Who we are
iScuela is a school management system. In this policy, "iScuela", "we" and "us" mean Espranza Innovations.
This policy explains what personal data we collect, why, and what you can do about it. It covers our website, iscuela.com, and the people who contact us, book a demo or buy iScuela. If you use iScuela through your school, read "Using iScuela through your school" below first: your school's own privacy notice applies to that data.
What we collect on this website
When you browse. Our hosting provider, Vercel, keeps standard server logs (such as your IP address, browser type and the pages requested) to run the site securely.
Analytics. We use Google Analytics to see how the site is used: which pages are visited, roughly where visitors are and what device they use. In the UK and the EU it runs only if you agree; elsewhere it runs unless you turn it off with Cookie settings. We do not use it for advertising. Our cookie policy lists the cookies.
Google Analytics keeps the details of each visit for 2 months, and recognises a returning browser for up to 14 months after its last visit. Our reports use totals. Google signals, User-ID and user-provided data collection are all off, so analytics is never linked to a Google account or to who you are.
When you contact us or book a demo. The Contact form asks for your name, work email, school, role, the curricula your school follows, roughly how many students it has, and an optional message. We use these to answer you and, if you asked for one, to arrange a demo.
When you email or call us. We keep what you send us, to answer you and to keep a record of what was agreed.
Using iScuela through your school
If your school uses iScuela, your school decides what is recorded about its students, families and staff, and who can see it. For that data your school is the controller (under the DPDP Act, the Data Fiduciary) and iScuela is the processor: we handle it only on your school's instructions, as set out in our data processing agreement with the school.
So if you are a parent, student or member of staff with a question about your data in iScuela, ask your school first. We will help your school answer.
We are the controller for our own records about the schools we work with: the account, the contract, billing, and support conversations.
When a school's contract ends, we export its data and give it to the school.
Why we use your data, and on what basis
- To answer your enquiry and arrange a demo: our legitimate interest in replying to people who contact us, or steps you have asked us to take before a contract.
- To provide iScuela to a school and bill for it: our contract with the school.
- To keep our website and service secure: our legitimate interest in protecting them.
- To understand how our website is used: in the UK and the EU, your consent, given in the cookie banner; elsewhere, our legitimate interest in improving our website. Either way, you can turn analytics off at any time with Cookie settings.
- To meet our legal obligations, such as keeping financial records.
We do not sell personal data, and we do not use it for advertising.
Who else handles it
We use a small number of providers to run our website and service:
- Vercel hosts this website.
- Google provides Google Analytics.
- Brevo delivers the messages sent through our Contact form to our inbox.
- The providers that process school data in iScuela are listed on our Trust and security page.
How long we keep it
We keep enquiries and demo requests for 24 months after we last hear from you, then delete them. We keep a school's customer records, such as the contract and invoices, for 7 years after the contract ends, because we must keep financial records. Data held in iScuela for a school is handled as set out in "Using iScuela through your school" above.
Your rights
Depending on where you live, you can ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct it if it is wrong;
- delete it, where we are not required to keep it;
- stop or limit how we use it, or object to our use of it;
- move it to another provider, where that applies.
Write to us at info@iscuela.com. We will reply within one month.
If you are not happy with our answer, you can complain to your data protection authority: in the UK, the Information Commissioner's Office (ico.org.uk); in India, the Data Protection Board of India; in the EU, your country's supervisory authority.
Children
This website is for schools and the adults who run them. It is not directed at children, and we do not knowingly collect children's data through it. Children's data in iScuela is held for their school, as described above.
Security
We hold our own ISO 27001 certification. How we protect school data is set out on our Trust and security page.
Changes to this policy
When we change this policy we will update the date at the top of this page. If a change matters to schools we work with, we will tell them directly.
Contact
Questions about this policy: info@iscuela.com.