1. Our core commitment
SchoolSense is a multi-tenant platform: many schools use the same software infrastructure, with each school’s data kept separate. Protecting that separation is fundamental. Any attempt to access, view, modify or interfere with another school’s data is treated as a serious breach, and we act on it immediately.
The platform enforces school separation technically through role-based access control and secure sessions, in addition to this policy. We do not rely on users to behave correctly; the system is designed to make cross-school access impossible through the normal interface.
2. Account and credential rules
- Do not share your login credentials with anyone.
- Do not create accounts for people who are not authorised members of your institution.
- Report any suspected unauthorised access to your account immediately.
- Schools must deactivate accounts of staff or guardians who are no longer associated with the institution.
3. Prohibited activity
You must not:
- attempt to access data belonging to another school, or attempt to identify the existence of another school’s data;
- probe, scan, or test the vulnerability of the platform without our prior written authorisation;
- attempt to bypass, disable or circumvent authentication, authorisation or security controls;
- upload viruses, malware, or any code designed to disrupt or damage the platform;
- scrape, crawl, or bulk-extract data other than through the export functions we provide;
- upload content that is unlawful, defamatory, obscene, or that infringes another person’s rights;
- upload personal data that you do not have lawful authority to upload;
- send unsolicited commercial communications through the platform;
- use the platform in any way that harms a child, or that is detrimental to the well-being of any student;
- misrepresent your identity or your affiliation with any institution; or
- resell, sublicense, or provide access to the platform to any third party without our written consent.
4. Content standards
Anything uploaded to the platform — notices, complaint messages, homework descriptions, remarks — must be respectful and lawful, and appropriate for an educational setting. This is particularly important because much of the content on the platform is read by children.
5. What happens if this policy is breached
The action we take depends on the seriousness of the breach, and we aim to be proportionate. For example, a shared password would normally lead to a warning and a requirement to reset credentials. An attempt to access another school’s data is treated far more seriously because it threatens the trust of every school on the platform.
- For minor or first-time breaches: a written warning and a requirement to rectify the conduct.
- For repeated breaches: temporary suspension of the individual account or of specific features.
- For serious breaches, including any attempt to access another school’s data, uploading malicious code, or interfering with platform security: immediate suspension of the School’s access, termination of the subscription, and where appropriate, notification to law enforcement and to the affected school.
Where a breach by an individual user is attributable to a School’s failure to manage its accounts properly, we may suspend the School’s access until the issue is resolved.
6. Reporting a problem
If you believe the platform has been misused, or you have discovered a security issue, please contact us at support@schoolsense.in. We welcome responsible security reports and will investigate every report we receive. We ask that you do not publicly disclose a security issue before we have had a reasonable opportunity to address it.
7. Changes
We may update this policy from time to time to address new risks. Material changes will be communicated to schools through the platform or by email.