Privacy Policy

Last updated: 6 September 2026

PingClass ("we", "our", "us") provides fee management software for tuition centers and coaching institutes. This Privacy Policy explains what personal data we process, why, and the rights you have under the Digital Personal Data Protection Act, 2023 (the "DPDP Act") of India.

हिन्दी में मुख्य बातें (एक नज़र में)

• हम आपके व्यक्तिगत डेटा को कम से कम और केवल आवश्यक उद्देश्यों के लिए संसाधित (process) करते हैं। हम आपका डेटा बेचते नहीं हैं।
• 18 वर्ष से कम उम्र के बच्चों के डेटा के लिए माता-पिता/अभिभावक की सत्यापन योग्य सहमति आवश्यक है। हम बच्चों के डेटा का विपणन (marketing) या निगरानी (tracking) नहीं करते।
• आपको अपने डेटा तक पहुँचने, उसे सुधारने, निर्यात (export) करने और मिटाने (delete) का अधिकार है।
• किसी भी प्रश्न या शिकायत के लिए हमसे pingclassoff@gmail.com पर संपर्क करें।

1. Who processes your data

In most cases the institute (tuition center) that uses PingClass is the Data Fiduciary in respect of student and parent data entered into the platform. PingClass acts as a Data Processor on the institute's instructions. In respect of your PingClass account (name, email, login), PingClass is itself the Data Fiduciary.

2. Data we collect and process

• Account data — name, email address and password (securely stored) when you create a PingClass account.
• Institute data — institute name, contact email, phone number and address, entered to set up your profile.
• Student and parent data — names, phone numbers, batch assignments, attendance, fee records and parent links, entered by the institute into the platform.
• Payment data — fee/subscription payment records. Card details are handled directly by our payment provider (Razorpay); we do not store card numbers.
• Technical data — basic usage data needed to operate and secure the service.
• Analytics data — aggregated, anonymized visitor statistics (such as pages visited and general region) collected via Google Analytics to understand how the site is used and to improve it. IP addresses are anonymized before being sent to Google, and this data is not used to identify or profile individual visitors.

3. Why we process data

• To create and manage your account and provide the PingClass service.
• To record and manage fees, attendance, batches and announcements at your institute's direction.
• To process payments through our payment provider.
• To communicate service-related notices and, with consent, relevant updates.
• To protect the security of the service and comply with law.

We rely on your consent (for example, when you create an account) and on the legitimate uses permitted under Section 7 of the DPDP Act, including performance of the services you request and fulfilling legal obligations.

4. Children's data

PingClass is a business tool used by institutes. Where student data entered into the platform relates to children below 18 years of age, the institute is responsible, as Data Fiduciary, for obtaining verifiable parental consent before processing such data. We do not profile children, do not use their data for behavioural monitoring, and do not market to children.

5. How we protect data

Data is transmitted over encrypted connections and stored in a managed, access-controlled database. Access to records is governed by role-based permissions (admin, teacher, parent) and row-level security. We do not sell personal data.

6. Who we share data with

• Razorpay — to process payments. Only the information needed for the transaction is shared.
• Hosting / service providers — infrastructure operators that store or transmit data on our behalf under appropriate agreements.

Where data must be transferred outside India, we ensure such transfers comply with the safeguards required by the DPDP Act.

7. Your rights

Under the DPDP Act, you (and, where applicable, the parents/guardians of students) may:

• Access — obtain a summary of your personal data held in the platform.
• Correct — update inaccurate or incomplete information.
• Erase — request deletion of your data, subject to legal and financial-record obligations.
• Withdraw consent — where processing is based on consent.
• Complain — to us first, and thereafter to the Data Protection Board of India.

Contact the institute managing your data for student or parent records. For your PingClass account, contact us at the address below.

8. Retention

Account data — We keep your PingClass account, institute profile, and associated student records for as long as your account is active. Student, batch, and announcement records are soft-deleted (retained with restricted access) to preserve audit trails and financial records.

Payment records — While your account is active, fee and subscription payment records are retained for 6 years as required by Indian tax law (Income Tax Act 1961, s.44AA / Rule 6F; GST Act 2017, s.36); after that they are deleted.

Full account deletion — On full account deletion, all personal data — including payment records — is permanently removed from the platform.

Audit logs — Records of data changes (audit logs) are kept for 12 months and then deleted by an automated job.

Invite tokens — Invitation tokens that were used are kept for 90 days to support resending OTPs. Unused, expired tokens are purged after 30 days.

Scheduled cleanup — A daily automated job cleans up stale invite tokens, orphaned link rows, and expired audit logs. No personal data is retained longer than necessary.

9. Security incidents

In the unlikely event of a data breach affecting your data, we will notify you and the Data Protection Board of India within the timeframes required by the DPDP Act.

10. Grievance

If you have a privacy concern, please contact us. We will respond within the period required under the DPDP Act and its Rules.

11. Changes to this policy

We may update this policy from time to time. The "Last updated" date above reflects the latest version. Significant changes will be communicated through the app.