How we handle your school's data

Who owns your data

Your school's data belongs to your school. Not BexraTech, not a parent company, not a partner. You can request a full export - students, parents, fees, attendance, results - in CSV/JSON at any time, no questions asked. Exports typically arrive within 24 hours, and never later than 5 working days (the guarantee in our terms).

If you decide to leave Bexra, you take your data with you. We do not retain a copy after a documented deletion request beyond what is legally required.

Security in transit and at rest

All traffic between your school's browser and Bexra is encrypted with TLS 1.2+. Passwords are stored as one-way hashes (bcrypt). Database access is restricted to a named list of authorized operators only.

Sensitive student data (parent phone numbers, addresses) is never logged in plaintext. We do not sell, share, or use your school's data for marketing.

Backups and recovery

Full database backups run nightly and are retained for 30 days. Point-in-time recovery is available within the last 7 days. We have tested restore procedures - not just "we have backups," but "we have restored a backup to a fresh environment and it worked."

Uptime and incident response

Bexra runs on managed infrastructure (Vercel for the marketing site, Render for the application backend) with high baseline uptime. We do not currently publish a 99.9% SLA because making one without independent monitoring would be theatre.

When something breaks, on-call is paged. Schools are notified directly via WhatsApp within 30 minutes for any outage that affects login or fee operations.

Support and response times

WhatsApp is the primary channel: +91 94714 89706. Email hello@bexratech.com also works.

During working hours (Mon–Sat, 9 am – 7 pm IST) target response time is under 30 minutes. Outside hours, best-effort; critical issues paged.

Every channel we answer on, with its working hours, is listed on the contact page.

Indian compliance posture

Bexra is built to be compatible with India's Digital Personal Data Protection Act (DPDPA) 2023. We collect the minimum data needed to run a school portal - student profile, parent contact, academic records - and never resell or reuse it elsewhere.

Student data is stored on infrastructure with data residency in India where possible. Parent consent for receiving WhatsApp messages is managed at the school level; opt-outs are honoured immediately.

Open questions we will answer

• Where is the database located? - Currently Singapore (closest low-latency region with stable infra). Migration to an Indian region is on the roadmap.
• Are you ISO 27001 / SOC 2 certified? - No, not yet. Auditing while at zero customers is theatre; we will pursue certification once 50 schools are running on Bexra.
• What happens to data if BexraTech shuts down? - All customers receive a full data export and 90 days of read-only access. Documented in the terms.
• Who builds Bexra? - A product team building for Indian schools since 2023. What we have shipped year by year is on the about page.

Still have questions?

WhatsApp us directly. We will not fob you off to a sales SDR.