Product Privacy Notice

1. Who we are

Shikshel is a school management platform operated by Nadrel Technologies, with a registered office at SCO-11, 2nd Floor, District Shopping Complex, Ranjit Avenue, Amritsar-143001, Punjab, India. In this notice, "we" and "us" mean Nadrel Technologies.

2. Which notice applies to you

Shikshel has three separate documents, because three different relationships are involved. This one is about your own account.

• This notice — what we hold about you because you sign in to the application: your account, and the record of what you did with it.
• The Data Processing Agreement — how we handle the records your school enters: its students, guardians and staff. Those records belong to your school. Your school decides how they are used; we only process them on its instructions.
• The website privacy policy — the shikshel.com marketing site and its demo request form. Nothing to do with the application.

3. Who created your account matters

It decides who is answerable to you for the information held about you, which the DPDP Act calls the Data Fiduciary.

• If you registered your own school — you signed up, agreed to this notice and the Data Processing Agreement, and created the school. For your account, we are the Data Fiduciary and answerable to you directly.
• If your school gave you an account — a teacher, an administrator, HR, an accountant, a student or a parent. Your school created the account and holds the records inside it. Your school is the Data Fiduciary, and questions about those records go to your school first. We still hold your sign-in credentials, and this notice tells you what that involves.

4. What we hold about you

Because you have an account:

• Your name and email address. Student and parent portal accounts are issued a sign-in address by the school rather than using a personal one.
• Your password, stored only as a cryptographic hash. We cannot read it, and neither can your school.
• Which school you belong to and your role in it — owner, administrator, teacher, HR, accountant, parent or student.
• A record that you accepted this notice, with the date and the version you accepted, where your account is one that agrees to it.
• A record of actions you take in the application — for example admitting a student, publishing a result, or changing another person's record. This exists so a school can answer "who changed this?", which matters when the records concern children.
• Ordinary server logs, which include IP addresses, kept by our hosting provider for security and reliability.

If you are also a member of staff at the school, your employment record — address, statutory identifiers, bank details for payroll — is entered and controlled by your school, not by us. It is covered by the Data Processing Agreement, and your school should give you its own notice about it.

5. Why we hold it, and on what basis

• To give you access to your school's platform and to keep that access secure. For an account you registered yourself, this is necessary to provide the service you asked for. For an account your school issued, your school is the Fiduciary and instructs us.
• To keep the record of actions described above, so schools can account for changes to children's records.
• To meet our legal obligations, where any apply.

We do not use your information for advertising, we do not profile you, and we do not sell or rent it to anyone.

6. We do not train AI on your data

No information in the application — yours, your school's, your staff's or any student's — is used to train AI models. Where the product offers AI features, they operate on the data needed to answer the request at that moment and nothing is retained by a model provider for training. Children are never profiled or tracked, and no advertising of any kind is served.

7. Where it is held, and who else handles it

Your school's records and your account are stored in India, on Supabase infrastructure in the AWS Mumbai (ap-south-1) region. Some supporting services operate outside India: application hosting runs on Vercel's global network, and notification emails are delivered through Resend, which means a recipient's name and email address are processed abroad in the course of sending a message. The full list of providers is in section 7 of the Data Processing Agreement.

8. How long we keep it

• While your account exists. If your school removes your account, your access ends and your sign-in details are removed with it.
• If your school closes its account, its data — including accounts — is deleted from our live systems within 30 days. Encrypted backups are kept on a rolling 7-day basis, so residual copies are erased within 7 days of that. We do not use backups to restore closed accounts.
• Where the law requires us to keep something for longer, we keep only that, and only for as long as required.

9. Your rights

Under the DPDP Act you can ask to:

• Know what information about you we hold
• Have anything wrong or out of date corrected
• Have it deleted
• Withdraw an agreement you gave, where the basis was your consent
• Nominate someone to exercise these rights if you cannot

If your school issued your account, ask your school first — it is the Data Fiduciary for the records it holds about you, and it can act faster than we can. Where the request concerns your sign-in account itself, or your school does not respond, come to us.

10. Grievance officer

If you have a complaint about how your information has been handled, you can raise it with our grievance officer:

Ranjeet Singh
Nadrel Technologies
SCO-11, 2nd Floor, District Shopping Complex, Ranjit Avenue, Amritsar-143001, Punjab, India
contact@shikshel.com

We will acknowledge your complaint and tell you what we are doing about it. If you are not satisfied with the outcome, you may complain to the Data Protection Board of India.

11. Changes to this notice

If we change this notice we will update the date at the top and the version recorded against acceptances. Where a change materially affects what you agreed to, we will ask you to agree again rather than assume the earlier acceptance still covers it.

12. Contact

Any question about this notice, or about information we hold about you, can go to contact@shikshel.com.

Shikshel is a product of Nadrel Technologies, the legal entity responsible under this notice.