Data Sovereignty
Privacy Policy.
April 21, 2026Data Protection CompliantNepal Jurisdiction
Preamble
SchoolSathi ("we," "our," "us," or "the Company") is a school management software-as-a-service (SaaS) product developed and operated by Sanothimi Private Limited. We are committed to protecting the privacy and security of all personal information entrusted to us by educational institutions and their stakeholders.
PART 1 — DEFINITIONS
"Personal Data" means any information relating to an identified or identifiable natural person.
"Data Controller" refers to the School.
"Stakeholder" includes school owners, administrators, staff, students, and parents.
PART 2 — APPLICABILITY
2.1 This Privacy Policy applies to all individuals whose data is processed through the SchoolSathi platform.
PART 3 — DATA WE COLLECT
3.1 Institutional Data: School name, registration details (PAN/VAT).
3.2 Student Data: Full name, gender, birth date, blood group, academic performance.
3.4 Staff Data: Personal identity, qualification records, salary structures.
PART 4 — PURPOSES
4.1 To facilitate school operations: attendance tracking, result management.
4.2 To manage financial records: fee invoicing and payroll processing.
PART 6 — DATA ACCESS
6.1 Internal Control: Data is strictly isolated. One school can never see another's data.
6.2 Role-Based Access: Teachers only see data for their assigned classes.
PART 7 — STORAGE
7.1 Infrastructure: Data is stored in the Singapore region (MongoDB Atlas) for performance.
7.2 Retention: Records retained for 7 years as required by Nepal regulatory framework.
Request Data Extract
As an institutional client, you have the right to request a full encrypted copy of your data at any time.