Privacy Policy

Last updated: February 2026

1. Data Controller

Neevak Technologies Pvt. Ltd. ("Neevak"), with its registered office at Bengaluru, Karnataka, India, is the data controller (referred to as "Data Fiduciary" under the Digital Personal Data Protection Act, 2023) for personal data collected through this website.

For personal data processed through the Neevak platform on behalf of subscribing schools, Neevak acts as a data processor. The subscribing school is the data fiduciary for such data.

2. Data We Collect

From website visitors:

  • Name, email address, phone number, school name, and role — when you submit the contact form on our website
  • Device information and IP address — if analytics services are enabled (we use privacy-friendly analytics that do not use cookies)

From platform users (schools and their stakeholders):

  • Student data: names, admission numbers, class/section, date of birth, guardian information
  • Parent/guardian data: names, phone numbers, email addresses, communication preferences
  • Staff data: names, roles, contact information
  • Financial data: fee structures, payment records, bank reconciliation data, receipts
  • Attendance records
  • Academic records: assessments, progress reports, competency evaluations

All platform data is collected and processed on behalf of the subscribing school (the data fiduciary), under the terms of our service agreement.

3. Purpose of Collection

We collect and process personal data for the following purposes:

  • Service delivery: To provide school operations management services as described in our Terms of Service
  • Communication: To respond to inquiries submitted through our website, and to send service-related communications
  • WhatsApp notifications: To deliver fee reminders, payment confirmations, attendance alerts, and other school communications to parents via WhatsApp Business API (through our BSP partner, Gupshup)
  • Product improvement: To understand usage patterns and improve the platform (using aggregated, anonymized data only)
  • Legal compliance: To comply with applicable laws and regulations, including the DPDP Act, 2023

4. Legal Basis for Processing

  • Consent: For website form submissions and marketing communications
  • Contractual necessity: For processing data required to deliver our services under the service agreement with subscribing schools
  • Legitimate interest: For product improvement using anonymized usage data
  • Legal obligation: For compliance with applicable laws and regulations

5. Children's Data

Neevak processes student data, which may include data of children, exclusively as a data processor on behalf of subscribing schools (the data fiduciary). We do not independently collect personal data from children.

In accordance with the DPDP Act, 2023, subscribing schools are responsible for obtaining verifiable parental consent for the processing of children's personal data. Neevak provides tools to help schools manage and document this consent.

We do not engage in tracking, behavioural monitoring, or targeted advertising directed at children. We do not process children's data in any manner that could cause detrimental effects to their well-being.

6. Data Sharing

We do not sell, rent, or trade personal data. Personal data is shared only with the following categories of third parties, all bound by data processing agreements:

  • Razorpay: Payment processing (fee collection via UPI, cards, net banking). Razorpay processes payment data under their own privacy policy and PCI DSS compliance.
  • Gupshup (WhatsApp Business API): Delivery of WhatsApp messages to parents. Phone numbers and message content are shared for message delivery only.
  • Cloud infrastructure provider: Data hosting and storage. All data is stored on servers within India.

We may disclose personal data if required to do so by law or in response to valid legal process from Indian government authorities.

7. WhatsApp Communication

Neevak uses WhatsApp Business API (via our BSP partner, Gupshup) to deliver service communications to parents on behalf of subscribing schools. These communications include:

  • Fee payment reminders and due date notifications
  • Payment confirmation receipts
  • Attendance alerts and updates
  • Important school announcements

WhatsApp messages are sent only to phone numbers provided by the subscribing school and only for school-related service communications. Parents may opt out of WhatsApp notifications by contacting their school administration.

Message content is transmitted through Gupshup's infrastructure and Meta's WhatsApp platform. We do not use WhatsApp data for advertising, profiling, or any purpose other than delivering school communications.

8. Data Retention

  • Website form submissions: Retained for two (2) years from the date of submission, then permanently deleted
  • Platform data: Retained for the duration of the active service agreement plus one (1) year for legal compliance purposes. Upon termination, data is exported to the school and deleted from active systems within sixty (60) days.
  • Financial records: Retained as required by Indian tax and accounting regulations (currently eight years under the Income Tax Act)

9. Data Principal Rights

Under the DPDP Act, 2023, you have the following rights regarding your personal data:

  • Right to access: Request a summary of your personal data being processed
  • Right to correction: Request correction of inaccurate or incomplete personal data
  • Right to erasure: Request deletion of your personal data, subject to legal retention requirements
  • Right to grievance redressal: Lodge a complaint regarding the processing of your personal data
  • Right to nominate: Nominate another person to exercise your rights in the event of your death or incapacity

To exercise these rights, please contact us at hello@neevak.com. We will respond to your request within thirty (30) days.

For platform data: since Neevak processes this data on behalf of the subscribing school, data principal requests related to platform data should be directed to the school first. The school may then coordinate with Neevak to fulfil the request.

10. Security Measures

We implement appropriate technical and organisational measures to protect personal data, including:

  • Encryption of data at rest and in transit (TLS 1.2+)
  • Role-based access controls
  • Audit logging of all data access and modifications
  • Regular security assessments
  • Secure software development practices

11. Cookies and Tracking

This website uses minimal or no cookies. If analytics are enabled, we use privacy-friendly analytics services (such as Plausible Analytics) that do not use cookies, do not track users across websites, and are fully compliant with the DPDP Act without requiring a cookie consent banner.

No third-party tracking scripts (Google Analytics, Facebook Pixel, etc.) are loaded on this website.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We will notify registered platform users of material changes via email. Continued use of our services after changes constitutes acceptance of the revised policy.

13. Contact and Grievance Officer

For any questions, concerns, or grievances regarding this Privacy Policy or our data handling practices, please contact:

Grievance Officer
Neevak Technologies Pvt. Ltd.
Email: hello@neevak.com
Address: Bengaluru, Karnataka, India

We will acknowledge your grievance within forty-eight (48) hours and resolve it within thirty (30) days.