Privacy Policy

Your data, treated with the care it deserves.

Last updated: April 1, 2026

At EduPlux, we handle data about children, families and educators — some of the most sensitive information any software can touch. We take that responsibility seriously. This policy explains, in plain language, what we collect, why, and what control you have over it.

1. Who We Are

EduPlux Technologies Pvt. Ltd. (“EduPlux,” “we,” “us,” or “our”) operates the EduPlux school and college management platform. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit eduplux.in, sign in to our web dashboards, or use our Parent, Student, Teacher and Driver mobile apps.

2. Information We Collect

We collect the minimum information needed to deliver the service:

  • Account data — name, email, phone number, role (admin, teacher, parent, student, driver) and your institution.
  • Student records — admission details, attendance, grades, fee history and timetables, entered by your institution.
  • Usage data — device type, OS version, app version, IP address, and product events used to diagnose issues.
  • Location data — only from the Driver app while a route is active, and only to power live bus tracking for parents.
  • Payment data — processed by our PCI-DSS compliant payment partners (Razorpay, Stripe). We never store full card numbers on our servers.

3. How We Use Information

We use personal information to operate, maintain and improve EduPlux, process fee payments, send transactional notifications (attendance alerts, fee reminders, exam results), provide customer support, and comply with legal obligations. We do not sell personal information, and we do not use student data to train AI models.

4. The Role of Your Institution

For data about students, parents and staff, your school or college is the data controller and EduPlux acts as a data processor. We process this data only on the documented instructions of your institution. If you have questions about the data your institution has stored, please contact them directly.

5. Sharing & Sub-Processors

We share data only with vetted sub-processors who help us run the service:

  • Amazon Web Services (Mumbai region) — primary hosting and storage.
  • Razorpay, Stripe — payment processing.
  • Twilio, MSG91 — SMS delivery.
  • SendGrid — transactional email.
  • Firebase Cloud Messaging — push notifications.

6. Children's Privacy

EduPlux is not intended for direct use by children under 13. Student accounts are created by their institution under a contract that designates the institution as legal guardian for data purposes. Parents may request access to or deletion of their child's data by contacting their institution.

7. Data Retention

We retain personal data for as long as your institution maintains an active subscription, plus 90 days. After that, data is permanently deleted unless retention is required by law (for example, financial records under the Indian Income Tax Act, retained for 8 years).

8. Your Rights

Subject to the Digital Personal Data Protection Act, 2023, and other applicable laws, you may request access, correction, or deletion of your personal data, withdraw consent, or lodge a complaint with the Data Protection Board of India. Email privacy@eduplux.in and we'll respond within 30 days.

9. Security

EduPlux uses TLS 1.2+ in transit, AES-256 at rest, role-based access controls, mandatory MFA for staff, and append-only audit logs shipped to a separate AWS account. Formal certifications (SOC 2 Type II, ISO 27001) are on our published roadmap and we will list them here as they are completed.

10. International Transfers

EduPlux data is hosted within India (AWS Mumbai region). Where a sub-processor operates outside India (for example, Stripe in the US), we rely on standard contractual clauses to protect your data.

11. Changes to This Policy

We'll post material changes on this page and notify institution admins by email at least 30 days before they take effect.

12. Contact Us

Questions? Write to our Data Protection Officer at privacy@eduplux.in or by post at EduPlux Technologies Pvt. Ltd., 4th Floor, Tech Park One, Whitefield, Bangalore 560066, Karnataka, India.