This Privacy Policy explains how TACHY EDTECH PRIVATE LIMITED ("TACHY", "we", "our", "us"), the operator of the TACHY SCHOOL ERP platform, collects, uses, stores, shares and protects information when a school, college, university, coaching centre, consultancy or other institution ("Institution", "Client") and its students, parents/guardians, teachers and staff (together, "Users", "you") use:
- The web application at erp.tachy.in, schoolerp.tachy.in, or any Institution-specific subdomain running the same platform
- The Android/iOS apps built for individual Institutions (WebView-based apps distributed via Google Play / App Store under each Institution's own listing)
- Related services: fee collection & payment gateway integration, SMS/WhatsApp/email notifications, AI-assisted attendance, and the Chat Tachy messaging integration
TACHY provides the software platform. The Institution you are enrolled with or employed by decides what student/staff records it maintains on the platform and is the primary point of contact for questions about its own use of your data — TACHY processes that data on the Institution's behalf and secures it under this Policy.
1. Information We Collect
| Category | Examples | Source |
|---|---|---|
| Identity & contact | Name, date of birth, gender, photo, address, phone, email, parent/guardian details, admission/employee ID | Provided by the Institution or by you during admission/onboarding |
| Academic & employment records | Class/section or department, attendance, exam results, report cards, certificates, homework, timetable, leave records | Entered by Institution staff in the ordinary course of running the Institution |
| Biometric / face recognition data | Facial embeddings generated from an enrolment photo, used only where an Institution has opted into AI-assisted attendance | Camera capture or uploaded photo, with the Institution's opt-in; never collected for Institutions that don't enable this feature |
| Location data | Approximate/precise device location, used for opt-in features such as staff geofenced attendance or transport/bus tracking | Android/browser location permission, requested only when such a feature is enabled and only while it's in active use |
| Financial & payment data | Fee invoices, payment/receipt records, transaction references, bank/UPI details an Institution provides for receiving fees | Fee collection module; payments themselves are processed by our payment gateway partners (see Section 4) — we do not store your card, UPI PIN or net-banking credentials |
| Communications | In-platform messages, support/complaint tickets, notifications sent via SMS, WhatsApp (Chat Tachy) or email | Generated when you or Institution staff use messaging/support features |
| Photos, videos & documents | ID card photos, homework/assignment files, recorded live classes, uploaded certificates | Files you or Institution staff choose to upload — the app never scans your device's full photo library |
| Device & usage data | IP address, browser/device type, push-notification token, login timestamps, security/audit logs | Automatically recorded for security, fraud prevention and service reliability |
2. How We Use Information
- Operate the core service: admissions, attendance, academics, examinations, fee collection and communication between an Institution and its students/staff/parents
- Process payments and reconcile fee records through our payment gateway partners
- Send transactional notifications (fee reminders, attendance alerts, results, notices) via SMS, WhatsApp or email
- Provide AI-assisted attendance only where an Institution has explicitly enabled that module
- Maintain platform security, prevent fraud/abuse, and enforce our Terms of Service
- Provide customer support and respond to complaints raised through the in-app support desk
- Comply with applicable Indian law, including education-sector and financial record-keeping requirements
We do not sell personal data to third parties, and we do not use student data for third-party advertising.
3. Legal Basis
We process personal data on the basis of the consent given at admission/enrolment or employment (typically obtained by the Institution on our behalf), the necessity of processing to perform our contract with the Institution, and our legitimate interest in operating a secure and reliable platform — consistent with India's Digital Personal Data Protection Act, 2023 (DPDP Act).
4. How We Share Information
We share personal data only where necessary to run the service, and always under contractual confidentiality obligations:
- Within the Institution — authorised staff (teachers, front office, accounts) who need it to do their job
- Payment gateways — Cashfree, Razorpay, Stripe, Paytm and/or SabPaisa, whichever an Institution has enabled, solely to process a payment you initiate
- Communication providers — SMS/WhatsApp (Chat Tachy Business API) and email delivery providers, solely to deliver notifications you or the Institution triggered
- Hosting & infrastructure providers — to store and serve the platform securely
- Legal & safety — where required by law, court order, or to protect the rights, property or safety of TACHY, an Institution or a User
We never share biometric/face-recognition data outside the Institution that enabled the feature, and never use it for any purpose other than the attendance function it was collected for.
5. Data Storage & Security
- Data is hosted on servers located in India
- All traffic between the app/browser and our servers is encrypted (HTTPS/TLS)
- Passwords are stored using industry-standard one-way hashing; we cannot see your plaintext password
- Role-based access control restricts staff to only the records their role requires
- Security audit logging and rate-limiting protect against unauthorised access
6. Data Retention
We retain personal data for as long as your account with an Institution is active, and thereafter for the period required to meet the Institution's academic/statutory record-keeping obligations or applicable Indian law (including tax and financial record retention rules for payment data). An Institution may request deletion of a former student's/staff member's records earlier, subject to any legal retention requirement.
