Privacy policy

Data a school puts into Vidyanexa (about its students, parents and staff) belongs to that school. The school is the Data Fiduciary and decides why and how the data is used. Vidyanexa acts as the school's Data Processor and handles the data only on the school's instructions.

Data you give us directly — for example when you sign up for a trial, fill in our contact form or create an admin account — is handled by Vidyanexa as Data Fiduciary.

• Account details: name, email, phone number, role and school.
• School records entered by a school: student, parent and staff information, attendance, fees, exams and similar records, depending on the modules the school uses.
• Enquiries: what you send us through the contact or quote forms.
• Security logs: sign-in times, IP addresses and an audit trail of changes, used to keep accounts safe.

Schools use Vidyanexa to manage records about students, many of whom are under 18. Under the DPDP Act, the school is responsible for obtaining verifiable consent from a parent or guardian before processing a child's data. Vidyanexa processes children's data only to provide the school's services.

We do not use children's data for advertising, do not track children's behaviour for profiling, and do not sell personal data to anyone.

• To run the platform and the parent, staff and driver apps for your school.
• To keep accounts secure, detect misuse and investigate problems.
• To respond to enquiries and provide support.
• To send service messages such as password resets and trial reminders.

• Each school's records are isolated inside the database, so one school cannot access another's data.
• Access is limited by role; every sign-in and change is recorded in an audit log the school can review.
• Passwords are stored only as secure hashes. Sign-in sessions can be ended from the account at any time.
• Data is sent over encrypted connections and backed up daily.

We share personal data only with service providers that help us run Vidyanexa, under contracts that require them to protect it:

• Cloud hosting and backup providers.
• SMS, email, WhatsApp and payment providers, only when a school switches those features on.

We may also disclose data when Indian law requires it.

We use only essential cookies: secure sign-in cookies that keep you logged in, and a setting that remembers your preferred theme. We do not use advertising or tracking cookies.

School records are kept for as long as the school uses Vidyanexa. When a school leaves, we provide an export on request and then delete its data within 90 days, except where the law requires us to keep it longer. Enquiries are kept for up to two years.

Under the DPDP Act you can ask to access, correct or erase your personal data, withdraw consent and nominate someone to act for you.

If your data was entered by your school, please contact the school first; we will help them respond. For data you gave us directly, write to us through our contact page.

Questions or complaints about this policy can be sent to our Grievance Officer through the contact page. We will respond within 30 days. If you are not satisfied, you may approach the Data Protection Board of India.

If we make significant changes, we will tell school admins by email and in the app before they take effect.