1. Who is responsible for your data
For data you enter about your centre, your staff, your students and their parents, your tuition centre is the data controller (or “data fiduciary” under the DPDP Act) and TutorOne is the processor acting on your instructions. You decide what to collect and how long to keep it; we provide the tools and the safeguards.
For your own account and billing information, TutorOne is the controller.
2. What we collect
We collect only what the product needs to function:
- •Account information — your name, email, phone number, centre name and address.
- •Student and parent records you enter — names, contact details, class/standard, attendance, fee records, test results and progress notes.
- •Payment information — handled by Razorpay. Card numbers and UPI credentials are processed by Razorpay and never stored on TutorOne's servers.
- •Technical data — IP address, browser type, and log data needed to keep the service secure and diagnose faults.
3. Children's data
Student records frequently relate to children. We do not use children's data for advertising, profiling or any form of behavioural targeting, and we do not sell it — to anyone, ever.
Progress reports can be shared through unguessable links. Those pages carry a noindex directive so search engines do not index them, and the centre can revoke any link at any time.
Consent for collecting a child's data is obtained by your centre from the parent or guardian, in line with your own admission process.
4. How we use data
To provide the service: recording attendance, generating invoices, running tests, producing progress reports, and sending the notifications you configure.
To keep the service secure: detecting abuse, preventing fraud, and maintaining backups.
To support you: responding when you contact us, which may involve looking at your account with your permission.
We do not sell personal data, and we do not use your students' data to train machine-learning models.
5. Who we share data with
We share data only with service providers necessary to run TutorOne, each handling a specific function:
- •Razorpay — payment processing.
- •Our hosting and database providers — storing your data.
- •Email and SMS providers — delivering the notifications you enable.
- •Vercel Web Analytics and Speed Insights — anonymous, aggregated measurement of which pages are visited and how quickly they load. These do not use cookies, do not track you across other websites, and do not build a profile of you.
- •We may disclose data if legally required to do so, and we will tell you unless we are prohibited from doing so.
6. Security
Data is transmitted over HTTPS and stored with access controls that keep each centre's data separated from every other centre's. Passwords are hashed, never stored in readable form. Staff access inside your centre is limited by role, so a teacher sees their own batches rather than your finances.
No system is perfectly secure. If a breach affects your data, we will notify you and the relevant authority as required by law.
7. How long we keep data
We keep your data for as long as your account is active. After cancellation we retain it for 90 days so you can export or reactivate, then delete it. You can request earlier deletion at any time.
8. Your rights
Depending on your jurisdiction, you can:
- •Access the personal data we hold about you.
- •Correct data that is inaccurate.
- •Request deletion of your data.
- •Export your data — every account can export students, attendance, invoices and payments to Excel or CSV at any time, without asking us.
- •Withdraw consent for optional processing such as marketing emails.
9. Cookies and analytics
We use cookies that are necessary for the service to work — keeping you signed in and keeping your session secure. We do not use advertising cookies or sell data to ad networks.
We measure how the site is used with Vercel Web Analytics and Speed Insights. Both are cookieless: they record which page was visited and how quickly it loaded, without storing anything on your device, without following you to other websites, and without building a profile of you. That is why you are not being asked to accept a cookie banner.
10. Changes to this policy
If we make a material change we will notify account holders by email before it takes effect. The date at the top of this page always reflects the current version.
11. Contact
Questions about privacy, or a request about your data: email support@tutorone.in. A real person reads it.