Legal Document

Privacy Policy

Your privacy matters to us. This policy explains what data VidhyaPro collects, how we use and protect it, and the choices you have as an institute, teacher, or student.

Last updated: June 2025
Summary: This Privacy Policy explains how VidhyaPro ("we," "us," or "our") collects, uses, stores, and protects information when institutes, administrators, teachers, and students use our coaching management platform. It should be read alongside our Terms & Conditions.
1
Introduction

VidhyaPro is a cloud-based coaching institute management platform. This policy applies to all users of the Platform — institute owners, administrators, teachers, and students — and covers data collected through our website, web application, and mobile application.

By using the Platform, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use the Platform.


2
Information We Collect

Account Information: Name, email address, phone number, password (stored in encrypted/hashed form), and institute/branch details provided during registration.

Institute-Entered Data: Information administrators and teachers enter to operate the Platform, including:

  • Student profiles (name, contact details, guardian information, date of birth, photos)
  • Attendance records
  • Fee, invoice, and payment records
  • Exam results and academic performance data
  • Batch, class, and activity schedules
  • Assignments and submitted work

Payment Information: Subscription payments are processed by Razorpay. We do not store full card or bank account numbers on our servers — Razorpay handles and secures this data in accordance with PCI-DSS standards.

Technical Information: IP address, browser type, device information, log data, and usage analytics collected automatically when you access the Platform.

Communications: Messages you send us through the contact form, email, or support channels.


3
How We Use Your Data

We use collected information to:

  • Provide, operate, and maintain the Platform and its features
  • Create and manage user accounts and authenticate logins
  • Process subscription payments and send billing notifications
  • Send service-related communications (attendance alerts, fee reminders, exam results, assignment notices)
  • Respond to support requests and enquiries
  • Monitor, analyse, and improve Platform performance and features
  • Detect, prevent, and address technical issues, fraud, or abuse
  • Comply with legal obligations
We do not use student or institute data to train third-party AI models, and we do not sell personal data to advertisers or data brokers.


5
Data Sharing & Third Parties

We do not sell your personal data. We share data only in the following circumstances:

  • Service providers: Trusted vendors who help us operate the Platform, such as hosting providers, Razorpay (payment processing), and email/SMS delivery services — bound by confidentiality obligations
  • Within your institute: Data is visible to authorised users of the same institute/branch according to their role-based permissions (e.g. a teacher may view students in their assigned batches)
  • Legal requirements: When required to comply with a legal obligation, court order, or governmental request
  • Business transfers: In connection with a merger, acquisition, or sale of assets, with continued protection under this policy
  • With your consent: Any other sharing will only occur with your explicit consent
Important: Student and staff data entered by one institute is never accessible to another institute using the Platform. Branch and institute data are strictly isolated.

6
Cookies & Tracking Technologies

We use cookies and similar technologies to keep you logged in, remember your preferences, and understand how the Platform is used.

  • Essential cookies: Required for login sessions and core functionality — cannot be disabled
  • Preference cookies: Remember settings such as selected branch or theme
  • Analytics cookies: Help us understand usage patterns to improve the Platform

You can control cookies through your browser settings; disabling essential cookies may prevent parts of the Platform from working correctly.


7
Data Security

We implement appropriate technical and organisational measures to protect data against unauthorised access, alteration, disclosure, or destruction, including:

  • Encrypted data transmission (HTTPS/TLS)
  • Hashed password storage
  • Role-based access controls and branch-level data isolation
  • Regular security reviews and access logging

While we take security seriously, no method of transmission or storage is 100% secure. In the event of a data breach affecting your personal data, we will notify affected account holders and relevant authorities as required by law.


8
Data Retention

We retain personal data for as long as your account is active or as needed to provide the Platform's services.

  • Institute data entered during a free trial is retained for 30 days after trial expiry if no plan is purchased
  • Upon subscription cancellation or account termination, data remains available for export for 30 days before permanent deletion
  • Billing records are retained as required by applicable tax and accounting laws
  • We may retain limited data beyond these periods where necessary to comply with legal obligations or resolve disputes

9
Your Rights

Subject to applicable law, you have the right to:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate or incomplete data
  • Deletion: Request deletion of your data, subject to legal retention requirements
  • Export: Export your institute's data at any time from your admin settings
  • Withdraw consent: Where processing is based on consent, withdraw it at any time
  • Object/Restrict: Object to or request restriction of certain processing activities
Students and staff should direct data requests to their institute administrator first, as the administrator controls the data entered on their behalf. Administrators can contact us directly using the details below.

10
Children's Data

VidhyaPro is designed for use by coaching institutes, which may include data about students under the age of 18. Such data is entered and managed by the institute administrator, who is responsible for obtaining appropriate parental or guardian consent as required under applicable law, including India's Digital Personal Data Protection Act, 2023.

We do not knowingly allow individuals under 18 to independently create an administrator account. Student and teacher sub-accounts are created and managed by the institute administrator.


11
International Data Transfers

Your data is primarily hosted and processed on servers located in India. Where we use service providers located outside India (e.g. for email delivery or infrastructure), we take reasonable steps to ensure they provide an adequate level of data protection consistent with this policy.


12
Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date above and, for significant changes, notify the primary account holder by email.

Your continued use of the Platform after changes take effect constitutes acceptance of the revised policy.


13
Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please reach out to us:

Still have questions?

Our team is happy to explain how VidhyaPro collects, stores, and protects your institute's data.