Last updated: 26 October 2026
NEXOSSO is a school management service (ERP, attendance, fees, parent communication) run by NEXQRA Private Limited, India. This policy explains what information NEXOSSO holds, why, who it is shared with and how it can be deleted. It applies to the NEXOSSO website and portals (nexosso.cloud and school addresses on it), the NEXOSSO PARENTS and NEXOSSO SCHOOL apps, and the "NEXOSSO Connect" WhatsApp integration.
1. Who decides about the data
Each school decides what information about its students, parents and staff is entered into NEXOSSO and what it is used for. NEXQRA stores and processes that information on the school's behalf, only to run the service for that school. Requests about a student's or parent's data should first go to the school; NEXQRA will help the school answer them.
2. Information we hold
- School records entered by the school: names, class, admission details, parents' names and phone numbers, staff details, fees, marks, homework, notices, leave requests.
- Attendance: punch times from biometric machines, gate cameras and the staff app (including location at the time of a staff punch when the school uses that feature).
- Face data for camera attendance, where the school uses it: the photos the school provides and the numeric face templates made from them and from gate camera images, used only to mark attendance in that school.
- Account and usage data: login names, encrypted passwords, login times, IP address and device information, for security.
- Messages: notifications sent to parents and staff (app, Telegram, SMS, email and WhatsApp) and their delivery status.
3. How we use it
Only to provide NEXOSSO to the school: keeping records, marking attendance, sending fee, attendance and school notices to parents, reports for the school, security and fixing problems. We do not sell personal data, do not use it for advertising and do not use students' data to build profiles for any other purpose.
4. WhatsApp messages (NEXOSSO Connect)
A school can connect its own WhatsApp Business number to NEXOSSO through Meta's official signup ("NEXOSSO Connect" app). When it does:
- NEXOSSO stores the school's WhatsApp Business Account ID, phone number ID, display name and an access token from Meta. The token is stored encrypted and is used only to send that school's messages and to read their status.
- Messages that the school's NEXOSSO account sends (for example attendance, fee and notice updates) go from the school's number through Meta's WhatsApp Business Platform to the parent's WhatsApp. Meta processes these messages under its own terms and privacy policy.
- Meta tells NEXOSSO whether each message was sent, delivered, read or failed. We keep this status for the school's reports. Technical notices from Meta (template approval, number quality) are kept for up to 30 days.
- Replies from parents may reach NEXOSSO through Meta; they are kept only to show them to the school and for up to 30 days in the technical log.
- The school can remove the number at any time (School panel → Official WhatsApp → Remove number). NEXOSSO then stops using the token. See the data deletion page.
5. Who we share data with
Only service providers needed to run NEXOSSO, and only what each one needs: our cloud server providers; Meta (WhatsApp) when a school uses WhatsApp messaging; Telegram when a school or parent uses the NEXOSSO Telegram bot; Google Firebase for app notifications; SMS and email providers chosen by the school; and payment gateways when a parent pays fees online. We share information with authorities only when the law requires it. A school's data is never shown to another school.
6. Security
All connections use HTTPS. Servers are protected by firewalls, key-only administrator access and automatic blocking of repeated login attempts. Children's photos and documents are shown only to the school's staff and to that child's own parent. Access tokens and passwords are stored encrypted or hashed. Backups are kept to recover from failures.
7. How long we keep data
School records are kept while the school uses NEXOSSO. When a school stops, its data is deleted or returned to it on request, normally within 30 days, except where the law requires us to keep something longer.
8. Your rights
Parents, students and staff can ask to see, correct or delete their information, as provided by India's Digital Personal Data Protection Act, 2023. Please contact your school first; you can also write to us at the address below and we will work with the school to answer within 30 days.
9. Children
NEXOSSO holds students' information because schools enter it for school purposes, with the involvement of parents. Student accounts are created by the school; we do not knowingly collect children's data for any other purpose.
10. Changes
If this policy changes, the new version is published on this page with a new date.
11. Contact
NEXQRA Private Limited
Email: Admin@nexqra.com
Phone / WhatsApp: +91 97851 51451
Address: 808B, F-79, 80, DLF Prime Towers, Okhla Industrial Area, Phase 1, Delhi 110020