Who we are
Capabble Platforms LLP, of HN. 41, Village Godhri, PO Achhej, Tehsil Beri, Distt. Jhajjar, PIN 124106, Haryana, India ("Capabble", "we"), makes school management software used by principals, office staff, teachers, parents and students.
This policy follows India's Digital Personal Data Protection Act, 2023. For the information a school puts into Capabble, the school is the data fiduciary and we process it on the school's behalf and on its instructions. For your workspace account and your visits to our website, Capabble is the data fiduciary.
What we collect
When a school creates a workspace account
- Institution code, affiliation no. and institution name.
- The email address used to sign in. Passwords are stored only in a form that can't be read back.
What schools add while using Capabble
- Students and parents: names, class and section, admission no., contact details, attendance, marks, fees and, where the Clinic module is used, health notes.
- Staff: names, roles, contact details, timetables and duties.
- Transport, assets and activities records, if those modules are turned on.
When anyone uses Capabble
- Device and browser type, IP address, sign-in times and error logs, so we can keep accounts secure and fix problems.
Children's data
Most student records are about children. We process them only to provide the service to the school, and we never use them to track, profile or advertise to children, or sell them to anyone.
Schools are responsible for getting verifiable consent from a parent or guardian where the law requires it, before adding a child's data.
How we use it
- To run the modules your school has turned on.
- To keep accounts secure, for example by spotting unusual sign-ins.
- To send service emails such as account confirmations and password reset links.
- To answer support requests.
- To improve Capabble, using only combined data that doesn't identify anyone.
- To meet our legal obligations.
Where it's kept, and for how long
Data is stored in India, in the Amazon Web Services Mumbai region.
- Workspace account details: while the account is open, and for 90 days after it's closed.
- School data: kept for 30 days after the workspace closes, so the school can export it, including past report cards. We then delete it within a further 60 days, or hand it back first if the school asks.
- Backups: overwritten within 30 days.
- Invoices and payment records: kept for as long as Indian tax law requires, currently 8 years.
If a school wants records such as report cards to stay available to past students, it should export them before its workspace closes.
How we protect it
- Data is encrypted while it travels between your device and Capabble, and while stored by our database providers.
- Passwords are stored only in a form that can't be read back.
- People see only what their role in the school allows.
- Our staff's access to school data is limited and logged.
If a breach affects your data, we'll tell the school and the Data Protection Board of India as the law requires.
Your rights
You can ask to see the personal data we hold about you, correct it, have it erased, and nominate someone to act for you. You can also raise a grievance.
For data your school added, such as a student's record, ask your school first. They control that data, and we'll help them respond.
Grievance officer
Grievance Officer, Capabble Platforms LLP
support@capabble.cloud
HN. 41, Village Godhri, PO Achhej, Tehsil Beri, Distt. Jhajjar, PIN 124106, Haryana, India
We reply within 48 hours. If you're not satisfied with our reply, you can complain to the Data Protection Board of India.
Changes to this policy
If we make a significant change, we'll tell workspace account holders by email at least 15 days before it takes effect, and update the date at the top of this page.