Legal
Privacy Policy
Effective date: 1 June 2026 · Last updated: 19 June 2026
Enlyt (“we”, “our”, “us”) is a multi-tenant school management SaaS platform. This Privacy Policy explains what information we collect when you use Enlyt, how we use it, and the choices you have. If you have questions, email us at support@enlyt.in.
By using Enlyt you agree to the collection and use of information as described in this policy. Schools using Enlyt to manage student data do so as data controllers; Enlyt acts as a data processor on their behalf.
1. Information we collect
Account & school information
When a school subscribes to Enlyt, we collect the school's name, address, domain, and administrator contact details (name, email, phone). Each school operates as an isolated tenant — no data is shared across tenants.
User information
We collect names, email addresses, roles, and login credentials for every user your school invites — including administrators, teachers, and staff. Parent accounts include contact details used for communication features.
Student records
Schools upload and manage student data including names, class assignments, attendance records, academic marks, fee status, and admission details. This data is owned by the school and processed on their behalf.
Usage data
We collect browser type, device information, IP address, pages visited, and actions performed within the platform. This helps us diagnose issues and improve the product.
2. How we use your information
To deliver the platform
We use your data to operate, maintain, and improve Enlyt — including authentication, data storage, notification delivery, and reporting.
To support you
Support staff may access account and usage data to diagnose issues you report. We do not access student or operational data unless you explicitly share it for support purposes.
To communicate with you
We send transactional emails (password resets, billing notices, critical alerts). If you subscribe to our newsletter, we send product updates. You can unsubscribe at any time.
To improve the product
Aggregated, anonymised usage signals help us understand how features are used and where to invest. No personally identifiable information is used in this analysis.
3. Data sharing & third parties
We do not sell your data
Enlyt does not sell, rent, or trade personal information to third parties for marketing purposes — ever.
Service providers
We use a small number of carefully vetted sub-processors (cloud hosting, transactional email, error monitoring) under data processing agreements that restrict them from using your data for any purpose other than providing those services.
Legal obligations
We may disclose information if required to do so by law, court order, or government authority. We will notify you of such requests where legally permitted.
4. Data security
Tenant isolation
Every school's data is isolated at the database layer using EF Core global query filters. No query can cross tenant boundaries. A misconfigured application layer cannot leak one school's data to another.
Authentication & access control
All users authenticate with JWT tokens. Role-based access control (RBAC) ensures staff can only access resources their role permits. Sessions expire automatically.
Encryption
Data is encrypted in transit using TLS 1.2+ for all connections. Sensitive fields (passwords, credentials) are hashed and never stored in plaintext.
Vulnerability management
We follow responsible disclosure practices and apply security patches promptly. If you discover a vulnerability, please contact us at security@enlyt.app.
5. Data retention
Active accounts
We retain your data for as long as your school has an active Enlyt subscription.
After cancellation
Following cancellation, we retain your data for 90 days to allow for re-activation or export. After 90 days, data is permanently deleted from our systems and backups on a rolling schedule.
Data export
You can request a full export of your school's data at any time by contacting support@enlyt.in. Exports are provided in standard formats (CSV/JSON) within 14 business days.
6. Your rights
Access & correction
You have the right to access personal information we hold about you and to request corrections if it is inaccurate.
Deletion
You may request deletion of your personal data. For student and school data, deletion requests should come from the school administrator who controls that data.
Portability
You may request a copy of data you have provided to us in a structured, machine-readable format.
Objection
You may object to certain processing activities, including direct marketing. Contact us at support@enlyt.in and we will honour your request.
Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify school administrators by email and update the effective date above. Continued use of Enlyt after changes take effect constitutes acceptance of the updated policy.
Privacy questions?
support@enlyt.in