Privacy Policy

1. Who we are

Schoogle (operated by Schoogle India Technologies) is a school discovery and admissions platform for parents in India, and a CRM/lead-management tool for schools. This policy covers every part of the product: the public school-search site, the parent application portal, and the school-side CRM dashboard (including its lead-source integrations — Google Ads, your own website, WhatsApp, and Facebook/Instagram Lead Ads).

2. What we collect

• Parents: name, phone number, email (optional), and the details you enter when searching for or applying to a school (child's name, grade, curriculum preference, budget, city/area).
• School staff accounts: name, email, phone, and role (Admin/Counsellor) for the people a school adds to its own CRM dashboard.
• Lead-source integrations a school connects:
  • Google Ads: whatever a parent submitted on that school's own Google Ads Lead Form (name, phone, email).
  • Your website: whatever a parent submitted through your embedded widget or your own contact form's webhook.
  • WhatsApp: the phone number and message content of a new conversation on the school's connected WhatsApp Business number.
  • Facebook/Instagram Lead Ads: see Section 3 below — this one has its own section because Meta requires it.
• Technical data: a session cookie (to keep you signed in) and a server-side audit log of account actions (who changed what, when) — never your search/browsing activity.

3. Facebook/Instagram Platform Data

When a school connects "Meta (Facebook & Instagram)" in its Integrations dashboard, that school's own staff member signs in with their own Facebook account and grants Schoogle permission to:

• see the list of Facebook Pages that account manages, so they can pick which one to connect;
• subscribe that one Page to lead-notification webhooks; and
• retrieve the actual field data (name, phone, email) of a lead the moment someone submits a Lead Ad on that Page.

We only ever receive data for the one Page the school explicitly chose to connect — never their other Pages, personal profile, friends list, or posts. That lead data is delivered straight into the connecting school's own CRM pipeline, in the same way as any other lead source, and is never shared with any other school, sold, or used for advertising. The Facebook access token itself is encrypted at rest (AES-256-GCM) and is never shown to anyone, including the school that connected it.

4. How we use what we collect

To run the product: matching parents to relevant schools, letting a school manage its own enquiries in one place regardless of where they came from, processing applications, and sending the notifications a school's own staff member has asked for (e.g. a "new lead" alert). We do not sell personal data to third parties, and a school never sees another school's leads.

5. Who we share it with

Only the infrastructure providers needed to run the product itself — our hosting/database provider, our email-delivery provider, and (only for the integration you explicitly connect) Google, Meta, or WhatsApp/Meta's own platforms. None of them are permitted to use your data for their own purposes.

6. How long we keep it

For as long as the relevant account (a parent's or a school's) exists, or until deletion is requested under Section 7. Disconnecting a lead-source integration stops new data from that source immediately but does not delete leads already captured — those are the school's own CRM records.

7. Requesting access, correction, or deletion

Email privacy@schoogleindia.com from the email address on your account, telling us what you'd like (a copy of your data, a correction, or deletion), and which account/school it concerns. We'll confirm what was done within a reasonable time.

If you connected a Facebook Page to Schoogle and want that connection's data removed: a school admin can disconnect the integration themselves any time from Dashboard → Integrations (this immediately stops any further data from that Page), or email the address above and we will delete the previously-captured Facebook-sourced leads and the stored access token for that connection. You can also revoke Schoogle's access directly from your own Facebook account at any time, under Facebook Settings → Apps and Websites.

8. Security

Passwords are hashed (bcrypt), OAuth/API tokens are encrypted at rest (AES-256-GCM), and every webhook delivery from Google/Meta is signature-verified before it's accepted. No system is perfectly secure, but we don't store anything in plaintext that doesn't need to be readable.

9. Children's information

A child's name, grade, and admission-related details may be entered by a parent as part of an enquiry or application — this is provided by the parent/guardian for the specific purpose of that admission process, never collected directly from a child, and never used for any other purpose.

10. Changes to this policy

If this policy changes in a material way, we'll update the date at the top of this page.

11. Contact

Questions about this policy: privacy@schoogleindia.com