Privacy Policy

MyCampusly is a school management platform built and operated by Campusly Private Limited ("we", "us"), House No. 21, Rahmat Colony, Doranda, Ranchi, Ranchi - 834002, Jharkhand, India. This policy covers two things: this website (mycampusly.com), and the MyCampusly platform — the web dashboard, the teacher and parent apps, and the messages we send on a school's behalf over WhatsApp and SMS.

It is written to meet the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the rules made under it. Where this policy uses the Act's terms: a Data Principal is the person the data is about; a Data Fiduciary decides why and how data is processed; a Data Processor processes it on the Fiduciary's behalf.

For everything inside the platform — student records, attendance, marks, fee ledgers, staff details, parent contacts — your school is the Data Fiduciary. It decides what is collected and why, and it obtains the consents the law requires. We act as the school's Data Processor: we handle that data only on the school's written instructions and under our agreement with the school.

For this website — an enquiry you send us, a demo you book, analytics about visits — we are the Data Fiduciary and this policy applies directly.

If you are a parent or student with a question about data held in the platform, please contact your school first. It is best placed to act on it, and we support the school in doing so.

Through this website:

• Enquiry and demo requests: your name, school name, email, phone number, approximate student count and anything you write in the message.
• Technical data: IP address, browser and device type, pages visited and referring site, from standard server logs and any analytics we run (see Cookies below).

Through the platform, on behalf of schools:

• Students: name, class and section, date of birth, admission details, attendance, assessment results, report cards, fee status, transport route and, where a school enables it, a photograph for ID cards.
• Parents and guardians: name, relationship to the student, phone number, email and WhatsApp number for notices and receipts.
• Staff: name, role, contact details, subjects and classes taught, and activity logs inside the platform.
• Communication records: notices, circulars and messages sent through the platform, including delivery status.

We do not ask for, and schools should not upload, sensitive data the platform does not need — for example caste, religion, bank account numbers or biometric identifiers — unless a specific module requires it and the school has obtained the necessary consent.

Most Data Principals on the platform are children. Under section 9 of the DPDP Act, processing a child's personal data requires verifiable consent from a parent or lawful guardian, and must not involve tracking, behavioural monitoring or targeted advertising directed at children. Accordingly:

• Schools obtain parental consent as part of admission and inform parents about MyCampusly through their own privacy notices; we provide template language on request.
• We never build advertising or behavioural profiles of students, never show advertising inside the platform, and never share student data with advertisers or data brokers.
• Features that touch children's data — attendance, marks, transport tracking, notices — exist only to deliver the school's educational and administrative functions.

Website data is used to respond to your enquiry, schedule demos, send information you have asked for, and understand how the site is used so we can improve it. We may contact you about MyCampusly if you have enquired; you can opt out at any time by replying or writing to us.

Platform data is used only to provide the service to your school: recording attendance and marks, generating report cards and ID cards, issuing fee receipts, running transport modules, and delivering notices to parents on the app, WhatsApp and SMS. We also use it, in aggregated or de-identified form, to keep the platform reliable and secure and to improve features.

We do not sell personal data. We do not use it for advertising. We do not use student or parent data to train artificial-intelligence models without the school's explicit written consent.

We share personal data only with parties needed to run the service, each bound by contract to protect it and use it solely for that purpose:

• Cloud hosting and infrastructure providers, with data stored in India.
• Messaging gateways that deliver WhatsApp, SMS and email on a school's behalf. They receive only what is needed to deliver each message — the recipient's number or address and the message content.
• Payment providers, where a school enables online fee collection, for the transaction data they need to process a payment.
• Professional advisers, auditors and insurers, under confidentiality.

We may also disclose data where the law requires it — for example to comply with a court order or a lawful request from a government authority — and we will notify the school where we are permitted to.

We never share data between schools. Each school's data is logically separated, and a user can see only what their role at their own school allows.

All personal data processed by the platform is stored on servers located in India. We protect it with:

• Encryption in transit (TLS) and at rest.
• Role-based access: teachers see their classes, the office sees what it administers, parents see only their own children.
• Audit logs of who viewed or changed a record.
• Limited, logged and reviewed access to production systems by our staff, granted only for support, maintenance or security work.
• Regular backups, tested restores and vulnerability management.

If a personal-data breach affects your data, we will notify the affected school without undue delay so it can meet its own obligations, and we will notify the Data Protection Board of India and affected Data Principals where the DPDP Act requires.

Platform data is retained for as long as the school subscribes and for a hand-over period afterwards. On termination the school can export its complete data; we then delete it from live systems within 90 days and from backups within a further 90 days, unless the law requires us to retain specific records (for example fee receipts for tax purposes).

Website enquiry data is kept for 24 months from your last contact with us, then deleted. Server logs are retained for up to 12 months for security purposes.

Where the purpose for which data was collected has been served and no legal obligation to retain it exists, we erase it, in line with section 8(7) of the DPDP Act.

As a Data Principal you have the right, under sections 11 to 14 of the DPDP Act, to:

• Know what personal data of yours is being processed, why, and with whom it has been shared.
• Have inaccurate or incomplete data corrected, and data that is no longer needed erased.
• Withdraw consent you have given, as easily as you gave it.
• Nominate a person to exercise these rights on your behalf.
• Have a grievance heard and resolved.

For platform data, please raise the request with your school; it holds the relationship with you and instructs us, and we help schools respond within the timelines the law sets. For website data, write to us directly at hello@mycampusly.com. We respond to every request within 30 days.

To ask us to delete personal data, email hello@mycampusly.com with the subject line "Data deletion" and tell us:

• Your full name and the school you are connected to.
• Whether you are a parent or guardian, a student, a staff member, or someone who enquired through this website.
• The email address or phone number the data is linked to, so we can find it.

For data held in the platform on a school's behalf, we confirm the request with the school before acting, because the school is the Data Fiduciary and may be required by law to keep some records (for example fee receipts or attendance registers). For website enquiry data we act directly.

We acknowledge every request within 72 hours and complete it within 30 days, and we tell you what was deleted and anything that had to be retained and why.

Our Grievance Officer under the DPDP Act can be reached at hello@mycampusly.com. We acknowledge grievances within 72 hours and aim to resolve them within 30 days.

If you are not satisfied with our response, you may complain to the Data Protection Board of India.

This website uses only the cookies and local storage needed for it to work — there is no advertising or cross-site tracking. If we add analytics, it will be privacy-preserving (no personal identifiers, no cross-site tracking) or we will ask for your consent first, and we will update this section.

The platform uses session cookies to keep you signed in. The mobile apps do not use advertising identifiers.

We will update this policy when the service or the law changes. Material changes are notified to schools by email and, for the website, by updating the date at the top of this page. Continued use after a change means the updated policy applies.

Campusly Private Limited, House No. 21, Rahmat Colony, Doranda, Ranchi, Ranchi - 834002, Jharkhand, India. Email: hello@mycampusly.com.