Privacy Policy
At Eduvontra, your privacy is foundational — not an afterthought. This policy explains exactly how we collect, use, protect, and manage your information when you use our platform.
Information We Collect
To deliver a reliable, personalised school management experience, Eduvontra collects several categories of data. We are intentional about what we collect — gathering only what is necessary to operate and improve the platform.
Categories of data
- Personal Information — Name, email address, phone number, and role (administrator, teacher, parent, or student) provided during account registration.
- Account Information — Login credentials, institutional details, profile settings, and role-based access configurations.
- Usage Data — Pages visited, features used, session duration, and in-app actions — used to improve product experience.
- Device & Technical Information — IP address, browser type, operating system, and device identifiers collected automatically when you access the platform.
- Academic & Administrative Records — Student grades, attendance logs, fee records, and timetable data entered by authorised school staff.
How We Use Your Information
The data we collect serves specific, documented purposes. We do not use your information for any purpose beyond what is described here without your explicit consent.
- Service Delivery — To provide, operate, and maintain all platform features available to your institution.
- Product Improvement — To analyse usage patterns, fix bugs, and develop new features that better serve schools.
- Communication — To send service-related notifications, security alerts, and product updates.
- Transaction Processing — To facilitate and record subscription and fee-related transactions securely.
- Legal Obligations — To comply with applicable laws, respond to lawful requests, and enforce our Terms of Service.
- Support & Troubleshooting — To diagnose technical issues and provide timely assistance to your team.
Data Storage & Security
All data is stored on secure, enterprise-grade cloud infrastructure with physical and logical access controls. We implement multiple layers of security to protect your information.
All data in transit and at rest is encrypted using AES-256 and TLS 1.3 protocols.
Daily automated backups with point-in-time recovery, retained for 30 days.
Granular access controls ensure users see only what their role permits.
Continuous security monitoring with automated intrusion detection and alerting.
While we implement best-practice safeguards, no system is completely impenetrable. We recommend that users maintain strong, unique passwords and enable two-factor authentication where available.
Cookies & Tracking Technologies
Eduvontra uses cookies and similar technologies to maintain sessions, understand usage patterns, and deliver a better experience. You retain control over non-essential cookies at any time.
Types of cookies we use
- Strictly Necessary — Required for core platform functionality, authentication, and security. Cannot be disabled.
- Functional — Remember your preferences (language, dashboard layout) to personalise your experience.
- Analytics — Collect anonymised usage statistics to help us understand how the platform is used and where to improve.
- Performance — Monitor platform speed and reliability to maintain our 99.9% uptime SLA.
You can manage cookie preferences via your browser settings or through the cookie preferences panel accessible in your account. Disabling certain cookies may affect platform functionality.
Your Rights
Subject to applicable data protection law (including GDPR and India's DPDP Act), you have the following rights regarding your personal data. To exercise any of these rights, contact us at privacy@Eduvontra.io.
- Right of Access — Request a copy of all personal data we hold about you.
- Right to Rectification — Request correction of inaccurate or incomplete personal data.
- Right to Erasure — Request deletion of your personal data, subject to our legal retention obligations.
- Right to Data Portability — Receive your data in a structured, machine-readable format.
- Right to Object — Object to processing based on legitimate interests or for direct marketing purposes.
- Right to Opt-Out — Unsubscribe from marketing communications at any time via the link in any email.
We will respond to all verified requests within 30 days in accordance with applicable law.
Third-Party Services
Eduvontra integrates with a carefully vetted set of third-party services to deliver a complete platform experience. Each provider is bound by a Data Processing Agreement (DPA) and maintains compliance with applicable privacy regulations.
- Payment Processors — Stripe and Razorpay handle all payment transactions. Eduvontra does not store raw card data.
- Analytics Tools — Anonymised, aggregated usage data may be processed via analytics platforms to guide product decisions.
- Cloud Infrastructure — Data is hosted on AWS and/or Google Cloud with servers located in compliant data centre regions.
- Communication Services — Transactional emails and SMS are delivered through vetted providers who do not retain message content beyond delivery.
Third-party websites linked from Eduvontra are governed by their own privacy policies. We encourage you to review them independently.
Data Retention
We retain personal data only for as long as it is necessary to fulfil the purposes outlined in this policy, or as required by law. Our standard retention periods are:
- Active account data — Retained for the duration of the subscription and up to 90 days post-termination to allow data export.
- Billing & transaction records — Retained for 7 years in compliance with financial regulations.
- Support communications — Retained for 2 years to enable continuity of service and quality review.
- Anonymised analytics data — May be retained indefinitely as it cannot be linked to any individual.
Upon account deletion or subscription termination, personal data is permanently purged from our live systems within 30 days, with backup copies removed within 90 days.
Children's Privacy
Eduvontra operates within educational institutions and, as such, is designed to handle student data with exceptional care. We comply with applicable laws governing the protection of minors' data, including COPPA, FERPA (where applicable), and India's DPDP Act.
- Student accounts are created exclusively by authorised school administrators — never directly by students or parents without institutional oversight.
- Student data is never used for profiling, advertising, or any commercial purpose.
- Parents and legal guardians may request access to, or deletion of, their child's data by contacting the school administrator or our privacy team directly.
Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page.
- Send an in-app notification and email to account administrators at least 14 days before the changes take effect.
- Maintain a version history so you can review what has changed and when.
Continued use of the platform after a policy update constitutes acceptance of the revised terms. If you do not agree with any changes, you may terminate your account before the effective date.
Privacy Questions?
We're here to help.
If you have any questions about this Privacy Policy, your data, or would like to exercise your rights, our privacy team is ready to assist.