Welcome to Growvidya, a comprehensive School Management System developed, owned, and operated by Codeulas Innovations Private Limited ("Company", "we", "our", or "us"). This Data Security Policy outlines our commitment to protecting the confidentiality, integrity, and availability of the information entrusted to us by educational institutions, administrators, teachers, students, parents, staff, and other authorized users. As a cloud-based School Management System, Growvidya processes and stores sensitive educational and administrative information. We recognize the importance of safeguarding this information and have implemented comprehensive administrative, technical, and physical security measures to protect customer data against unauthorized access, disclosure, alteration, misuse, loss, or destruction. This policy should be read together with our Privacy Policy, Terms & Conditions, Cookie Policy, and other applicable legal agreements.

1. Purpose

The purpose of this Data Security Policy is to describe the security practices, technologies, operational controls, and organizational measures adopted by Codeulas Innovations Private Limited to protect data processed through the Growvidya platform. Our objective is to maintain a secure, reliable, and resilient environment that supports educational institutions while ensuring compliance with applicable laws and industry best practices.

2. Scope

This policy applies to all information processed through Growvidya, including but not limited to:

• Student Information
• Parent Information
• Teacher Information
• Staff Information
• School Administration Data
• Academic Records
• Attendance Records
• Examination Data
• Fee and Financial Information
• Transport Information
• Hostel Records
• Communication Logs
• User Credentials
• Uploaded Documents
• System Logs
• Audit Records
• Backup Data
• Customer Configuration Data

This policy applies to all users, employees, contractors, consultants, implementation partners, vendors, and third-party service providers authorized to access the Growvidya platform.

3. Our Security Commitment

At Codeulas Innovations Private Limited, protecting customer information is one of our highest priorities. We continuously invest in modern technologies, secure infrastructure, employee awareness, and security best practices to maintain a trusted digital environment for educational institutions. Security is integrated into every stage of our software development, deployment, maintenance, and customer support processes.

4. Information Security Principles

Our security program is based on the following principles:

• Confidentiality
• Integrity
• Availability
• Accountability
• Transparency
• Least Privilege Access
• Continuous Improvement
• Risk Management
• Secure by Design
• Privacy by Design

These principles guide our operational decisions and technical implementations across the Growvidya platform.

5. Data Protection

Growvidya implements multiple layers of protection to safeguard customer information.

Our data protection practices include:

• Secure infrastructure
• Controlled system access
• Data encryption
• Regular security monitoring
• Threat detection
• Secure storage
• Backup management
• Disaster recovery planning
• Vulnerability assessments
• Security auditing

These controls help minimize risks associated with unauthorized access, accidental disclosure, cyber threats, and system failures.

6. Access Control

Access to customer information is strictly restricted through role-based access control (RBAC). Each authorized user receives access only to the information necessary to perform their assigned responsibilities.

Authentication mechanisms include:

• Secure login credentials
• Password authentication
• Session management
• Authorization controls
• User role verification
• Permission-based access

Administrative privileges are granted only to authorized personnel and are periodically reviewed.

7. Authentication & Password Security

Growvidya encourages strong authentication practices to protect user accounts.

Security measures include:

• Encrypted password storage
• Password complexity requirements
• Account lockout protection
• Session timeout mechanisms
• Login activity monitoring
• Unauthorized access detection

Users are responsible for maintaining the confidentiality of their passwords and login credentials.

8. Data Encryption

Sensitive information is protected using industry-standard encryption technologies during both transmission and storage. Encryption safeguards data against unauthorized interception or access while it is transferred across networks or stored within our infrastructure. Where applicable, secure communication protocols such as HTTPS and Transport Layer Security (TLS) are used to protect data exchanged between users and the Growvidya platform.

9. Cloud Infrastructure Security

Growvidya operates on secure cloud infrastructure designed to provide high availability, scalability, and resilience.

