Privacy Policy

1. Information we collect

• Account information: name, email, phone and role (owner / staff / student) when you sign up or are invited to a center's workspace.
• Center data: center name, city, description, subjects, cover image, timings, fee ranges and public listing preferences.
• Student and parent data entered by the center: name, class/batch, parent name and phone, admission details, attendance, marks, homework, fees and payment records.
• Payment data: subscription payments to Ralosy are processed by Razorpay, which collects your name, email, phone and payment credentials directly. We only receive a transaction reference and status — we never see your card, UPI or banking credentials. When a center collects tuition fees from parents through its own connected Razorpay account, that transaction flows directly between the parent and the center's Razorpay account.
• Uploaded content: logos, cover images, study materials, notices, homework attachments and other files you or your center upload.
• Technical logs: standard server logs (timestamp, path, approximate region, user-agent, IP) for security and abuse prevention.
• Cookies: session cookies required for authentication. We do not set marketing or advertising cookies.

2. How we use information

• To operate, secure and improve the Service.
• To authenticate users and enforce role-based access within a center's workspace.
• To display the public directory listing (only when a center has opted in).
• To process subscription payments and issue receipts.
• To respond to your questions and support requests.
• To comply with legal obligations under Indian law.

3. Roles: controller vs processor

For account, subscription and public-directory data, Ralosy is the data controller. For student, parent and internal center records entered by a center, the center is the data controller and Ralosy acts as the data processor on the center's behalf. Centers are responsible for having a lawful basis to collect and store information about their students and parents and for responding to those users' rights requests.

4. Sharing

We do not sell your data. We share limited data only with:

• Razorpay — for payment processing. See razorpay.com/privacy.
• Our cloud hosting and database providers — under contractual confidentiality obligations, only to run the Service.
• Email delivery providers — to send transactional emails such as password resets, receipts and notifications.
• Law enforcement — when required by a valid Indian legal request.

5. Data retention

• Center workspace data is retained while your subscription is active and for a reasonable period after cancellation to allow reactivation, after which it may be deleted.
• Server logs are retained for up to 90 days.
• Payment and invoice records are retained per Indian tax and financial regulations (typically 8 years).

6. Security

We use industry-standard measures including TLS in transit, Row-Level Security in our database, scoped access tokens, and least-privilege access controls. No system is 100% secure — please choose strong passwords and do not share your login credentials.

7. Your rights

You may email us to request access to, correction of, or deletion of any personal data we hold about you. If you are a student or parent whose data was entered by a center, please contact that center directly; we will support them in fulfilling your request. We will respond within 30 days.

8. Children

Kaksha is used by coaching centers and schools that may enrol students under 18. Such data is entered by the center under its lawful basis and parental consent obtained offline. Kaksha does not directly market to children.

9. International transfers

Our infrastructure providers may store data in data centers located outside India. Where this happens, we require appropriate safeguards through their contractual terms.

10. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top reflects the latest revision.

11. Contact

Privacy queries: support@ralosy.com. See also our Contact page.