Data Processing Agreement (DPA)
Last updated 14 August 2026
This Data Processing Agreement (“DPA”) forms an integral part of the Terms of Service between SoftwareWale (“Processor”, “we”, “us”) and the educational institution or school subscribing to the Service (“Fiduciary”, “School”, “Customer”).
1. Purpose and scope
This DPA governs the processing of personal data provided by the School to SoftwareWale in connection with the generation, scheduling, and publication of school timetables.
2. Roles and responsibilities
- School as Data Fiduciary: The School determines the purposes and means of processing school staff data (teacher names, workload limits, subject assignments) entered into the Service. The School warrants that it has lawful authority and staff consent where applicable to enter this data.
- SoftwareWale as Data Processor: SoftwareWale processes personal data solely on documented instructions from the School, as necessary to generate timetables, enforce constraints, and provide the Service.
3. Anti-PII & Student Privacy Protection
SoftwareWale Timetable Planner is built with strict privacy-by-design principles:
- Zero Student Data: The Service requires, collects, and stores no student personal data (no student names, marks, parent contacts, or biometric records).
- Anonymized Integer Graph Solver: The mathematical constraint solver receives only a dense integer graph (e.g. Class ID, Subject ID, Slot ID). No teacher names, school names, or personal identities are transmitted to the solving engine.
4. Data security & hosting location
SoftwareWale maintains robust technical and organizational security measures to protect institution data:
- Data Localization: All school databases and operational data are hosted within India in the ap-south-1 (Mumbai, India) AWS and Supabase data centers.
- Row-Level Security (RLS): Every database table enforces PostgreSQL Row-Level Security scoped to the authenticated institution owner. No institution can access or view another institution’s data.
- Encryption: Data is encrypted in transit using TLS 1.3 and encrypted at rest using industry-standard AES-256 encryption.
5. Sub-processors
SoftwareWale engages trusted infrastructure sub-processors subject to equivalent data protection obligations:
| Sub-processor | Purpose | Location |
|---|---|---|
| Supabase / AWS | PostgreSQL database & storage | Mumbai, India (ap-south-1) |
| Amazon Web Services (AWS) | Serverless CP-SAT solver execution | Mumbai, India (ap-south-1) |
| Vercel Inc. | Application hosting and edge compute | Global CDN with Mumbai edge |
| Razorpay Software Private Limited | Subscription billing and payments | India |
6. Data retention and deletion
Upon cancellation or termination of the School’s subscription, or upon receipt of a written deletion request from the school administrator, SoftwareWale permanently deletes or anonymizes all institution data, timetable versions, and teacher records from the live database.
7. Inquiries
Schools requiring an executed DPA or custom institutional addendum may contact our Data Protection team at hello@softwarewale.in.