How we handle your data.

NXT Schools is a school operating system built and operated by Cubixso Solutions Pvt Ltd (“Cubixso”, “we”, “us”). This Privacy Policy explains what information we collect when schools, staff, parents and students use NXT Schools, why we collect it, and the choices you have.

We are headquartered at T-Hub Phase 2, Plot 1/C, Sy No 83/1, Hyderabad Knowledge City, Raidurg, Hyderabad, Telangana 500081, India.

We only collect information that is needed to run the school workflows our customers configure. This falls into a few categories.

From the school

• Student profile data — name, class/section, roll number, photo, contact details for parents.
• Staff profile data — name, designation, contact details, payroll where the school enables it.
• Operational data — attendance, marks, fees, transport routes, hostel allocations and homework.

From your device

• Device type, OS version and app version for crash diagnostics.
• Approximate location for bus tracking — only when the bus app is in active use.
• Push notification tokens for safety and attendance alerts.

From you, directly

• Messages you send through the contact form or to our support team.
• Account credentials you create to sign in.

We use this data for the following purposes:

• To provide the features your school has subscribed to.
• To send service notifications such as attendance alerts, fee reminders and bus status.
• To improve reliability — by triaging crash reports and slow endpoints.
• To respond to support requests and provide setup help.
• To comply with applicable laws and lawful requests from authorities.

We do not sell personal information. We do not use student or parent data to train third-party models or to serve advertising.

Customer data is stored in encrypted databases inside data centres located in India. Backups are encrypted at rest and retained according to the customer's contract.

Access to production systems is restricted to a small group of engineers, gated behind SSO, MFA and audit logging. We rotate access on staff changes.

We share data only with sub-processors who help us run the service — for example, infrastructure providers, transactional email services and SMS gateways. Every sub-processor is bound by a data-processing agreement that mirrors the protections in this policy.

A current list of sub-processors is available on request to contact@cubixso.com.

Subject to applicable law, you have the right to:

• Access the personal information we hold about you.
• Request correction of information that is incorrect.
• Request deletion, subject to retention obligations of the school.
• Withdraw consent where we rely on consent.
• Lodge a complaint with the relevant data protection authority.

For student and parent accounts, the school is the data controller and we are the processor. Requests should normally be routed via your school administrator. We will support the school in fulfilling those requests.

We retain customer data for as long as the school maintains an active subscription plus a grace period defined in our contract — typically 90 days — after which the data is permanently deleted from production systems. Encrypted backups roll off within 30 days of deletion.

NXT Schools is designed for use inside schools. Student accounts are created and managed by the school. We do not knowingly collect personal information directly from children outside of this context.

We'll post material changes to this page and update the “Last updated” date. If the change is significant, we'll also notify school administrators by email.