Privacy Policy

1. Introduction

ClassKira ("we," "our," or "us") is a product of Pixalara LLP. We are committed to protecting the privacy and security of all individuals who interact with our School Management System, including school administrators, teachers, students, parents, and other authorized users. This Privacy Policy explains what data we collect, how we use it, and the rights you have over your information.

2. Information We Collect

We collect the following categories of information:

Account & Profile Data: Name, email address, phone number, designation, and role-based profile information provided during registration or onboarding.

Student & Institutional Data: Student enrollment details, academic records, attendance logs, examination results, fee payment history, library records, and hostel allocations — provided by the school institution, not directly by students.

Usage Data: Pages visited, features accessed, login timestamps, browser type, device information, and IP addresses — collected automatically for security and product improvement.

Payment Data: Fee transaction records processed through Razorpay, Stripe, PayPal, or Paytm. ClassKira does not store full card or banking details — all payment processing is handled by PCI-compliant third-party gateways.

Communication Data: Messages sent through ClassKira's internal chat and notification system between authorized users within the same institution.

3. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain the ClassKira platform
• Authenticate users and enforce role-based access control
• Process fee payments and generate financial reports
• Send system notifications, announcements, and alerts
• Generate admit cards, attendance reports, and academic records
• Improve platform performance and fix technical issues
• Comply with legal obligations and respond to lawful requests

We do not sell, rent, or trade your personal information to any third party for marketing purposes.

4. Data Storage & Security

All data is stored on Google Cloud Platform (GCP) infrastructure, hosted in the asia-south1 (Mumbai) region. We implement the following security measures:

• Firebase JWT-based authentication for all user sessions
• Role-Based Access Control (RBAC) ensuring users access only their authorized data
• Kubernetes Secrets for secure credential management
• Encrypted data transmission via HTTPS/TLS
• Regular automated backups with point-in-time recovery
• Zero-downtime deployments via GKE rolling updates

5. Data Sharing

ClassKira shares data only in the following limited circumstances:

• With the school institution that owns the account, as they are the primary data controller for their students and staff
• With payment gateway providers (Razorpay, Stripe, PayPal, Paytm) solely to process fee transactions
• With SMS providers (Twilio) to deliver notifications authorized by the institution
• With law enforcement or regulators when required by applicable Indian law
• With service providers bound by confidentiality agreements who assist in operating our platform

6. Children's Privacy

ClassKira is a B2B platform deployed by schools for institutional use. Student data is entered and managed by the school institution acting as the data controller. ClassKira does not knowingly collect personal information directly from children. If you believe student data has been mishandled, contact your school's administrator immediately.

7. Data Retention

We retain institutional data for the duration of the active subscription. Upon termination of a school's account:

• A full data export is available for 30 days post-termination
• After 30 days, all data is permanently and irreversibly deleted
• Payment transaction records may be retained for 7 years to comply with Indian GST and accounting regulations

8. Your Rights

Authorized users and institutions have the right to:

• Access and review their personal data stored on ClassKira
• Request correction of inaccurate information
• Request deletion of personal data (subject to retention obligations above)
• Export institutional data in standard formats
• Withdraw consent for optional communications

To exercise these rights, contact: legal@classkira.com

9. Cookies

ClassKira uses session cookies essential for authentication and maintaining your login state. We do not use third-party advertising cookies. You may disable cookies in your browser settings, but this will prevent you from logging in.

10. Changes to This Policy

We may update this Privacy Policy periodically. Schools and administrators will be notified of material changes via email and in-platform notification at least 14 days before changes take effect. Continued use after the effective date constitutes acceptance.

11. Contact Us

Pixalara LLP — ClassKira
Email: legal@classkira.com
Website: classkira.com
Jurisdiction: India (governed by Indian IT Act, 2000 and applicable data protection regulations)