DigiNexus Lab Education Management System

The DigiNexus Lab Education Management System is a software application designed to help educational institutions manage their operational and administrative activities.

Depending on the features enabled by an institution, the Application may provide functionality including:

• Student management
• Teacher and staff management
• Class and course management
• Attendance management
• Fee and payment record management
• Examination and result management
• Reports and administrative records
• Database backup and restoration
• Google Drive backup integration

Google services are used only where a user or authorized institution administrator chooses to connect and use those services.

The information collected by the Application depends on how the Application is configured and which features you use.

2.1 Account and Authentication Information

The Application may process information required to authenticate and identify authorized users, such as name, email address, user account identifier, authentication information required to maintain a secure session, and user role or authorization information. We use this information to authenticate users, maintain accounts, control access, and provide the requested functionality.

2.2 Education Management Data

When users enter information into the system, the Application may process information such as:

• Student names
• Student identification information
• Parent or guardian information
• Contact information
• Class and enrollment information
• Attendance records
• Examination and assessment records
• Fee and payment records
• Academic records
• Teacher and staff information
• Institutional information
• Reports and other entered information

The exact information processed depends on the features used. Educational institutions and authorized administrators are responsible for ensuring that information entered into the Application is collected and processed lawfully.

If you choose to connect the Education Management System to Google services, the Application may request access to certain information associated with your Google Account. Depending on the Google permissions requested, this may include:

• Your Google account email address
• Your Google account name or basic identification
• Information necessary to authenticate your Google Account
• Google Drive information required to create, manage, or restore backups created through the Application

The Application only requests Google permissions necessary for the Google-related functionality you choose to use. We do not request access to Google information that is unnecessary for the Application's functionality. Google may display the exact permissions requested on the Google consent screen before you authorize access.

The Education Management System may provide an optional Google Drive backup and restoration feature. When you authorize Google Drive access, the Application may use it to:

• Create backups generated by the system
• Upload application backups to Google Drive
• Identify backups created by the Application
• List or locate Application-created backup files for restoration
• Download Application-created backups when you request restoration
• Restore the system from an authorized backup
• Manage or delete Application-created backup files where permitted

Google Drive access is used specifically to provide the backup and restoration functionality requested by the user or institution. The Application does not use Google Drive access to provide advertising, sell information, build advertising profiles, or create unrelated databases of Google user data.

Information obtained through Google APIs is used only for purposes necessary to provide the functionality of the Education Management System.

Google account information may be used to:

• Identify the Google account connected to the Application
• Authenticate the authorized user
• Associate an authorized Google connection with the appropriate EMS account
• Maintain the connection required for Google Drive backup functionality

Google Drive information may be used to:

• Create EMS backups
• Upload EMS backup files
• Locate EMS backups
• Download backups for restoration
• Restore institutional data from an authorized backup
• Manage Application-created backup files

We do not use Google user data for purposes unrelated to the functionality described above.

DigiNexus Lab's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data obtained through Google APIs is used only to provide or improve user-facing functionality of the system that is directly related to the Google integration.

Google user data is not transferred to third parties for purposes inconsistent with Google's Limited Use requirements.

The Education Management System does not request access to a user's entire Google Account merely because the user connects Google Drive. Unless specifically required and separately disclosed, we do not request access to:

• Gmail messages
• Google Contacts
• Google Photos
• Google Calendar
• Google Maps
• YouTube account data
• Google Ads information

The actual Google permissions presented to users are determined by the OAuth configuration of the Application.

Information associated with the system may be stored in the Application's local database, server infrastructure, or other infrastructure used to provide the Service. Where Google Drive backup functionality is used, backup files may be stored in the user's or institution's authorized Google Drive according to the permissions granted through Google OAuth.

Google Drive backups remain subject to the user's or institution's Google Drive controls and Google's applicable policies. We use reasonable technical and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction.

When a user authorizes Google services, the Application may receive OAuth authorization information or tokens necessary to maintain the authorized connection. Such credentials and tokens are treated as confidential security information and are used only to maintain the authorized Google integration and perform the functionality for which the user granted permission.

We do not sell OAuth credentials or access tokens, and we do not intentionally expose them publicly. Users can revoke the Application's Google access through their Google Account settings.

DigiNexus Lab does not sell personal information or Google user data. We do not share Google user data with advertising networks, data brokers, or information resellers. Information may be disclosed only when necessary to:

• Provide the functionality requested by the user
• Operate and secure the Application
• Maintain the Google integration
• Comply with applicable legal obligations
• Respond to lawful requests from authorities
• Protect the security, rights, or property of DigiNexus Lab, users, or the Service
• Investigate fraud, abuse, security incidents, or unauthorized activity

Any service provider that processes information on our behalf is expected to handle it only for legitimate service-related purposes and with appropriate confidentiality and security protections.

DigiNexus Lab does not routinely allow employees or other individuals to manually access Google user data. Human access may occur only where permitted by applicable Google policies and where necessary, such as:

• When the user has explicitly authorized access for support or troubleshooting
• For security investigations
• To investigate abuse or unauthorized activity
• To comply with legal requirements

We do not permit routine human review of Google user data for advertising, profiling, or unrelated commercial purposes.

We retain information only for as long as reasonably necessary to provide the Application, maintain security, comply with contractual obligations, resolve disputes, enforce agreements, or comply with applicable legal requirements. Different categories of information may have different retention periods.

