Privacy Policy for Rox Edu (School Management System)

This Privacy Policy (“Policy”) outlines the policies and practices regarding the collection, storage, processing, and protection of personal and academic information collected through the Rox Edu School Management Platform(“Site”, “App”, or “Services”), operated by Roxanlabs(“we”, “us”, or “our”), available on the Google Play Store and web browser portals.

1. Information We Collect

Rox Edu is an enterprise campus management system designed to facilitate school administrative workflows. Depending on your assigned user role (Owner, Administrator, Management Staff, Receptionist, Teacher, Parent, or Student), we collect:

2. How We Use Your Information

All collected information is processed solely for legitimate educational administration purposes, including:

3. Children’s Privacy & Educational Data Safeguards

We recognize the sensitive nature of student data under international regulations (including FERPA, COPPA, and GDPR principles). Student accounts are created and managed directly by the educational institution’s administrative staff or authorized parents. We do not engage in behavioral tracking, target advertising to students, or sell student/parent personal data to any third party.

4. Role-Based Access Control (RBAC) & Data Isolation

Rox Edu strictly enforces multi-tenant data isolation and Role-Based Access Control (RBAC). Data accessible to a Teacher is limited strictly to their assigned classes and students. Parents and Students can only view their own registered profiles, attendance, vouchers, and grades. Full administrative modifications are restricted exclusively to verified School Admins and Owners.

5. Data Security & Storage

We implement industry-standard technical measures, including SSL/TLS encryption for all data in transit, encrypted database storage at rest, password hashing, and role-gated API authorization. Regular system audits and automated back-ups ensure data integrity and prevent unauthorized access.

6. Third-Party Integrations & Sub-Processors

To deliver operational alerts (e.g., attendance notifications and emergency notice broadcasts), Rox Edu integrates with reliable SMS gateways and the WhatsApp Business Platform. These sub-processors receive only the minimum information required to deliver the message (phone number and notice text).

7. Data Retention & Account Deletion

School data is retained for the duration of the institution’s active subscription. Upon student graduation, alumni records can be archived by the school administrator. Institutions or parents requesting account data deletion may contact their school management or submit a request directly to our Data Protection Officer.

8. Contact & Grievance Officer

If you have any questions, concerns, or privacy requests regarding Rox Edu or Google Play Store compliance, please contact us: