Privacy & DPDP
Privacy and Data Protection
This notice explains how Anvay School handles personal data, protects school relationships, and supports applicable data-protection obligations.
Effective: 23 August 2026
1. Who operates Anvay School
Anvay School is a product operated by Anvay Innolabs. For privacy or data-protection questions, contact support@anvay.biz.
2. Data we may process
Depending on how a School uses Anvay School, the service may process account identity, School membership, roles, academic relationships, guardian relationships, classes, subjects, enrolments, assignments, announcements, Class Q&A, PTA Help cases, protected conversations, private attachments, notifications, audit events, and basic technical information needed to operate and secure the service.
3. Why we process data
We process data to authenticate users, verify the active School and role, enforce relationship-based access, deliver requested School features, maintain security and auditability, provide support, prevent abuse, and meet applicable legal or contractual obligations.
4. School and child data
Schools and authorised guardians may provide or control information relating to students and school operations. Anvay School is designed so that access depends on verified School membership and the relevant academic or guardian relationship. Parent/Kid Mode uses the signed-in Parent account rather than creating a separate synthetic child login.
5. Private content
Private conversations and private attachments are intended to remain limited to authorised participants and current relationship rules. Platform administration roles do not automatically receive blanket access to School-private conversations or attachments merely because they operate the platform.
6. Data protection and the Indian DPDP framework
Anvay School is designed to support privacy principles and applicable Indian data-protection requirements, including the Digital Personal Data Protection framework where applicable. Actual obligations may depend on the role of the School, the nature of the data, contractual arrangements, and applicable law. This notice does not replace a School's own privacy notice where the School determines how student, parent, or staff information is used.
7. Service providers
We may use infrastructure and technology service providers to host, secure, deliver, monitor, or support Anvay School. They should receive access only to the extent reasonably necessary to provide those services, subject to the arrangements applicable to the service.
8. Retention
Data is retained for as long as reasonably necessary for the service, School records, security, audit, dispute handling, contractual requirements, and applicable law. Some academic history is intentionally preserved as read-only after an Academic Year is archived.
9. Your requests
If you want to ask about access, correction, deletion, grievance handling, consent, or another privacy matter, contact support@anvay.biz. We may need to verify your identity, School, role, guardian relationship, or other authority before acting on a request. Where a School controls the relevant record, we may direct the request to that School.
10. Security
Security measures include passwordless OTP authentication, database-backed role and relationship checks, tenant isolation, private storage for protected attachments, restricted privileged operations, and audit-oriented controls. No system can guarantee absolute security, so users should also protect their email account and devices.
11. Changes to this notice
We may update this notice when the service, legal requirements, or our operating practices change. The current version will be published on this page with its effective date.