INSTITUTIONAL TRUST & DATA GOVERNANCE

Privacy Policy & Data Governance

Effective Date: September 2026 • Mandatory compliance for all Shikshya Setu partner schools

Institutional Data Sovereignty Guarantee

NON-NEGOTIABLE CORE PRINCIPLE

All student records, parent contact directories, teacher evaluations, and institutional financial ledgers processed by Shikshya Setu remain the 100% exclusive intellectual and legal property of the subscribing educational institution. We will never sell, rent, commercialize, or license school data to advertisers, lenders, or third parties.

1. Institutional Scope & Commitment

Shikshya Setu is an enterprise school management system developed by Metabuzz Tech and owned by Evoke Wisdom. We provide institutional software infrastructure to schools, colleges, and educational boards in Nepal. We operate as a strict Data Processor on behalf of the subscribing school, which acts as the Data Controller under applicable laws.

2. Categories of Records Processed

Institutional Profiles

School branch names, academic year calendars, period schedules, classroom allocation maps, and departmental organizational structures.

User Profiles & Contacts

Official names, emergency phone numbers, guardian relationships, faculty qualifications, and role-scoped authentication credentials.

Academic & Attendance Logs

Daily period-by-period attendance, continuous evaluation marks, homework submissions, and teacher observational notes.

Financial & Fee Ledgers

Tuition fee schedules, payment transaction references, balance statements, and scholarship allocations (excluding raw bank credentials).

3. Technical & Organizational Safeguards

TLS 1.3 Transport Security: All data transmissions between client browsers, mobile apps, and servers utilize strict HTTPS with modern TLS 1.3 cryptographic suites.
Logical Tenant Segregation: Each school's data operates in an isolated logical vault with strictly enforced partition keys, making accidental cross-tenant data leaks impossible.
Granular Role-Based Access: Parents only have access to their linked children's records. Teachers only have access to their assigned classes and sections.
Redundant Daily Backups: Point-in-time automated snapshots safeguard institutional continuity against hardware loss or accidental deletions.

4. Institutional Export & Deletion Rights

Subscribing institutions may request a complete data export at any time. Exports are delivered in standardized formats (CSV, JSON, and compiled PDF summary registers). If a school concludes its contract, all active database records are archived or securely purged following the agreed transition window.

5. Institutional Governance & Inquiries

For institutional compliance reviews, security questionnaires, or data export coordination:

Shikshya Setu Data Governance Office

Evoke Wisdom & Metabuzz Tech

Direct Email: [email protected]

Location: Kathmandu, Nepal