Privacy Policy

We collect the following categories of personal data:

• Identity & Contact: Full name, email address, phone number, and role (institute owner, teacher, student, or parent).
• Academic Records: Batch enrolments, attendance logs, assignment submissions, test scores, report-card data and timetables created by the institute.
• Financial Records: Fee amounts, payment receipts and payment status. Online payments are processed by Razorpay; we do not store card numbers or bank account details on our servers.
• Institute Assets: Logos, study materials, PDFs and other files uploaded by the institute.
• Technical Data: IP address, browser type, sign-in timestamps and audit logs used to maintain security and diagnose issues.

Personal data is used exclusively to deliver the PadhaiOS service:

• Creating and managing your account and institute profile.
• Generating attendance records, report cards, fee receipts and other institute documents.
• Processing fee payments via Razorpay and sending payment confirmations.
• Sending transactional notifications (e.g. fee reminders, assignment alerts) on behalf of the institute.
• Maintaining platform security and preventing unauthorised access.
• Complying with legal obligations under Indian law.

We do not sell, rent or trade your personal data to any third party.

All data is stored in a PostgreSQL database managed via Prisma ORM, hosted on infrastructure with encryption in transit (TLS/HTTPS) and at rest. Passwords are stored as one-way scrypt hashes and are never stored in plaintext. Session tokens are signed JWTs with strong secrets and short expiry windows.

Access to the database is restricted to authenticated application services and authorised personnel only. We apply role-based access controls so that each institute's data is logically isolated from every other institute's.

No security system is perfect. We work continuously to identify and address vulnerabilities and to limit the impact of any incident.

We share data only in the following limited circumstances:

• Payment processor (Razorpay): Fee payment data is processed under Razorpay's own privacy policy.
• Cloud infrastructure providers: Our hosting providers process data on our behalf under data-processing agreements.
• Legal obligations: We may disclose data if required by a court order or applicable Indian law.

Student accounts are created and administered by the institute the student belongs to. We rely on the institute to have obtained any consents required for minors. Parents or guardians who wish to access, correct or delete a child's records should first contact their institute. For further assistance, contact us at support@padhaios.com.

Depending on applicable law, you may have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion of your data, and object to or restrict certain processing.

To exercise any of these rights, contact us at support@padhaios.com. We will respond within a reasonable period as required by applicable law.

We retain personal data for as long as an institute account is active. When an account is closed, we delete or anonymise the associated personal data within 90 days unless a longer retention period is required by law.

We use session cookies strictly necessary to keep you signed in. We do not use third-party advertising or tracking cookies.

We may update this policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Continued use of the platform after a change constitutes acceptance of the revised policy.

For any questions or concerns about this privacy policy or your personal data, please contact: