Privacy Policy

Effective date: 4 June 2026 · Edmora LMS

This Privacy Policy describes how Edmora LMS (“we”, “us”, “our”) collects, uses, and protects information when you use the Edmora LMS platform at https://edmora.in and related institute portals (subdomains and custom domains operated by our customers).

1. Who this policy applies to

Institute administrators and staff who manage courses, students, fees, and integrations.
Students, parents, and teachers who access an institute’s branded portal.
Visitors to our marketing website and legal pages.

Each coaching institute or school using Edmora LMS is responsible for its own student and parent data. We process that data on the institute’s instructions as a service provider.

2. Information we collect

Account data: name, email, role, institute association, login activity, and password (stored using secure hashing).
Institute data: institute name, branding, batches, courses, attendance, fees, exams, certificates, and announcements you enter in the system.
Technical data: IP address, browser type, device information, and server logs for security and troubleshooting.
Communications: messages sent through in-app messaging and support enquiries you send to us.

3. Google Calendar and Google Drive (optional)

Institute administrators may optionally connect a Google account under Settings → Google. If you choose to connect, we request access only to provide features you enable, including:

Google Calendar — to sync or manage institute calendar events.
Google Drive — to list, import, or attach files you select for courses and content.

We use the following Google OAuth scopes:

https://www.googleapis.com/auth/calendar
https://www.googleapis.com/auth/drive.readonly
https://www.googleapis.com/auth/drive.file
https://www.googleapis.com/auth/drive

What we store: an encrypted refresh token per institute so the platform can obtain short-lived access tokens without asking you to sign in every time. We do not sell Google user data.

What we do not do: we do not read your entire Google account without an action you take in the app (for example, choosing a file to import). You can disconnect Google at any time under Settings → Google, which removes the stored token for your institute.

Google’s use of information received from Edmora LMS APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. How we use information

Provide, operate, and improve the LMS and hosted portals.
Authenticate users and enforce role-based access.
Send service emails (for example, welcome messages, password reset, notifications) when configured.
Process optional Google Calendar and Drive features you enable.
Monitor security, prevent abuse, and comply with law.

5. How we share information

We do not sell personal information. We may share data only:

With infrastructure providers that host the application (under confidentiality obligations).
With Google when you explicitly connect Google Calendar or Drive.
With email or messaging providers you configure (for example SMTP or WhatsApp APIs).
When required by law or to protect rights, safety, and security.

6. Security

We use industry-standard measures including HTTPS, access controls, rate limiting, and encryption for sensitive credentials (including Google refresh tokens using AES-256-GCM). No method of transmission over the Internet is 100% secure; institutes should use strong passwords and limit admin access.

7. Retention

We retain account and institute data while your subscription or institute account is active. Institutes may request export or deletion subject to our agreement and applicable law. Server logs are retained for a limited period for security. Google tokens are deleted when you disconnect Google integration.

8. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal data. Institute users should contact their institute administrator first; platform enquiries may be sent to us at the email below.

9. Children

Student accounts are created by institutes (schools or coaching centres). Institutes are responsible for obtaining any required parental consent for minors using the platform.

10. International transfers

Data may be processed on servers located in India or other countries where our hosting providers operate, with appropriate safeguards as required by applicable law.

11. Changes to this policy

We may update this Privacy Policy from time to time. The effective date at the top will change when we do. Continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact us

Edmora LMS
Email: support@edmora.in
Website: https://edmora.in