Will Acavya use my student list to sell its own classes?

Why does this pledge exist?

We also run a separate coaching business. Every coaching owner will ask: “Will you use my student list to sell your own classes?” The answer must be a clear no, backed by contract, technical design and visible access controls, not only by a promise.

What exactly do we promise?

1. Your data is yours. Your institute is the data fiduciary for its students, parents and staff. Acavya acts only as your data processor, on your written instructions, under a data processing agreement.
2. No use for our own business. We will not use your data for our own coaching classes, marketing, upselling, advertising, profiling or to train AI models.
3. No poaching. We will not use platform data to contact your students or parents about our own classes or any competing coaching offer.
4. No sale or sharing. We never sell your data and share it only with the sub-processors you can see in our list, for running your service.
5. Technical separation. The ERP has its own database. It shares no login or authentication with any other product of ours, and no Acavya marketing tool can reach tenant data.
6. Access only through break-glass. If our staff ever need to look at your data to fix a problem, they must give a reason, the access is time-limited and logged, and your institute is notified.
7. Your brand comes first. Your name and logo appear first everywhere. “Powered by” footers are off by default, and we never put referral links or our own promotions in your documents or in messages to your parents.
8. You can leave with everything. You can export your full data at any time and we delete or return it at the end of the contract. See data export.

How can you check that we keep the promise?

• Break-glass access to your data produces a notification to your institute and an entry in your audit log.
• The data processing agreement gives you audit rights and a list of sub-processors.
• The pledge is written into the agreement, so breaking it is a breach of contract, not only a broken promise.

What is the legal basis?

Under the DPDP Act, an institute that decides why and how student data is used is the data fiduciary, and a service that processes it on the institute’s behalf is a data processor (section 8(2)). If a processor used the data for its own purposes it would become a fiduciary itself. We choose never to do that. This is a plain-language summary, not legal advice.