Privacy Policy

This Privacy Policy explains how AJBAZ CREATIVE WORKS PRIVATE LIMITED (“we”, “us”, “the Company”) collects, uses, stores and protects personal data. It applies to:

• the website ajbazcreativeworksprivatelimited.com;
• our school management platform, including its web administration panel; and
• our mobile applications for school staff and for parents (together, the “Apps”).

We process personal data in accordance with the Digital Personal Data Protection Act, 2023 and other applicable Indian law.

1. Our role: the school is in control of its data

This distinction matters. We do not decide which students are enrolled, what marks are recorded, or what fees are due — the school does. We store and process that information on the school’s behalf, keep it separated from every other school’s data, and return or delete it when the school asks us to or when our contract ends.

If you are a parent or a member of school staff and you want data corrected or removed, contact your school first. They can act immediately. We will also help, but we act on the school’s instruction, not against it.

2. What we collect

From website visitors

• Information you choose to send us through an enquiry, WhatsApp link or email — typically your name, phone number and what you are asking about.
• Basic technical information your browser sends automatically (IP address, browser type, pages visited), used to keep the site secure and working.

From school staff using the platform

• Name, staff role, work email address, phone number and the school you belong to.
• A password, stored only as a one-way cryptographic hash. We never store or see your actual password.
• A record of actions taken in the system, so a school can tell who marked attendance or recorded a payment.

From parents and guardians using the Parent app

• Name, relationship to the student, phone number, and email address where the school has recorded one.
• A device identifier for the phone you sign in on, so the school can see and revoke access to its own data.
• Your app PIN is never sent to us and never stored on our servers. It unlocks a credential held on your own device.

About students

Entered by the school, not by us: name, admission and roll number, class and section, attendance, marks and examination results, homework, fee dues and payments, and where the school chooses to use them, a photograph and transport or hostel details.

3. Children’s data

• Students do not hold accounts with us. Access is through the school’s staff or through a verified parent or guardian.
• Verifiable parental consent is obtained by the school as part of admission, in its capacity as Data Fiduciary.
• We do not use children’s data for advertising, behavioural tracking, profiling or any form of targeted marketing.
• We do not sell personal data of any kind, and we never share children’s data with advertisers or data brokers.

4. Why we process this data

5. Who we share data with

We share personal data only with service providers necessary to run the platform, and only to the extent required:

We do not sell personal data. We do not share it with advertisers. We do not use it to train third-party AI models.

We may disclose data where required by law, by a court, or by a competent authority acting under lawful powers.

6. Where data is stored

Platform data is stored on servers located in India. Some service providers listed above may process limited data outside India in the course of delivering their service; where that happens, it is under contractual safeguards.

7. How long we keep it

• School platform data is kept for as long as the school remains our customer. When the contract ends, the school may export its data; we then delete it within 90 days unless the school asks us in writing to delete it sooner.
• Website enquiries are kept for up to 24 months.
• Financial and tax records are kept for the period Indian law requires, currently eight years.
• Security and audit logs are kept for up to 12 months.

8. How we protect it

• All traffic between the Apps, the panel and our servers is encrypted in transit (TLS).
• Passwords are stored only as salted one-way hashes and are never recoverable.
• Every request is scoped to the school it belongs to, so one school’s data cannot be reached from another school’s account. This is enforced in code and tested automatically.
• Access is limited by role. A teacher, a principal and an accountant each see only what their role requires.
• Databases are backed up regularly and restores are verified.
• No system is perfectly secure. If a personal data breach occurs, we will notify the affected schools and the Data Protection Board of India as required by law, without undue delay.

9. Your rights

Under the Digital Personal Data Protection Act, 2023 you may:

• ask what personal data of yours we hold and how it is processed;
• ask for inaccurate or incomplete data to be corrected or completed;
• ask for data to be erased where it is no longer needed and no law requires us to keep it;
• nominate another person to exercise these rights on your behalf in the event of death or incapacity; and
• raise a grievance, and escalate it to the Data Protection Board of India if you are not satisfied with our response.

Where the data belongs to a school’s account, please raise the request with the school first — they hold the controls and can act at once. We respond to requests within 30 days.

10. Deleting your account and data

Parents and staff: ask your school office to revoke your access. The school can remove your device and your account from its administration panel immediately.

To request deletion directly from us, email privacy@ajbazcreativeworksprivatelimited.com from the address or phone number on your account, stating your name and your school. We will verify your identity, act within 30 days, and confirm in writing when it is done.

Records we are legally required to retain — principally financial records — are kept for the statutory period and then deleted.

11. Cookies and analytics

Our website uses only what is necessary for the site to function and to remain secure. Our Apps do not use advertising identifiers and do not carry third-party advertising SDKs.

12. Grievance Officer

13. Changes to this policy

We may update this policy as the platform or the law changes. The effective date at the top of this page always reflects the current version. Where a change materially affects how we handle personal data, we will notify the schools using our platform in advance.

14. Contact

AJBAZ CREATIVE WORKS PRIVATE LIMITED
No.10, 7th Main Road, Sadashivanagar, Tumakuru, Karnataka 572101, India
privacy@ajbazcreativeworksprivatelimited.com