Privacy Policy

This policy applies to:

School administrators, principals, and staff who use the ToGather LMS platform directly

Students and parents whose data is managed within the platform by their school

Visitors to our website (togatherlms.com and related subdomains)

If you are a student or parent and have questions about your data, we recommend contacting your school first. Under our data processing agreements, schools are responsible for managing their own users' data rights.

We collect data in two ways: data that your school inputs into the platform, and data we collect automatically.

Data your school provides:

Student records (name, date of birth, grade, attendance, academic performance, health notes where applicable)

Parent and guardian contact information

Staff profiles, payroll information, and scheduling data

Admissions applications and enrolment history

Fee records and payment history

Helpdesk tickets and communications

Data we collect automatically:

Browser type, device type, and operating system

IP address and general location (city/country level)

Pages visited and features used within the platform

Login timestamps and session duration

We do not collect biometric data, sensitive financial credentials, or any data beyond what is needed to run the platform.

We use the data collected to:

Deliver and operate the ToGather LMS platform

Authenticate users and maintain account security

Generate reports, dashboards, and AI-powered briefings for school administrators

Send transactional emails (login alerts, password resets, notifications you opt into)

Diagnose bugs, improve reliability, and add features

Comply with legal obligations

We do not sell your data to third parties. We do not use student data for advertising. We do not share data with anyone except the sub-processors listed below or as required by law.

ToGather LMS stores data on cloud infrastructure based in India, with backup and redundancy provisions in place. Schools that have specific data residency requirements should contact us before signing up so we can confirm whether we can meet those requirements.

All data is encrypted at rest (AES-256) and in transit (TLS 1.2 or higher). Access to production data is restricted to authorised personnel only and is logged for audit purposes.

To deliver the platform, we rely on a small number of third-party services. These sub-processors are contractually bound to handle data securely and only for the purposes we define.

Current sub-processors include:

**Cloud infrastructure provider** for hosting and storage

**Email delivery service** for transactional notifications

**Error monitoring service** to detect and fix bugs

**Payment gateway** for processing school subscription billing (we do not store card numbers)

We review sub-processors regularly. If we add a new sub-processor that materially affects your data, we will notify you in advance.

We retain your data for as long as your school's subscription is active. After a subscription ends:

We keep data for 60 days so the school can export what they need

After 60 days, data is permanently deleted from our systems and backups

Schools can request early deletion at any time by contacting contact@togatherlms.com. Certain records (billing history, legal correspondence) may be retained longer as required by applicable law.

Depending on where you are located, you may have rights under applicable data protection law, including:

The right to access a copy of your personal data

The right to correct inaccurate data

The right to request deletion of your data

The right to object to certain types of processing

The right to data portability

For students and parents, these rights are typically exercised through the school. For platform users (administrators, staff), you can contact us directly at contact@togatherlms.com. We respond to all verified requests within 30 days.

Our website uses cookies for functionality (keeping you logged in, remembering preferences) and basic analytics (understanding which pages are visited). We do not use advertising cookies or third-party tracking networks.

You can disable cookies in your browser settings, though some parts of the platform may not work correctly without them. We do not use cookies to build advertising profiles.

ToGather LMS is a school management platform. Student data, including data belonging to children under 13 or 16 depending on jurisdiction, is managed by schools as the data controller. Schools are responsible for obtaining appropriate consent from parents or guardians where required under applicable law (COPPA, GDPR, or local regulations).

We do not knowingly collect personal data directly from children. If you believe a child's data has been collected without proper authorisation, please contact contact@togatherlms.com.

We take security seriously. Key measures include:

Encryption at rest and in transit for all data

Role-based access controls within the platform

Regular security reviews and vulnerability assessments

Incident response procedures with defined notification timelines

Two-factor authentication available for all admin accounts

No system is completely immune to threats. If we ever experience a data breach that affects your school, we will notify you within 72 hours of becoming aware of it and provide full details of what happened and what we are doing.

We update this policy from time to time as the product and applicable law evolve. When we make changes, we update the "Last updated" date at the top of this page. For material changes, we will notify schools by email at least 14 days before the change takes effect.

Continued use of the platform after the effective date of a change constitutes acceptance of the updated policy.

For privacy-related questions or to exercise your rights, contact us at:

ToGather LMS

Hyderabad, India

Email: contact@togatherlms.com

For general support or billing questions, use contact@togatherlms.com or visit our contact page.