Local-First Architecture & Data Sovereignty

MOD School functions as an autonomous local server executing directly on the institution's Windows 64-bit desktop or laptop terminals. Database state is stored in on-premise encrypted local stores (SQLite / LAN node databases).

Verifiable Parental Consent & 100% Offline Air-Gapped Isolation

Modernisum enforces strict, verifiable parental consent protocols in full compliance with the Digital Personal Data Protection (DPDP) Act 2023 (Section 9), US COPPA, and EU GDPR (Article 8):

• Written & Digital Approval Forms: Schools using Modernisum provide written or digitally signed consent forms to parents detailing the exact operational purposes for which student records are processed.
• Granular Opt-In for Mobile App Access: Student data is accessible via mobile applications only if the parent affirmatively opts in.
• Air-Gapped Offline Protection for Opt-Outs: If a parent declines or opts out of mobile application access, that student's profile remains strictly 100% offline inside the local school desktop server. Zero data packets are routed through cloud tunnels for opted-out students, permanently eliminating remote data exposure or leakage risks.

Data We Centrally Process vs. Data We NEVER Process

To maintain complete legal and technical transparency, our telemetry is strictly circumscribed:

• Limited Operational Telemetry We Process:
• School ID: Unique alphanumeric identifier to route encrypted tunnels
• School Name & Address: Institutional verification and invoicing
• Admin Email & Phone: Primary contact point for license verification and support
• Anonymous Active Seat Count: Aggregated integer count locally computed on desktop for Pay-as-a-Service license billing
• Software Runtime Version: For security updates and compatibility verification

Ephemeral E2EE Cloud Tunneling Architecture

When authorized parents or teachers interact with the mobile application to view real-time notifications or bus tracking, communication is brokered through an end-to-end encrypted (E2EE) cloud tunnel.

The cloud tunnel acts strictly as an ephemeral pipe. Modernisum servers do not cache, inspect, or retain the payloads passing through the tunnel. Data is fetched directly from the school's active desktop server. If the school desktop server is turned off, the mobile app displays offline status. Modernisum operates purely as a technical conduit under Section 79 of the Information Technology Act, 2000.

Google API Services User Data Policy & Limited Use Disclosure

Modernisum's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Modernisum integrates with Google APIs solely to enhance institutional autonomy and disaster recovery:

• Google OAuth 2.0 Identity Authentication: Basic profile information (name, work email) is accessed solely to verify identity. We do not access external contacts, calendars, or private files.
• User-Controlled BYOC Google Drive Backup (drive.file scope): Schools may configure automated midnight database snapshots to their own private Google Drive account. Modernisum utilizes the restricted https://www.googleapis.com/auth/drive.file scope, meaning our software can only access and modify the specific encrypted backup archive files that the application itself creates.
• Google Gemini API Integration (BYO-Key): For document text extraction and OCR parsing, processing is executed using the institution's authorized Google Gemini API credentials. Customer document images or extraction outputs are never used for AI model training.
• No Human Inspection & No Sale of Data: Google user data is never transferred to third parties, never used for advertising, and never inspected by human personnel.

Chrome MV3 Browser Extension (Clerk Co-Pilot) Privacy

Modernisum provides a specialized Manifest V3 (MV3) browser extension to automate student record submissions into government educational portals (such as U-DISE+, RTE, and State Board scholarship systems).

• 100% In-Browser Execution: Form auto-filling and 20–50KB client-side image compression occur entirely within the user's local browser session.
• Zero Credential Harvesting: The extension does not record, log, or transmit portal passwords, student enrollment records, or government portal tokens to external servers.

Global Multi-Jurisdictional Compliance Architecture

Our local-first security architecture is engineered to satisfy the world's most stringent data protection frameworks:

Data Portability, Retention & Erasure Protocols

Institutional clients and individual users hold complete ownership of their data:

• 1-Click Local Data Export: School administrators can export the complete institutional dataset (in standard open formats: CSV, JSON, and raw SQLite database dumps) with a single click at any time.
• Telemetry Erasure on Demand: Upon written request to privacy@modernisum.com, all central administrative identifiers are permanently purged from our central registry within 30 calendar days, subject to mandatory tax retention regulations.

Enterprise Entity, Grievance Officer & Contact

In compliance with the Information Technology Act, 2000 and the DPDP Act 2023, the details of our registered enterprise and official Grievance Desk are provided below:

Modernisum Technologies • Registered MSME: UDYAM-UP-56-0049848 • Near Water Tank, Dayalpur, Parikshitgarh, Meerut, Uttar Pradesh, 250406, India.

Compliance Officer Email: compliance@modernisum.com • Direct Phone: +91 9368671007

Community Feedback, Honest Unfiltered Reviews & Direct Support Invariant

Modernisum Technologies enforces a strict Public Transparency Policy across all community discussion streams, product reviews, and bug report channels:

• Zero Review Modification or Priority Suppression: We never edit, curate, delete, or artificially manipulate user comments, feedback, or star ratings based on commercial interest. Negative feedback and critical technical bug reports are published openly with original timestamps.
• Unrestricted User Sorting & Inspection: Users and prospective buyers retain complete autonomy to sort community entries by 'Critical Issues First' (Lowest to Highest Rating), 'Most Recent', or 'Most Upvoted' with zero algorithmic suppression.
• Dedicated Institutional Technical Support & Direct Resolution: When an educational institution, school owner, or faculty member encounters an issue or requires software assistance, Modernisum engineers act as dedicated helpers with public resolution threads and accelerated patch deployments.
• Authentic Ground-Level R&D: User reviews, feature suggestions, and open complaints serve as our direct roadmap inputs. We prioritize fixing real customer problems over commercial marketing hype.