Privacy
Privacy Policy
గోప్యతా విధానం
In short
- A school or college uses EduPlix.Ai to run its office. The records belong to that institution, and we look after them on its behalf.
- We use the data only to provide the software. We do not sell it, show advertising, or use it to profile anyone.
- Each institution's data is kept apart from every other's by the database itself.
- We store only the last four digits of an Aadhaar number, never the full number.
- You can ask to see, correct or delete your data — see Your rights.
Who is responsible
EduPlix.Ai ("we", "us") provides school-management software to schools, junior colleges and degree colleges ("institutions").
Under India's Digital Personal Data Protection Act, 2023, each institution is the Data Fiduciary for the records of its students, parents and staff: it decides what is collected and why. We act as its Data Processor and handle that data only on its instructions and to provide the service.
For the data we collect for our own purposes — the contact details of the people who sign up an institution, and enquiries sent to us — we are the Data Fiduciary.
If you are a parent, student or staff member, questions about why your institution holds a record are best asked of the institution first. We will help it answer, and you can always contact us directly.
What we hold
What is held depends on what an institution chooses to record. It can include:
| About | Examples |
|---|---|
| Students | Name, admission number, class and section, date of birth, gender, photograph, parents' names and phone numbers, address, blood group, mother tongue, previous school; where the institution records them, religion and caste category (often required for government returns); the last four digits of Aadhaar; documents the institution uploads, such as a birth or transfer certificate. |
| School records | Attendance, marks and report cards, homework, timetable, fee dues, receipts and payments, concessions, library issues, transport route and stop, hostel room. |
| Parents | Name, mobile number, relationship to the student, and the messages the institution sends them. |
| Staff | Name, mobile number, role, subjects and classes taught; for staff the institution pays through the software, salary and the last four digits of a bank account. |
| People who sign in | Mobile number, a password stored only as a one-way hash, the role granted, and sign-in sessions. |
| Activity | An audit log of important changes — who changed a fee, deleted a receipt or edited marks, and when — kept so the institution can check its own records. |
| Technical | IP address, device and browser type, and request times, in server logs used to keep the service running and secure. |
Institutions enter this data themselves, or upload it from a spreadsheet. We do not buy data or collect it from other sources.
How it is used
- To provide the software: take attendance, collect and receipt fees, publish results, send the messages the institution asks us to send, and show parents their own child's information.
- To keep it secure: sign-in, stopping misuse, and investigating problems.
- To support the institution when it asks for help.
- To bill the institution for its subscription.
- To meet legal obligations, such as tax records for our invoices.
We do not use personal data for advertising, sell it, or use students' data to train artificial-intelligence models.
Children
Most students are under 18. Their data is entered by their institution, which is responsible for obtaining a parent's or guardian's verifiable consent where the law requires it. We process children's data only to provide the service to that institution, and never for tracking, behavioural monitoring or targeted advertising.
A student account, where an institution creates one, shows only that student's own records. A parent account shows only that parent's own children.
Where it is stored
The database and every uploaded file are stored in Mumbai, India. The application servers that handle each request currently run in Singapore, so data passes through Singapore while it is being processed; it is not kept there. Data travels encrypted between them.
Security
- Every connection is encrypted with HTTPS.
- Each institution's records are separated by the database itself (row-level security), not only by the application, so a mistake in our code cannot show one institution another's students.
- Passwords are never stored — only a one-way hash that cannot be turned back into the password. Sign-in sessions expire and are renewed.
- Refunds, deletions and bulk exports need a separate confirmation and are always recorded in the audit log.
- Access to production systems is limited to the few people who need it to run the service.
No system is perfectly secure. If a breach affects personal data, we will tell the affected institutions and, as the law requires, the Data Protection Board of India, without undue delay.
How long we keep it
We keep an institution's data for as long as it uses EduPlix.Ai. If a subscription lapses, the data is kept — readable and exportable — so that nothing is lost while the institution decides. When an institution stops using the service and asks us to, we delete its data, except for what we must keep by law, such as our own invoices.
Server logs are kept for a short period for security and are then deleted.
Your rights
Under the Digital Personal Data Protection Act, 2023, you can ask:
- To see the personal data held about you, and who it has been shared with.
- To correct data that is wrong or incomplete, or bring it up to date.
- To delete data that is no longer needed for the purpose it was given.
- To withdraw consent you have given.
- To nominate someone to act for you if you die or cannot act yourself.
- To complain — to us first, and then, if you are not satisfied, to the Data Protection Board of India.
For student, parent or staff records, the quickest route is your school or college office; they can correct most records directly. You can also contact us. We will confirm who you are, involve the institution where the record is its own, and reply within 30 days.
Deleting an account
To delete your EduPlix account and the personal data linked to it, from the website or from the Android or iOS app:
- Email hello@eduplix.ai with the subject "Delete my EduPlix account", or send a WhatsApp message or call +91 99884 83333.
- Give your name, the mobile number you sign in with, and your school or college.
- We confirm the request with you, and delete the account within 30 days.
Deleting a sign-in account removes your ability to sign in and the personal data held only for that account. Records your institution is legally required to keep — such as fee receipts already issued or examination results — stay with the institution, which remains responsible for them.
The Android and iOS apps
The EduPlix apps show the same information as the website, and follow this policy. The app keeps your sign-in on your phone so you stay signed in; signing out removes it. The apps ask for no phone permissions beyond internet access — no location, contacts, camera or microphone — and contain no advertising or third-party tracking.
This website
eduplix.ai sets no cookies and uses no analytics or advertising trackers. Its fonts are loaded from Google Fonts, which means your browser's IP address is sent to Google when the page loads. If you contact us through WhatsApp or by phone, we use your details only to reply to you.
Changes to this policy
If we change this policy, we will update the date at the top of this page. If a change materially affects how personal data is handled, we will tell institutions in advance.
Contact and grievances
For any question about privacy, a request about your data, or a complaint, contact our Grievance Officer:
EduPlix.Ai — Grievance Officer
Email: hello@eduplix.ai
WhatsApp and phone: +91 99884 83333
Web: https://eduplix.ai
We acknowledge every request and reply within 30 days.