Privacy Policy

Last updated: 16 May 2026

This Privacy Policy explains how Dorbis ("Dorbis", "we", "us" or "our") collects, uses and protects information when you visit www.dorbis.org or use the Dorbis Mobile App and related cloud services (together, the "Services"). Dorbis is a school management platform used by schools, teachers, students and parents.

1. Who we are

Dorbis operates the Dorbis school management platform and the Dorbis Mobile App. Our offices are:

• Head Office: Dorbis, 77 Camden Street, Dublin, Ireland
• India Office: Plot No 49 & 50, 100 Feet Road, Auto Nagar, Vijayawada, AP 520007, India
• UK Office: 32 Hartley Road, Nottingham, United Kingdom

For any privacy-related question or request, contact us at talk2sales@dorbis.org.

2. Information we collect

We collect only the information needed to provide the Services:

• School account information: school name, address, administrator name and contact details.
• User profile information for staff, students and parents: name, role, class/section, parent contact number and email. Where required by the school, we store student roll number and date of birth.
• Operational data created in the Services: attendance records, assessment marks, timetable entries, fee transactions, messages, notifications, AI-generated content and reports.
• Payment information: when fees are collected via UPI or other payment gateways, payment is processed by the gateway provider. Dorbis stores the transaction reference and status, not your full bank or card details.
• Device and log data: IP address, device type, operating system, app version, crash logs and timestamps, used for security and to keep the Services reliable.
• Cookies and similar technologies: the website uses essential cookies for session management. We do not use third-party advertising cookies.

The Dorbis Mobile App does not collect biometric data, location tracking in the background, or content from a child's personal photo library.

3. How we use information

We use the information to:

• provide attendance, fees, assessments, timetabling, messaging and reporting features;
• send notifications to parents and students (including late-arrival alerts and fee reminders);
• generate AI-assisted lesson content and AI reports requested by the school;
• secure the Services, prevent abuse and meet our legal obligations;
• provide customer support to school administrators and respond to your queries.

We do not sell personal information. We do not use student data to train third-party AI models.

4. Legal basis (EU/UK users — GDPR)

For users in the European Union, the United Kingdom and the European Economic Area, we rely on the following lawful bases under the EU/UK General Data Protection Regulation:

• Contract: to provide the Services to the school that has engaged Dorbis.
• Legal obligation: to meet record-keeping, tax and safeguarding obligations.
• Legitimate interests: to keep the Services secure, prevent fraud and improve reliability.
• Consent: where required, for example for optional communications.

Where Dorbis processes personal data on behalf of a school, the school is the data controller and Dorbis acts as the data processor under Article 28 GDPR. We process personal data only on documented instructions from the school.

5. Indian users — Digital Personal Data Protection Act, 2023

For users in India, Dorbis processes personal data in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and applicable rules. Where Dorbis processes personal data on behalf of a school, the school is the Data Fiduciary and Dorbis is the Data Processor.

• We process children's data (under 18) only on the basis of verifiable parental consent obtained by the school.
• We do not undertake tracking, behavioural monitoring or targeted advertising directed at children.
• You have the right to access, correct, update or erase your personal data, and to nominate another individual to exercise these rights in case of incapacity. Requests can be sent to talk2sales@dorbis.org.

6. Sharing your information

We share personal data only when necessary:

• with the school that owns the account and its authorised staff;
• with payment gateway providers to process UPI and card payments;
• with cloud infrastructure providers (such as Microsoft Azure) that host the Services under strict contractual safeguards;
• with SMS and email delivery providers to send notifications;
• where required by law, court order or to protect the safety of users.

We do not share information for third-party advertising. We do not sell personal data.

7. International transfers

Dorbis is operated from offices in Ireland, India and the United Kingdom. Personal data may be transferred between these locations and to our cloud providers. For transfers out of the EEA/UK we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, and adequate technical and organisational safeguards.

8. Data retention

We retain personal data for as long as the school's account is active and for a reasonable period after, to meet legal, accounting and audit obligations. When a school ends its subscription, we delete or anonymise personal data within 90 days, unless a longer retention period is required by law.

9. Your rights

Depending on where you live, you have rights to:

• access the personal data we hold about you;
• correct inaccurate or incomplete data;
• request deletion of your data;
• restrict or object to certain processing;
• data portability (receive a copy of your data in a structured format);
• withdraw consent at any time, where processing is based on consent;
• lodge a complaint with your local data protection authority — for example the Data Protection Commission (Ireland), the Information Commissioner's Office (UK) or the Data Protection Board of India.

If you are a student or parent, please first contact your school, which is the primary controller of your data. Where Dorbis is the controller (for example, for visitors to this website), you can contact us directly.

10. Security

Dorbis is 100% cloud based and uses encryption in transit (TLS) and at rest, role-based access controls, regular backups, vulnerability monitoring and a documented incident response process. Despite these measures, no system is completely secure. In the event of a personal data breach we will notify the affected schools and regulators in line with applicable law.

11. Children's privacy

Dorbis is designed for use in schools and includes features that allow students to message each other in a moderated, safe environment. We do not target children with advertising, do not profile students, and do not allow public access to student profiles. The student messaging feature is limited to verified members of the same school, with school-controlled moderation.

12. Mobile app permissions

The Dorbis Mobile App may request permissions such as notifications, camera (for marking attendance, scanning fee receipts or uploading homework) and storage. Each permission is used only for the stated feature and can be revoked at any time from your device settings.

13. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect the latest version. Significant changes will be communicated through the Dorbis Mobile App or by email to school administrators.

14. Contact us

For privacy questions, complaints or requests to exercise your rights, please contact:

Dorbis — Privacy
Email: talk2sales@dorbis.org
India Office: Plot No 49 & 50, 100 Feet Road, Auto Nagar, Vijayawada, AP 520007, India