Privacy Policy

1. Overview & Commitment

At Ztudy (a product developed and operated by Bright Techno Solutions), we understand that student, parent, and institutional data is deeply sensitive. We are committed to maintaining the highest standards of data privacy, encryption, and confidentiality in compliance with the Information Technology Act and India's Digital Personal Data Protection (DPDP) Act.

2. Roles: Data Controller vs Data Processor

3. Information We Collect

Depending on your interaction with Ztudy, we collect:

• Institute Account Information: Institute name, administrator contact name, official email address, phone number, and billing details.
• Data Entered by the Institute: Student names, roll numbers, batch allocations, attendance records, exam scores, and fee payment histories.
• Communication Logs: Timestamped records of automated alerts dispatched through the WhatsApp Business API or SMS gateway (e.g. attendance notifications and fee receipts).
• Technical & Usage Information: Device type, browser user agent, IP address, and system logs required to ensure application security and debug issues.

4. How We Use Your Information

We use information strictly for:

• Providing and operating the core Ztudy institute modules.
• Automating parent updates via WhatsApp, SMS, and Email as initiated by the institute.
• Generating analytical dashboards, fee aging reports, and academic progress cards.
• Generating customized question papers via syllabus matching.
• Responding to administrative support and training inquiries.

We DO NOT sell, rent, or lease institutional or student data to advertisers or third-party data brokers under any circumstances.

5. Data Security & Encryption

We protect institutional data using robust technical measures:

• Encryption in Transit: All data transmitted between clients and our servers uses TLS 1.3 encryption.
• Encryption at Rest: Sensitive credentials, tokens, and database backups are encrypted using industry-standard AES-256 encryption.
• Role-Based Access: Strict permission barriers ensure staff members only see data assigned to their administrative role.
• Regular Backups: Automated redundant backups to ensure rapid disaster recovery.

6. Third-Party Integrations

To provide communication and infrastructure services, we integrate with trusted enterprise providers:

• Meta WhatsApp Business API: To deliver real-time attendance and fee notifications directly to parents.
• SMS Gateways (DLT Approved): For mandatory governmental and board-compliant communication dispatches in India.
• Cloud Hosting: Secure Tier-4 data centers ensuring high availability.

7. Data Retention & Institute Rights

Institutes maintain complete control over their data lifecycle:

• Export: Institutes can export complete student and financial datasets at any time.
• Deletion: Upon termination of service, all institutional data is purged from our production databases within 30 days, unless required by Indian financial compliance laws.

8. Grievance Officer & Contact Information

In accordance with the Information Technology Act and rules made thereunder, any privacy concerns or grievances may be addressed to: