Privacy Policy

1. Introduction

TutionMat (“we”, “us”, or “our”) operates the website tutionmat.in and the TutionMat software platform. This Privacy Policy explains how we collect, process, store, and safeguard personal information in compliance with India's Digital Personal Data Protection (DPDP) Act 2023 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

2. Information We Collect

Depending on whether you are an Institute Owner, Teacher, Student, or Parent, we collect:

• Account & Profile Data: Name, email address, mobile number, institute name, address, and password hash (passwords are one-way encrypted using bcrypt).
• Student & Parent Records: Student full name, roll number, course/batch assignment, and parent WhatsApp contact number provided by the coaching center for communication.
• Academic & Attendance Data: Daily present/absent timestamps, test scores, batch rankings, homework submissions, and uploaded study notes.
• Fee & Payment Logs: Course fee structure, installment amounts, payment dates, mode of payment (Cash/UPI/Bank), and receipt numbers. Note: We do not collect or store sensitive card numbers or bank net banking passwords. All digital payments are processed by RBI-authorized payment gateways.
• Technical Information: IP address, device type, browser information, and session logs to detect fraudulent access and ensure platform security.

3. How We Use Your Information

We process collected data solely for the following legitimate purposes:

• Operating your coaching workspace, batches, and student roster
• Dispatching automated WhatsApp notifications (absent/present alerts and digital fee receipts) on your instruction
• Generating verifiable UPI QR fee receipts and student performance rank cards
• Powering the AI question paper generator based on topics you request
• Authenticating users and isolating data between different coaching academies
• Providing customer support and debugging technical errors

4. WhatsApp Communication & Parent Consent

TutionMat acts as a technical intermediary to help coaching centers communicate with parents. The institute confirms that parents have consented to receive essential academic and attendance updates on their provided WhatsApp number. TutionMat only sends transactional alerts (e.g., “Dear Parent, Rahul Verma was marked Absent today” or “Fee receipt for ₹3,500 generated”). We do not send promotional ads to parents.

5. Data Security & Encryption

We implement industry-standard security safeguards to protect your personal information:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted in transit.
• Database Isolation: Multi-tenant isolation ensures one coaching institute can never access another institute's student lists or revenue.
• Role-Based Access: Teachers can only see attendance and tests; fee records are strictly restricted to the institute owner.
• Automated Daily Backups: Redundant encrypted backups ensure your academic history is safe from data loss.

6. Third-Party Service Providers

We partner with trusted third-party providers strictly to deliver platform infrastructure:

• Cloud Hosting & Database Providers (MongoDB Atlas, Vercel/Cloud Infrastructure)
• SMS/WhatsApp Gateway API Providers for alert delivery
• Certified Payment Gateways (Razorpay/Cashfree/Stripe) for subscription payments

These service providers are bound by strict non-disclosure and data protection agreements and are prohibited from using your data for any other purpose.

7. Your Rights Under Indian Data Law

Under the DPDP Act 2023, you have the right to:

• Access & Export: Request a full export of your student, attendance, and fee records at any time.
• Correction: Update or correct any inaccurate student or institute details directly from your dashboard.
• Data Deletion (Right to be Forgotten): Request permanent deletion of your institute data upon terminating your account by emailing support@tutionmat.in.

8. Cookies & Local Storage

We use minimal cookies and browser local storage strictly for essential platform functionality:

• JWT Authentication tokens to keep your session logged in securely
• Theme preferences (light/blue/monochrome)

We do not use invasive third-party tracking cookies across external websites.