1 Information we collect
When a school uses CoreAxis, we process the data the school enters and the account details needed to run the service, including:
- School & account details — school name, address, contact email and phone, and staff login credentials.
- Student & staff records the school chooses to store — names, classes, attendance, fees, marks and related academic data.
- Usage & technical data — log entries, device/browser information and actions taken in the app, used to keep the service secure and reliable.
- Sign-in security data — one-time sign-in codes sent to a staff member’s email, the list of devices a user has chosen to trust (for 30 days), IP address and time of sign-in attempts. Codes are stored only as hashes and expire within minutes.
2 How we use it
We use this information only to provide and improve the service: to operate the school’s account, deliver features, send transactional notifications (SMS/email the school enables), process subscription payments, provide support, and maintain security. We do not sell personal data.
3 Data isolation & security
Each school’s data is kept in its own isolated database. We apply access controls, encrypted transport (HTTPS), hashed passwords and routine backups. No system is perfectly secure, but we work to protect your data using industry-standard practices.
4 Data sharing
We share data only with service providers that help us run the platform, strictly to perform those functions, or where required by law: our hosting provider, the email service that delivers sign-in codes and notices, the SMS gateway a school enables for messages such as fee reminders (the parent’s mobile number and the message text), and Razorpay for online payments. Each school remains the owner and controller of the data it stores, and we act on its instructions.
5 Retention & deletion
We retain a school’s data for as long as its account is active. On account closure, data can be exported and is deleted on request within a reasonable period, subject to any legal retention requirements. Individual users can ask for their account and data to be deleted — see Delete your account.
6 Your rights
Schools (and the individuals whose data they hold) may request access, correction, export or deletion of their data. Contact us using the details below and we will respond promptly. Records of students under 18 are entered and managed by their school; parents and guardians can make these requests on their child’s behalf.
7 School eRegister by CoreAxis (Android app)
School eRegister by CoreAxis is the mobile app for schools that use CoreAxis School ERP. It works with the same school account and follows this policy, with these app-specific points:
- Accounts. There is no public sign-up. Accounts are created by the school: staff accounts by the school’s administrators (on the web or in the app), and students are admitted by the school office. Staff sign in with their email and password plus a one-time code emailed to them on a new device; students and parents sign in with their school, admission number and date of birth. A parent can add more than one child on the same phone; each child is verified separately and kept in its own encrypted storage.
- Data on the phone. To work offline, the app keeps a copy of the records the signed-in person is allowed to see (for example a teacher’s own classes, or a parent’s own child) in an encrypted database on the device. Sign-in tokens are kept in the phone’s secure storage. Signing out deletes this data from the phone, and the app opts out of Android backups.
- App lock. Users can lock the app with a PIN and, if they wish, the phone’s fingerprint or face unlock. Fingerprints and face data are checked by Android itself and never reach the app or our servers; the PIN is stored only as a salted hash.
- Photos and files. The app opens the camera or gallery only when a user chooses to attach something — for example a student’s photo added by school staff, or a document attached to a leave request. Only the chosen image or file is uploaded to the school’s server. The app does not read other photos, contacts, location or advertising IDs.
- Online exams. Answers given in an online test are saved on the school’s server as the student goes, so the school can grade the test and show the result.
- Connection. The app talks only to the school’s CoreAxis server, over HTTPS. When signing in it sends a session label such as “Android 14”.
- Online fee payments. If the school has enabled online payment, parents pay through Razorpay Checkout. Card, UPI and bank details are entered with Razorpay and never reach the app or the school’s server; we receive only the payment confirmation.
- No ads, no analytics. The app contains no advertising, analytics or tracking SDKs, and we do not sell or share app data for marketing.
- Deleting data. A school administrator can remove a staff member or student from the ERP, which removes their data from the app. You can also ask us to delete your account and data — see Delete your account — or email softcoreaxis@gmail.com; we will coordinate with your school, which controls the records.
8 Contact
Questions about this policy? Email softcoreaxis@gmail.com or call +91 91131 07586.