Application data

EMS records may be retained for as long as the institution or authorized administrator maintains the relevant account or data, subject to applicable agreements and deletion requests.

Google OAuth information

OAuth authorization information may be retained for as long as necessary to maintain the authorized Google integration. When the connection is disconnected or revoked, credentials that are no longer required should be removed or invalidated according to the Application's implementation and applicable security requirements.

Google Drive backups

Backups stored in Google Drive are controlled by the Google account or institution that authorized the integration. Users or authorized administrators may delete Application-created backups from Google Drive where applicable. DigiNexus Lab does not claim ownership of the user's Google Drive account or its contents.

Users and authorized institutional administrators may request deletion of information associated with their use of the Education Management System, subject to applicable contractual, legal, security, and operational requirements. To request deletion, contact info@diginexuslab.com. Please provide enough information for us to identify the relevant account or institution.

Depending on the request, deletion may include:

• Application account information
• Application records associated with the account
• Stored authentication information
• Google OAuth authorization information
• Application-created backup references
• Other information no longer required for legitimate purposes

Some information may need to be retained where required by law, necessary to establish or defend legal claims, required for security, or otherwise permitted by applicable law.

You can stop the system from accessing your Google Account by disconnecting or revoking the Google authorization. You can also manage third-party access from your Google Account. When Google access is revoked, the Application will no longer be able to use the revoked authorization to access Google services.

Revoking Google authorization does not necessarily delete backup files previously created in Google Drive. Existing backup files remain subject to the controls of the Google Drive account in which they are stored. Users or authorized administrators should delete backup files from Google Drive if they no longer wish to retain them.

DigiNexus Lab takes reasonable technical and organizational measures to protect information handled by the system. Depending on the deployment and infrastructure, security measures may include:

• Access controls
• Authentication and authorization controls
• Secure transmission of information
• Protection of credentials and authorization tokens
• Database access controls
• Server and application security measures
• Backup and recovery procedures
• Monitoring and maintenance
• Restriction of administrative access

No internet-based application or electronic storage system can guarantee absolute security. Users should also protect their account credentials and restrict access to authorized personnel.

Google OAuth is used to allow users to authorize specific Google services without providing their Google password to DigiNexus Lab. We do not ask users to provide their Google Account password directly to the system. Authorization is performed through Google's authorization interface. Users should review the permissions displayed by Google before granting access.

The system may rely on third-party infrastructure or services required to operate the Application. These may include hosting, database, authentication, email delivery, cloud infrastructure, security, and Google services.

Where third-party services process information on behalf of DigiNexus Lab, they are expected to process it only as necessary to provide their services and in accordance with applicable security and privacy obligations. Google services are governed by Google's own policies and terms.

Google user data accessed through Google APIs is treated differently from ordinary website analytics or marketing information.

• We do not combine Google user data with information for advertising profiles
• We do not sell Google user data
• We do not use Google user data to serve advertisements
• We do not use Google user data to determine creditworthiness or lending eligibility
• We do not use Google user data to train generalized AI or machine-learning models

We use Google API data only for the Google-related features disclosed in this Privacy Policy.

The system and the DigiNexus Lab website may use cookies or similar technologies where necessary for authentication, session management, security, remembering user preferences, and maintaining application functionality. Cookies are not used to sell Google user data or create advertising profiles from Google API information.

The system is intended to be used by educational institutions and authorized personnel. The Application is not designed to independently solicit personal information directly from children for advertising or marketing purposes. Educational institutions are responsible for ensuring that their use of the Application and collection of student information complies with applicable privacy and child-protection laws.

If you believe that information belonging to a child has been collected improperly, please contact us at info@diginexuslab.com.

The system may be deployed by schools, academies, colleges, educational organizations, or other institutions. Where an institution controls the information entered into the Application, that institution may determine:

• What information is collected
• Which users have access
• How long institutional records are retained
• Which administrators can access records
• When institutional information should be deleted

DigiNexus Lab provides the software and related infrastructure according to the applicable service arrangement.

Depending on the functionality available to you, you may have the ability to:

• Review information stored in your account
• Update account information
• Disconnect Google services
• Revoke Google authorization
• Delete Application data
• Delete Google Drive backups
• Request deletion of information
• Contact DigiNexus Lab regarding privacy questions

For privacy-related requests, contact info@diginexuslab.com.

We may update this Privacy Policy from time to time to reflect:

• Changes to the Education Management System
• Changes to Google integrations
• Changes to data-processing practices
• Changes to applicable laws or regulations
• Security or operational improvements

When material changes are made, we will update the "Last Updated" date at the beginning of this Privacy Policy. If a change materially affects how we use Google user data, we will update the relevant disclosures before using Google user data for the changed purpose.

If you have questions about this Privacy Policy, the Education Management System, the Google OAuth integration, Google Drive access, data deletion, or privacy practices, please contact:

DigiNexus Lab's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data obtained through the Education Management System is used only to provide the Google-related functionality described in this Privacy Policy and is not used for advertising, sold to data brokers, or used for unrelated purposes.

Google OAuth Data Summary

For transparency, the following summarizes how the Education Management System handles Google information:

The exact Google permissions requested by the Application are displayed to the user during Google's authorization process.