Legal
Privacy Policy
Last updated: 1 June 2026 · Effective date: 1 June 2026
BatchBoard is operated by BatchBoard Technologies ("we", "us", "our").
This Privacy Policy explains how we collect, use, disclose, and protect information when you use our
school management platform at batchboard.in
and its subdomains (the "Service").
1. Information We Collect
We collect information in three ways:
a) Information you provide directly
- Account data — organisation name, admin name, email address, phone number, and password when you register.
- School data — student records (name, date of birth, parent details, address), staff profiles, fee invoices, attendance records, exam results, and any other data you upload to manage your institution.
- Payment data — billing address and payment method details processed via Razorpay. We do not store card numbers on our servers.
- Communications — messages you send us via the contact form or email.
b) Information collected automatically
- Server logs: IP address, browser type, pages visited, timestamps.
- Session cookies required for authentication.
- Error and performance telemetry (anonymised).
c) Information from third parties
- Payment status confirmations from Razorpay.
- WhatsApp message delivery receipts from your configured WhatsApp Business provider.
2. How We Use Your Information
- Provide, maintain, and improve the Service.
- Process payments and manage your subscription.
- Send transactional emails (account confirmation, password reset, invoice receipts).
- Send WhatsApp notifications on your behalf to the parents/students you have configured.
- Respond to support requests.
- Detect and prevent fraud, abuse, or security incidents.
- Comply with legal obligations.
- Analyse aggregate, anonymised usage trends to improve the product.
We do not sell your personal data or your students' data to any third party, ever.
3. How We Share Information
We share data only with service providers who help us run the platform, and only as necessary:
| Provider |
Purpose |
Data shared |
| Civo (cloud hosting) | Infrastructure | All data at rest |
| Razorpay | Payment processing | Billing details only |
| SendGrid / SMTP | Transactional email | Email address, message content |
| Your WhatsApp provider | WhatsApp notifications | Phone number, message content |
We may also disclose information if required by law, court order, or government authority, or to protect our rights or the safety of users.
4. Data Retention
We retain your account and school data for as long as your subscription is active. After termination or expiry:
- You have 30 days to export your data via the admin dashboard.
- After 30 days, personal data is permanently deleted from our systems.
- Anonymised, aggregated analytics may be retained indefinitely.
- Financial records required by Indian law (GST, IT Act) are retained for 8 years.
5. Security
We use industry-standard safeguards including TLS encryption in transit, AES-256 encryption at rest for sensitive fields, bcrypt password hashing, role-based access controls, and regular security audits. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
If you discover a vulnerability, please report it to support@batchboard.in.
6. Your Rights
Under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable law, you have the right to:
- Access — request a copy of the personal data we hold about you.
- Correction — request correction of inaccurate or incomplete data.
- Erasure — request deletion of your personal data (subject to legal retention obligations).
- Grievance redressal — raise a complaint with our Data Protection Officer.
- Nomination — nominate another person to exercise your rights in the event of death or incapacity.
To exercise any of these rights, email us at support@batchboard.in. We will respond within 30 days.
7. Children's Privacy
BatchBoard is a B2B service used by educational institutions. Schools may upload data relating to minor students as part of their administrative operations. This data is processed solely on behalf of and under the instruction of the institution (the data principal). We do not use student data for any purpose other than providing the Service. Schools are responsible for obtaining any required parental consent under applicable law before uploading student data.
8. Cookies
We use the following cookies:
- sessionid — required for login authentication. HTTP-only, secure.
- csrftoken — required for form security. Expires with the session.
We do not use third-party advertising or tracking cookies.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top and notify active subscribers by email at least 14 days before material changes take effect. Continued use of the Service after that date constitutes acceptance of the updated policy.