Privacy Policy

Effective from 2 November 2026

ShulkBook ("ShulkBook", "we", "us") is a product of [[LEGAL_NAME]], [[ADDRESS]]. This policy explains what personal data we handle when you use the ShulkBook website, web app and the payment and receipt links we send, and the choices you have. It is written to follow the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

1. Who this applies to

For student and parent data, the centre decides what to record and why, and is responsible for having a lawful basis to share it with us. We process that data only on the centre's instructions, to provide the service.

2. Data we collect

FromData
Centre ownersMobile number (for sign-in by one-time code), name, centre name, city, logo, UPI ID, language preference, subscription payments.
Students and parents (entered by the centre)Student name, class or batch, parent's name and WhatsApp number, fee plans, dues, payments, receipts, notes.
Parents using a pay linkThe UPI transaction reference and, if they choose to upload one, a payment screenshot.
EveryoneBasic technical logs (IP address, browser type, time of request) kept for security and to fix errors.

We do not collect bank account, card or UPI PIN details. Payments happen inside the parent's own UPI app, directly to the centre.

3. How we use it

We do not sell personal data, and we do not use student or parent data for advertising.

4. WhatsApp and messages

Reminders and receipts are sent to parents on WhatsApp by the centre, from the centre's own WhatsApp. If we later send messages through the WhatsApp Business Platform (Meta), only the parent's phone number and the message content are shared with Meta for delivery, under Meta's terms. Parents can ask the centre to stop reminders at any time.

5. Sharing

We share data only with service providers that help us run ShulkBook (cloud hosting, SMS delivery of sign-in codes, email), under contracts that require them to protect it, or when required by law. Each centre's data is kept separate and is never visible to another centre.

6. Storage and security

Data is stored on secure cloud servers with encryption in transit (HTTPS). Access is limited by role, every centre's records are isolated at the database level, and payment records are kept tamper-evident with an audit log. Files such as receipts and screenshots are served only through private, expiring links.

7. How long we keep it

We keep a centre's data while its account is active. After an account is closed, we delete it within 90 days, except payment and receipt records that the law requires us or the centre to retain for accounting (up to 8 years). Technical logs are kept for up to 180 days.

8. Your rights and data deletion

You can ask to access, correct or delete your personal data, withdraw consent, or nominate someone to act for you.

We reply within 30 days.

9. Children

Student records may relate to children. They are added by the centre, with the parent's knowledge, only to manage fees. We do not track children or show them advertising.

10. Cookies

The app uses one essential cookie to keep you signed in. We do not use advertising or third-party tracking cookies.

11. Grievance Officer

[[GRIEVANCE_OFFICER]], Grievance Officer
[[LEGAL_NAME]], [[ADDRESS]]
Email: hello@shulkbook.com · Phone: +91 [[PHONE]]

If you are not satisfied with our response, you may complain to the Data Protection Board of India.

12. Changes

We will post any changes on this page with a new effective date, and tell centre owners in the app about important changes.