform.

12. Account and Data Deletion Requests

If a student, parent, teacher, or staff member wants their personal data removed from Reskooler they should submit a request to their school administrator. The school administrator can delete individual user accounts from within the platform at any time, after which the personal data associated with that account is removed from active records.

If a school wishes to request deletion of all institutional data held on the platform the school administrator should write to us at support@posthangr.in with the subject line Data Deletion Request. We will process the request and confirm completion within 30 days.

Any individual who believes their school is not responding to a valid deletion request may also write to us directly at support@posthangr.in and we will assist in facilitating the process to the extent our role as data processor allows.

13. Children and Student Data

Many of the students whose records are held in Reskooler are minors. We take this responsibility seriously. Children never interact with Reskooler independently. Every student account is created by a school administrator, every piece of student data is entered by the school, and all access levels are controlled entirely by the school.

We do not contact students directly. We do not use student data for advertising. We do not sell student data. We do not share student data with any party that is not necessary to run the school ERP service. Student information held in Reskooler is used solely to provide the educational management functions the school has configured.

Schools are responsible for obtaining any necessary parental consents before entering a minor student's information into the platform and for complying with children's data protection laws in their jurisdiction. In India this means compliance with the Digital Personal Data Protection Act 2023. Schools operating internationally must also comply with any applicable local laws.

If a parent believes their child's data has been entered into Reskooler without appropriate consent they should contact their school administrator. They may also write to us at support@posthangr.in and we will take all reasonable steps to assist.

14. Your Rights Over Your Data

Individuals whose personal data is held in Reskooler have rights under applicable law, including the right to know what data is held about them, the right to request correction of inaccurate information, the right to request deletion, and the right to receive a portable copy of their data. Because the school is the data controller the most effective way to exercise these rights is to approach the school administrator directly.

We will cooperate fully with schools in responding to such requests within the time limits required by law. Anyone whose concern is not being resolved by their school is welcome to write to us at support@posthangr.in. We will respond within 30 days.

15. Data Safety and Transparency

This section summarises our data practices in a clear format for anyone reviewing how the platform handles personal information.

Data collected: Student academic and attendance records, staff records, parent contact details, and fee records, all entered by the school. Technical crash and performance data collected automatically in anonymised form.

Data shared: No personal data is sold or shared for commercial purposes. Anonymised crash data is shared with Firebase. Payment references are shared with the payment gateway only when a school processes an online fee payment.

Encryption: All data is encrypted in transit and encrypted at rest on our servers.

Deletion: Individual account deletion is available through the school administrator at any time. All school data is permanently deleted within 30 days of subscription termination.

Advertising: Reskooler contains no advertising. No data from the platform is used for advertising purposes.

Children: Student data including data belonging to minors is handled as described in Section 13. It is used solely for school management purposes.

16. Intellectual Property and Data Ownership

The entire Reskooler platform, including its software, codebase, design, templates, workflows, and backend infrastructure, is the exclusive intellectual property of Posthangr Online Services Pvt. Ltd. Schools receive only a limited, non-transferable licence to use the platform during their active subscription. No part of the underlying technology is transferred, licensed further, or made available for copying, reverse engineering, or resale.

The data that schools enter into Reskooler belongs entirely to the school. We hold it as a trusted custodian during the subscription period. When the school leaves, the data goes with them and our copy is permanently deleted.

17. Limitation of Liability

Posthangr Online Services Pvt. Ltd. provides Reskooler as a technology platform. We are not liable for indirect or consequential losses such as damage to a school's reputation, loss of admissions, or loss of revenue arising from the use or unavailability of the platform. We are not liable for downtime caused by third-party infrastructure providers, internet outages, cyberattacks outside our reasonable control, power failures, or events of force majeure.

Our total financial liability to any school in connection with any claim arising from this policy or from the use of the platform shall not exceed the total subscription fees paid by that school in the financial year in which the relevant event occurred.

The school agrees to indemnify and hold harmless Posthangr Online Services Pvt. Ltd. from all claims, penalties, damages, or costs arising from illegal, inaccurate, or unauthorised data entered by the school's staff or systems, from misuse of the platform by any user under the school's account, or from any failure by the school to comply with applicable laws in connection with its use of the service.

18. Confidentiality

All information exchanged between Posthangr Online Services Pvt. Ltd. and any subscribing school in connection with the Reskooler service, including pricing, system configurations, school data, and internal documentation, is treated as strictly confidential by both parties. This obligation continues for five years after the end of the subscription. Company staff with access to school data are individually bound by internal confidentiality policies and their access is logged and audited.

19. International Clients

Reskooler is developed and operated in India. Schools subscribing from outside India are responsible for satisfying themselves that their use of the platform is consistent with the data protection laws of their own country. For schools in the European Union or United Kingdom we are willing to enter into a Data Processing Agreement incorporating Standard Contractual Clauses as required. Schools that need such an arrangement should write to support@posthangr.in.

20. Changes to This Policy

We will update this Privacy Policy when our practices change or when law requires us to. When we make a material change we will update the Last Updated date shown at the top of this document and notify subscribing schools by email or through an in-app message. Only written communication is binding. Continuing to use Reskooler after an updated policy takes effect means you have accepted the revised terms.

21. Governing Law and Jurisdiction

This Privacy Policy and all matters relating to data processing on the Reskooler platform are governed by the laws of India. Any dispute that cannot be resolved through direct discussion will be referred exclusively to the courts at Rewa, Madhya Pradesh, India. All parties irrevocably agree to submit to that jurisdiction and waive any right to contest it or seek a change of venue.

22. Contact Us and Grievance Redressal

If you have any question, concern, or complaint about this Privacy Policy or about how data is handled on the Reskooler platform, please contact us. We acknowledge every communication within 72 hours and work to resolve it within 30 days, in line with the requirements of the Information Technology Rules, 2021.

This policy is published in accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.

Copyright 2025 Posthangr Online Services Pvt. Ltd. All rights reserved. Reskooler is a proprietary product of Posthangr Online Services Pvt. Ltd.