Privacy Policy

1. Introduction & Scope

This Privacy Policy governs the manner in which Shubham Nema, operating under the trade name Uttar Mitra ("we", "us", or "our"), with registered office at Subhash Nagar Shastri Ward, Behind Indra Eye Hospital, collects, uses, maintains, and discloses personal data collected from users (including students, parents, teachers, and school administrators) of the website https://uttarmitra.in, VidyaCore School ERP, and associated web & mobile applications.

2. Information We Collect

We may collect information directly from you or through educational institutions partnering with us, including:

• Personal Identifiers: Name, mobile phone number, email address, student roll number, grade/class, and school affiliation.
• Payment & Billing Metadata: Transaction identifiers, payment timestamps, and subscription tier. Note: All credit card, debit card, UPI, and net banking transactions are processed securely via RBI-authorized payment aggregators (e.g., Cashfree / Razorpay). We do not store raw credit card numbers or CVVs on our servers.
• Academic & Usage Data: AI doubt queries asked, practice quiz scores, attendance logs recorded by schools, and report card summaries.
• Technical Metadata: IP address, device type, browser specifications, and session cookies necessary for authentication.

3. How We Use Collected Information

We process your data exclusively for legitimate educational and service purposes:

• To authenticate and maintain user accounts across web and mobile platforms.
• To generate real-time AI doubt explanations, chemical equations, and study aids.
• To dispatch critical institutional alerts (fee receipts, attendance updates, transport telemetry) via SMS, WhatsApp, and email.
• To process subscription payments, issue digital tax invoices, and manage refunds.
• To comply with statutory legal requirements under the Digital Personal Data Protection (DPDP) Act 2023.

4. Zero Sale of Student Data

We do NOT sell, rent, or trade student or institutional personal data to third parties, advertisers, or data brokers. Your data is accessed only by authorized personnel strictly for system administration and educational service delivery.

5. Data Storage, Residency & Security

In full alignment with Indian data localization guidelines, all databases are hosted strictly within sovereign Indian cloud data centers. We implement industry-leading technical measures including AES-256 encryption at rest, TLS 1.3 transit encryption, rate limiting, and zero-trust role-based access control.

6. User Rights

Under the DPDP Act 2023, you retain the right to:

• Request a copy of your stored personal information.
• Request correction or updating of inaccurate data.
• Request deletion of your account and personal identifiers (subject to mandatory tax and accounting record-keeping laws).
• Withdraw consent for optional communications at any time.

7. Grievance Officer & Contact Details

For any privacy inquiries or grievances, contact our designated Grievance Officer: