Legal
Last updated: March 2026
ToGather LMS ("ToGather", "we", "us", or "our") provides a school management platform for K-12 schools. This Privacy Policy explains how we collect, use, store, and share information in connection with our website and platform (the "Service").
For school customer data (including student, parent, and staff records entered by a school), the school is the data controller and we act as a data processor (or equivalent under applicable law). The school decides what data to collect and is responsible for having a lawful basis to do so. For our own website visitors, marketing contacts, and account administration data, we act as an independent controller.
If you have questions, contact us at contact@togatherlms.com.
This policy applies to:
School administrators, staff, and other users authorised by a customer school
Individuals whose information a school stores in the Service (such as students, parents, and staff)
Visitors to our website and people who contact us
If you are a student or parent, please contact your school first about access, correction, or deletion requests. We generally process those requests through the school as the data controller.
Information schools and users provide
Depending on how a school configures and uses the Service, this may include:
Student and academic records
Parent and guardian contact details
Staff profiles and related operational information
Admissions, enrolment, attendance, fee, and transport information
Messages, tickets, files, and other content uploaded to the Service
Account registration and billing contact details
Information collected automatically
When you use the website or Service, we may collect:
Device, browser, and operating system information
IP address and approximate location
Log data such as pages viewed, features used, and timestamps
Cookies and similar technologies as described below
We do not intentionally collect payment card numbers for school fee collection through our own systems when payments are processed by a third-party payment provider. Card data, if any, is handled by that provider under its own terms.
We use information to:
Provide, operate, maintain, and improve the Service
Authenticate users and help protect accounts
Provide support, communicate about the Service, and send transactional notices
Generate reports, dashboards, and optional AI-assisted insights for authorised school users
Monitor performance, prevent abuse, and troubleshoot issues
Process subscriptions and related billing
Comply with law and enforce our terms
We do not sell personal information. We do not use student education records for third-party advertising.
Where data protection laws require a legal basis, we rely on bases such as performance of a contract, legitimate interests (for example securing and improving the Service), consent where required, and legal obligations.
Schools are responsible for:
Providing any required notices to students, parents, and staff
Obtaining any required consents or other lawful bases
Configuring roles and access appropriately
Ensuring the information they upload is accurate and lawfully collected
We process school customer data according to our agreement with the school and the school's instructions, except where law requires otherwise.
Depending on the Service features in use, we may use third parties in categories such as:
Cloud hosting and storage providers
Email and communications providers
Error monitoring and analytics providers
Payment and billing providers
Customer support tooling
We do not control, and are not responsible for, third-party services that a school chooses to connect or use independently of ToGather.
We store and process information using cloud infrastructure and service providers, which may include facilities in India and other locations where we or our providers operate.
If your school has specific data residency or transfer requirements, raise them before or during onboarding. We will confirm in writing what we can support. Absent a separate written commitment, data may be processed in the locations used to provide the Service.
We use commercially reasonable administrative, technical, and organisational measures designed to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
We retain information for as long as needed to provide the Service and for legitimate business purposes, including billing, security, dispute resolution, and legal compliance.
After a subscription ends or an account is closed, we generally make school customer data unavailable and delete or anonymise it within a commercially reasonable period, typically within 60 days, except where we must retain information longer (for example billing records, logs needed for security, or legal holds). Residual copies may remain in backups for a limited period until those backups cycle out in the ordinary course.
Depending on your location and role, you may have rights to request access, correction, deletion, restriction, objection, or portability of personal information, and to withdraw consent where processing is based on consent.
Students, parents, and school staff should generally direct requests to their school
We will reasonably assist schools in responding to verified data subject requests relating to data we process for them
Website visitors and direct contacts may email contact@togatherlms.com
We may need to verify identity and may decline or limit requests where permitted or required by law (for example where fulfilling a request would conflict with our obligations to a customer school, or where an exemption applies).
The Service is used by schools to manage school operations and may include information about minors. Schools, as data controllers, are responsible for complying with laws applicable to children's data (including any parental consent or notice requirements).
We do not knowingly collect personal information directly from children for our own independent purposes. If you believe a child has provided us personal information improperly, contact contact@togatherlms.com and we will take appropriate steps.
Some features may use automated or AI-assisted processing to generate summaries, insights, or suggestions for authorised users. These outputs are provided for convenience only and may be incomplete or inaccurate. Schools remain responsible for reviewing outputs before relying on them for decisions about students, staff, or operations.
The Service may be accessed from outside India. By using the Service, you understand that information may be processed in India and other countries that may have different data protection laws from your country of residence. Where required, we use appropriate transfer mechanisms or contractual protections.
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Where changes are material, we may provide additional notice (for example by email or in-product notice). Continued use of the Service after an update becomes effective constitutes acceptance of the revised policy, except where applicable law requires a different approach.
For privacy-related questions, contact:
ToGather LMS
Hyderabad, India
Email: contact@togatherlms.com
Questions about this policy? Contact us.
