Privacy Policy
Last Updated: October 31, 2026 • Operational Version 2.4
1. Overview and Scope
This Privacy Policy explains how Gyanvo (“we”, “our”, or “us”, an endorsed product of Krattix Technologies) handles personal data collected via our public marketing website (gyanvo.com) and how our multi-tenant School Enterprise Resource Planning (ERP) platform manages data on behalf of educational institutions.
Gyanvo is designed around the principles of data minimization, institutional data sovereignty, and India's Digital Personal Data Protection (DPDP) framework for minors' personal information.
2. Roles: Data Fiduciary vs. Data Processor
- The School (Data Fiduciary):The educational institution enrolling students and onboarding faculty remains the primary data fiduciary. The school controls which records are created, modified, or archived.
- Krattix (Data Processor):Krattix provides the secure software infrastructure. We process school data exclusively under the instructions of the authorized school administration and never for independent monetization.
3. Data Collected on the Public Website (gyanvo.com)
When visiting gyanvo.com, we only collect personal information that you voluntarily submit through our “Book a Demo” or contact forms:
- Contact details: Name, Official Mobile Number, and Email Address
- Institutional details: School Name, City, and State
- Voluntary message or operational query
- Timestamp of consent and submission verification tokens (anti-bot)
We never collect student records or payment credentials through our public marketing website.
4. Data Processed within the Krattix ERP Platform
When a school deploys the Krattix ERP, authorized school staff manage the following categories of institutional data:
- Student & Parent Information: Names, admission numbers, class/section assignments, guardian contacts, and optional emergency medical notes. Sensitive government IDs (Aadhaar/National ID) are encrypted at rest with AES-256 and masked on screen.
- Attendance Logs: Daily presence, absence, and late marks recorded by class teachers and sealed at day-end.
- Fee Ledgers: Tuition fee structures, counter payment receipts (Cash, Cheque, POS, counter UPI), late fee adjustments, and concessions.
- Academic Records: Examination schedules, marks entries, subject grades, and generated report cards.
5. Protection of Minor Data & Zero Advertising
Child Privacy Commitment
We strictly uphold that children's educational journeys must be free from commercial surveillance. Krattix does not engage in behavioral profiling, tracking for targeted advertising, or selling student directories to third-party marketing networks.
6. Data Security and Technical Safeguards
We implement comprehensive technical controls to protect institutional data:
- Bcrypt Hashing: Passwords and authentication PINs are salted and hashed one-way.
- Database Scoping: Multi-tenant tenant ID isolation prevents cross-school data visibility.
- Secure Transport: All web and mobile communications are encrypted in transit via TLS 1.3.
- Signed URLs: Student document uploads are stored in private buckets accessible only via short-lived signed tokens.
- Immutable Audit Trails: Sensitive modifications (fee waivers, mark edits) produce permanent audit logs.
7. Legal Entity & Grievance Redressal
In accordance with applicable data protection laws, questions regarding this privacy policy or data processing practices may be directed to our Grievance Officer:
Krattix Technologies
[email protected] or [email protected]