Privacy policy

Campus is school management software supplied by Branova. A school uses it to run its own administration — admissions, attendance, homework, examinations, fees and communication with parents.

Who is responsible for the data

The school is. The records inside Campus — pupils, guardians, staff, marks, fees — belong to the school that entered them. Branova stores and processes that data on the school's behalf and on its instructions. If you are a parent or a pupil and you want a record corrected or removed, ask your school; they can do it themselves, and they decide.

What is collected

• About pupils — name, date of birth, gender, class and section, admission number, photograph if the school uploads one, attendance, marks, fee records, and the documents the school chooses to store.
• About parents and guardians — name, relationship, mobile number, email address if given, and occupation if the school records it.
• About staff — name, designation, qualification, contact details and employment dates.
• About anyone who signs in — the time of sign-in, the IP address it came from and the browser used, kept so a school can see who changed what and spot an account being misused.

Passwords are never stored. Only a one-way hash is kept, which cannot be turned back into the password — not by Branova, and not by anyone who obtained the database.

What it is used for

Running the school, and nothing else. Branova does not sell this data, does not share it with advertisers, does not use it to train machine-learning models, and does not build profiles of pupils or families. There is no advertising in Campus and no third-party analytics or tracking code in the app or the website.

Who else sees it

Each school's data is separated from every other school's in the database, and is reachable only by accounts belonging to that school. Within a school, what a person can see follows their role: a class teacher sees their own sections, a parent sees only their own children, an accountant sees fees and not marks.

Branova staff access a school's data only to provide support, and every such access is written to that school's audit log, which the school can read.

The AI setup assistant

A school may optionally connect its own account with an AI provider — Anthropic (Claude), OpenAI or Google (Gemini) — so that Campus can read the school's existing spreadsheets and registers when setting up. This is off unless the school switches it on, and it works like this:

• The account and the key belong to the school, not to Branova. The school is the one contracting that provider.
• For a spreadsheet, only the column headings and about a dozen sample rows are sent, so the provider can describe the layout. The remaining rows are converted on the school's own server and never transmitted.
• For a scanned register or a photograph there is no such shortcut: those pages are sent in full. That requires a second, separate confirmation from the school before it can happen.
• Uploaded files are not retained by Campus after the import is approved or expires.

A school that never enables this feature sends nothing to any third party. Campus makes no other outbound connection in normal use.

Where it is kept, and for how long

Data is stored on the school's own hosting account. It is kept for as long as the school keeps using Campus, because a school is required to retain pupil records for years after a pupil leaves. A school may export or delete its data at any time from its own settings.

Children's data

Campus holds records about children by its nature. Those records are entered by the school under its own duty of care and the consent it obtains from parents. Children do not sign up to Campus themselves; a pupil account exists only if the school creates one. In India this processing falls under the Digital Personal Data Protection Act 2023, in which the school is the Data Fiduciary and Branova is its Data Processor.

Security

• All traffic is encrypted in transit (HTTPS).
• Passwords are hashed; sign-in attempts are rate-limited and locked out after repeated failures.
• Any AI provider key a school stores is encrypted at rest and never displayed again.
• Every change to a record is written to an audit log with the account that made it.

Your rights

You may ask to see the data held about you or your child, to have it corrected, or to have it deleted where the school is not required by law to keep it. Ask the school first — they hold the data and can act immediately. If you cannot reach them, write to campus@branova.in and we will put you in contact with them.

Changes to this policy

If this policy changes in a way that affects what is collected or who sees it, the date at the top changes and schools are notified inside Campus.

Contact

Branova — campus@branova.in