1. Information we collect

When you use InstitutePro, we collect information you provide directly:

Account information: Name, email address, phone number, and institute details when you register.
Student data: Student profiles, attendance records, fee invoices, homework, and assessment data that you or your staff enter into the platform.
Payment data: Invoice and payment records. We do not store credit card numbers — payment processing is handled by Razorpay.
Usage data: How you interact with the platform — pages visited, features used, actions taken. Used to improve the product.
Device data: Browser type, IP address, operating system. Used for security and debugging.

2. How we use your information

To provide and operate the InstitutePro service
To send WhatsApp and push notifications (attendance alerts, fee reminders) that you configure
To generate invoices, receipts, and reports
To provide customer support
To improve the platform based on usage patterns
To send product updates and relevant announcements (you may opt out)

3. Data storage and security

Your data is stored on secure servers hosted on AWS (Amazon Web Services) in India. We implement industry-standard security measures including:

Encryption in transit (HTTPS/TLS for all connections)
Encryption at rest for sensitive fields
Role-based access control — your teachers see only their batches, not all institute data
Regular security audits

Files (resources, media) are stored on AWS S3 with 15-minute signed URL access — files cannot be accessed without authentication.

4. Data sharing

We do not sell your data. We share data with third parties only as required to operate the service:

MSG91: For WhatsApp and SMS notifications (phone numbers of parents/students)
Razorpay: For payment processing (invoice amounts, payer details)
AWS: For server hosting and file storage
Winston/CloudWatch: For application logging and error monitoring

We may disclose data if required by law or to protect the rights and safety of our users.

5. Multi-tenancy and data isolation

InstitutePro is a multi-tenant platform. Each institute's data is isolated at the database level using a tenant ID. One institute's data is never accessible to another institute. Our internal team can access tenant data only for support purposes, with audit logging.

6. Data retention

Your data is retained for the duration of your subscription plus 30 days after cancellation. After 30 days, data is permanently deleted. You can request an export of all your data at any time before deletion.

7. Your rights

Access the data we hold about you
Request correction of inaccurate data
Request deletion of your data
Export your data in machine-readable format
Opt out of marketing communications

To exercise these rights, contact us at privacy@institutepro.app or WhatsApp +91 87799 16678.

8. Cookies

The InstitutePro web application uses session cookies for authentication and local storage for user preferences. The marketing website (institutepro.app) uses minimal cookies — no advertising or tracking cookies. We do not use Google Analytics or Facebook Pixel.

9. Changes to this policy

We may update this privacy policy as the product evolves. Significant changes will be communicated via email to registered account holders. The "last updated" date at the top of this page will always reflect the current version.

10. Contact

For privacy questions or data requests:

Email: privacy@institutepro.app
WhatsApp: +91 87799 16678
Company: Innodhruti Technology Solutions

Privacy Policy