Privacy Policy

When a school signs up for Bexra, we collect information provided by the school's administration: school name, address, contact details, and the administrator's name and email address.

Through normal use of the platform, school staff enter student data including names, registration numbers, class and section, date of birth, parent names, and parent contact numbers. This data is entered by school staff - Bexra does not independently collect this data.

We collect usage data such as login timestamps and feature access logs to help diagnose issues and improve the platform. This data does not identify individual users beyond the school's own account.

We do not collect payment card details. Payments are processed via third-party payment providers who are responsible for the security of that data.

The demo form on our website does not send anything to us. It composes a WhatsApp message from what you type and opens WhatsApp with that message ready, which you can read, edit or discard before sending. Nothing is transmitted, recorded or stored on our systems unless you choose to press send in WhatsApp.

We do not run a lead database. There is no server-side record of anyone who opened the form, filled it in, or changed their mind, because the form never contacts our servers at all.

If you do send the message, the conversation lives in WhatsApp under WhatsApp's own terms and privacy policy, and we hold only what you chose to tell us there. We use it to arrange and follow up your demo, and for nothing else: we do not add you to a marketing list and we do not share it with third parties.

You can ask us to delete a WhatsApp conversation with you at any time by emailing hello@bexratech.com, and you can delete your side of it yourself in WhatsApp whenever you like.

School data (student records, fee history, attendance, results) is used solely to operate the platform for that school. We do not use your school's data to train AI models, sell to third parties, or for any purpose beyond delivering the service.

Contact information provided during account setup is used to communicate about the service - account notices, support responses, and platform updates.

We may use anonymised, aggregated usage statistics (for example: "X% of schools use the WhatsApp feature weekly") to understand how the platform is used and guide product decisions. This data cannot identify any school or individual.

Within a school's Bexra account, access is role-based: admin users can see all school data; teachers see only the data relevant to their class; students and parents see only their own data.

Bexra staff may access a school's account data only to provide technical support - and only with the school's knowledge. We do not browse customer data for any other purpose.

We do not share any school or student data with third parties, advertisers, or data brokers. Ever.

All data is stored on secure servers. Data is encrypted in transit (HTTPS) and at rest.

Bexra performs automated daily backups at 2:00 AM IST. Schools can also trigger manual backups at any time. Up to 7 backup copies are retained. Schools can download their backup files at any time.

In the event of a data breach that affects your school's data, we will notify you within 72 hours of becoming aware of the incident, and provide details of what data was affected and what steps we have taken.

Your school's data belongs to your school. Bexra is a custodian of that data - not an owner.

You can request a full export of your school's data at any time by contacting us. We will provide the export in a standard readable format, typically within 24 hours and no later than 5 working days.

If your school cancels its Bexra subscription, your data will be retained for 30 days after the cancellation date, during which you can request an export. After 30 days, data will be permanently deleted from our systems.

Bexra handles student data as a data processor on behalf of schools (who are the data controllers). Schools are responsible for ensuring they have appropriate consent to enter student data into the platform.

Bexra does not process student data for any purpose other than operating the platform for the school that entered the data.

We are committed to compliance with India's Digital Personal Data Protection Act (DPDPA) and applicable data protection regulations. If you have questions about compliance, contact us directly.

The Bexra marketing website (bexratech.com) uses minimal cookies - only those necessary for the website to function correctly, such as the session cookie set when a school signs in to its own portal.

We do not use advertising cookies, tracking pixels, or third-party analytics cookies on school portal pages.

The marketing pages may use analytics tools to understand visitor traffic in aggregate. If we use any such tool, it is configured without persistent user identification.

We will notify schools of material changes to this privacy policy by email (to the registered school admin email) at least 14 days before the changes take effect.

The effective date at the top of this page shows when this version was last updated.

If you have any questions about this privacy policy, how your school's data is handled, or to make a data access or deletion request, contact us at: hello@bexratech.com or WhatsApp/phone: +91 94714 89706.

We aim to respond to all privacy-related enquiries within 2 working days.