Our infrastructure includes security controls such as:

• Network isolation
• Firewall protection
• Intrusion prevention
• Infrastructure monitoring
• Secure server configuration
• Controlled administrative access
• Security patch management

Infrastructure is continuously monitored to detect abnormal activities and maintain service reliability.

10. Backup & Disaster Recovery

To ensure business continuity and minimize data loss, Growvidya performs regular automated backups of critical customer data.

Our backup strategy includes:

• Scheduled backups
• Secure backup storage
• Data redundancy
• Disaster recovery planning
• Recovery testing
• Business continuity procedures

While every effort is made to ensure reliable backup systems, customers are also encouraged to maintain copies of critical institutional records whenever appropriate.

11. Network Security

Our networks are protected using multiple security layers designed to prevent unauthorized access and malicious activity.

Security measures include:

• Firewalls
• Network monitoring
• Secure routing
• Traffic analysis
• Access restrictions
• Threat detection systems
• Security logging

Continuous monitoring helps identify and respond to suspicious activities promptly.

12. Secure Software Development

Security is incorporated throughout the software development lifecycle.

Development practices include:

• Secure coding standards
• Code reviews
• Vulnerability assessments
• Security testing
• Quality assurance
• Patch management
• Controlled deployment procedures

We continuously improve our platform to address newly discovered security risks and evolving cyber threats.

13. Monitoring & Incident Response

Growvidya continuously monitors its infrastructure and systems for security events.

Monitoring activities include:

• Server monitoring
• Login monitoring
• Application monitoring
• Error monitoring
• Performance monitoring
• Security event logging
• Audit logging

In the event of a security incident, our technical team follows established incident response procedures to investigate, contain, and resolve issues while minimizing service disruption.

14. Third-Party Service Providers

Certain services integrated into Growvidya may be provided by trusted third-party vendors, including cloud hosting providers, payment gateways, SMS gateways, email service providers, and communication platforms. We carefully select service providers based on their technical capabilities, security practices, and operational reliability. However, each third-party provider operates under its own security policies and legal obligations.

15. Customer Responsibilities

While Growvidya maintains a secure platform, customers also play an important role in protecting their information.

Customers are responsible for:

• Maintaining strong passwords.
• Protecting login credentials.
• Restricting unauthorized access.
• Managing user accounts responsibly.
• Assigning appropriate user permissions.
• Logging out from shared devices.
• Reporting suspicious activities immediately.
• Keeping devices updated with current security patches.

Failure to follow recommended security practices may increase the risk of unauthorized access.

16. Data Retention & Deletion

Customer information is retained only for as long as necessary to provide our services, comply with contractual obligations, legal requirements, and legitimate business purposes. Upon account termination or expiration, data may be retained for a limited period as required by applicable laws, regulatory obligations, backup policies, or dispute resolution requirements before secure deletion.

17. Policy Updates

Technology and cybersecurity threats continue to evolve. Accordingly, Codeulas Innovations Private Limited reserves the right to modify, amend, or update this Data Security Policy at any time to reflect changes in security practices, legal requirements, or operational improvements. The latest version will always be available on the official Growvidya website. Continued use of the platform after such updates constitutes acceptance of the revised policy.

18. Governing Law

This Data Security Policy shall be governed by and interpreted in accordance with the laws of the Republic of India, including applicable provisions of the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023, and other relevant regulations. Any disputes arising under this policy shall be subject to the exclusive jurisdiction of the competent courts located in Kalyani, Nadia, West Bengal, India, unless otherwise required by applicable law.

19. Contact Information

If you have any questions, concerns, or requests regarding this Data Security Policy or the security practices adopted by Growvidya, please contact:

Product: Growvidya – School Management System

Website: https://growvidya.in

Email: support@growvidya.in

We are committed to maintaining the highest standards of data security and continuously improving our security framework to ensure that educational institutions can confidently rely on Growvidya for the secure management of their academic, administrative, and operational information.