Privacy Policy

1. Overview & Scope

This Privacy Policy describes how Velyx ("we", "us", or "our"), operated by Ksheer Sagar (Legal merchant: Geeta Kumari), collects, uses, processes, and safeguards the personal and academic information collected through the Velyx ERP platform, mobile applications, and official Meta WhatsApp Cloud API automation workflows.

2. Information We Collect

We collect information necessary to operate school management and student academic workflows:

• Account Credentials: Full name, institutional email address, phone number, encrypted password hash, and assigned institutional role (Owner, Admin, Teacher, Student, Guardian).
• Student & Academic Records: Batch enrollment, course registration, attendance timestamps, grade transcripts, homework submissions, and timetable allocations.
• Financial & Fee Data: Fee invoices, transaction reference IDs, split payment ledgers, and UPI confirmation IDs. We do not store raw credit card numbers or banking passwords.
• Messaging Metadata: WhatsApp phone numbers and message delivery receipts necessary to confirm dispatch of attendance alerts and invoices via Meta Cloud API.

3. Meta WhatsApp Cloud API Data Handling

As an official Meta WhatsApp Tech Provider, message content and delivery receipts are routed securely through Meta Platforms Cloud API infrastructure in compliance with Meta's Developer Terms and WhatsApp Business Messaging Policies. Message logs are retained strictly for institutional delivery confirmation and audit trails.

4. Data Isolation & Security

Each institution's data is logically isolated using tenant-scoped identifiers and schema-level separation. We implement industry-standard TLS 1.3 encryption in transit, AES-256 encryption at rest, and strict role-based access control (RBAC).

5. Data Retention & Deletion

Institutions retain full ownership of their student and staff data. When an institution terminates its account, academic records can be exported in standardized formats, and data deletion requests are honored in accordance with applicable education privacy standards.

6. Contact the Data Controller

Velyx is operated and managed by Ksheer Sagar (Merchant Legal Name: Geeta Kumari).