How does Acavya handle personal data?
Acavya collects only the data it needs to run accounts, billing, sign-in and demo requests, uses no tracking cookies or ad trackers, handles students’ data only as your processor, and lets you access, correct or erase your data.
Last reviewed:
This is our own privacy notice. Each institute publishes its own notice to its students and parents; we process that data only for the institute.
Who are we, and who is our Grievance Officer?
This notice is issued by Acavya Ventures, the trade name of ACAVYA, a sole proprietorship registered in India (Udyam registration UDYAM-UP-38-0103995) (“Acavya Ventures”, “we”), which provides Acavya and is based in Uttar Pradesh, India. Our Grievance Officer is Shivam Pandey (Grievance Officer), reachable at contact@acavya.com.
Who is responsible for which data?
- We (Acavya Ventures) are the data fiduciary for institute owners’ and staff accounts, billing, demo requests, the global sign-in identity (phone, email, devices) and the cross-institute family link, which no single institute controls.
- We are a data processor for students’, parents’ and staff records that an institute stores in Acavya. The institute decides how that data is used; see the DPA.
What do we collect, and why?
| Data | Why | Notes |
|---|---|---|
| Name, phone, email, role, institute | Create and secure your account, send service messages | Needed to provide the Service |
| Sign-in data: OTP events, devices, sessions | Prevent account misuse, approve new devices | Logs kept for security and legal needs |
| Billing details such as GSTIN, invoices, payments | Invoice you, meet tax law | Payment card data is handled by payment partners |
| Family link between a parent’s school and coaching memberships | Show one parent view across institutes | Created only when the parent confirms |
| Demo request form: name, institute, type, size, city, phone, email, message | Respond to your request | Used only to arrange your demo |
| Design-partner, newsletter and (closed) early-access waitlist forms: name, institute, type, city, phone, email, answers | Respond to you, run the design-partner programme, send the newsletter you asked for | Newsletter starts only after you confirm by email; every email has an unsubscribe link |
| Website usage events from our own counter: page path, language, campaign tags and the site you came from | Count visits, tool use and form starts to improve the site | No cookies or browser storage, no query strings, no third party; nothing is sent if your browser sends Global Privacy Control or Do Not Track |
| Website server logs | Keep the site secure and working | No third-party analytics or advertising trackers; no tracking cookies |
What is the legal basis?
We process this data with your consent (for example the demo form, which has a consent checkbox) or for legitimate uses permitted by the DPDP Act, such as performing the contract you have with us and meeting legal duties. Where we rely on your consent, you can withdraw it at any time through the contact page; withdrawal does not affect processing already done.
How long do we keep it?
- Account and billing data: while the account is active and for the period tax and other applicable law require.
- Security and access logs: at least 1 year (DPDP Rule 6), and ICT logs for 180 days in India (CERT-In).
- Demo and enquiry requests that do not become customers: 1 year after the request, then deleted.
- Trial data that does not convert: 60 days after the trial ends.
What are your rights, and how do you use them?
You can ask to access, correct or erase your data, withdraw consent, and nominate someone to exercise your rights. Write to our Grievance Officer, Shivam Pandey, at contact@acavya.com (also on the contact page); we aim to respond within 90 days. You may also complain to the Data Protection Board of India.
What about children’s data?
Acavya does not direct its own services at children and does not track or profile children or show them advertising. Children’s data in Acavya belongs to the institute and is processed only for the institute, with parental consent handled by the institute through Acavya tools.
How do we protect data, and what if there is a breach?
We use encryption, access control, audit logs and backups as described on the security page. If a breach affects your data we will tell you and, where the law requires, the Board, within the legal timelines.
How will you hear about changes?
We version this notice and will re-notify account holders when it changes materially. Last reviewed on the date at the top of this page.
Questions about privacy? Contact our Grievance Officer at contact@acavya.com.
30-day free trial for up to 30 students, no card needed. You set up your own institute, with an optional sample setup to explore. The Free plan is for tutors.