7. Your Rights
Under the DPDP Act, 2023 you have the right to:
- Access a copy of the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request erasure of your data, subject to the Institution's legal record-keeping obligations
- Withdraw consent for optional features (e.g. AI attendance, location tracking) at any time, without affecting the lawfulness of processing before withdrawal
- Raise a grievance with our Grievance Officer (Section 15) if you believe your data has been mishandled
Requests should generally be routed through your Institution's administrator, who can also reach us directly on your behalf.
8. Account & Data Deletion
While enrolled/employed
Ask your Institution's administrator to correct or remove specific records via the ERP's own admin tools.
Full account/data deletion
Email admin@tachy.in with your name, Institution and registered phone/email. We verify the request with the Institution (since student/financial records may be under its legal retention duty) and confirm once complete, typically within 30 days.
Uninstalling the app
Uninstalling the Android/iOS app only removes it from your device — it does not delete your account or Institution records. Use the deletion request above for that.
9. Permissions Used by the Android/iOS App
| Permission | When requested | Purpose |
|---|---|---|
| Camera | Only when you tap a camera-based action (ID photo, face-attendance capture, document scan) | Capture the specific image you're taking — nothing is captured in the background |
| Location | Only for Institutions using geofenced staff attendance or transport tracking, and only while the relevant screen is open | Confirm you're within an authorised location, or show live bus/transport position |
| Photos / Files | Only when you choose a file via the system Photo Picker / file picker | Upload exactly the file(s) you selected — the app cannot browse your full gallery |
| Contacts (single) | Only if you tap "share a contact" on a form that supports it | Share the one contact you pick — no bulk contact access |
| Notifications | At first app launch | Deliver attendance, fee, exam and message alerts |
| Microphone | Only for Institutions using live class audio/video, and only during an active class session | Enable your audio in a live class you join |
You can review or revoke any permission anytime in your device Settings → Apps → [App Name] → Permissions.
10. Third-Party Services
The platform integrates with the following categories of third-party service, each governed by their own privacy policy:
- Payment gateways — Cashfree, Razorpay, Stripe, Paytm, SabPaisa (whichever an Institution has activated)
- Messaging — WhatsApp Business Platform (via Chat Tachy), SMS gateway providers, email delivery providers
- Maps & location — for Institutions using transport tracking
- Push notifications — Firebase Cloud Messaging
11. Children's Privacy
The platform is used by schools, colleges and coaching centres, and student data will often relate to minors. The Institution (as the enrolling body, typically with parent/guardian consent obtained at admission) is responsible for authorising a student's data on the platform; TACHY processes that data solely to provide the service to the Institution and limits collection to what is necessary for education, attendance and fee-management purposes. We do not knowingly use a minor's data for advertising or sell it to third parties. Parents/guardians who believe a child's data was submitted improperly should contact their Institution or write to us at admin@tachy.in.
12. International Data Transfers
Data is primarily hosted in India. Where an integrated third-party service (e.g. a global payment or messaging provider) processes data outside India, that transfer is subject to that provider's own safeguards and applicable law.
13. Changes to This Policy
We may update this Policy from time to time; the "Last updated" date above will change accordingly. Material changes that affect how we handle your data will be communicated through the app, the Institution's administrator, or this page.
14. Related Policies
This Privacy Policy works alongside our Terms of Service and Refund & Cancellation Policy. In case of any conflict specifically about payments, the Refund & Cancellation Policy governs.
15. Grievance Officer & Contact
In accordance with the DPDP Act, 2023, the following Grievance Officer may be contacted for any complaint about the processing of your personal data:
TACHY EDTECH PRIVATE LIMITED
Reg. No.: U62013BR2026PTC083952
WARD NO 46, CHHAPPARA, PROPERTY NO 1339063, New Jaganpura, Sampatchak, Patna, Bihar, India
Privacy queries: admin@tachy.in
Support / Grievance: care@tachy.in
Phone: +91 84348 01033
Website: tachy.in
See our full Contact Us page for more ways to reach us.
गोपनीयता नीति (संक्षेप में हिंदी)
यह हिंदी अनुभाग केवल सारांश हेतु है। किसी भी विसंगति की स्थिति में अंग्रेज़ी संस्करण मान्य होगा।
- डेटा संग्रह: नाम, संपर्क, शैक्षणिक रिकॉर्ड, फीस/भुगतान, तथा (यदि संस्थान ने सक्षम किया हो तो) उपस्थिति हेतु फेस-रिकग्निशन डेटा।
- लोकेशन: केवल अनुमति पर और सुविधा उपयोग के दौरान — स्टाफ जियोफेंस उपस्थिति या ट्रांसपोर्ट ट्रैकिंग हेतु।
- भुगतान: कार्ड/यूपीआई विवरण हम स्टोर नहीं करते — भुगतान सीधे भुगतान गेटवे पार्टनर द्वारा संसाधित होते हैं।
- डेटा साझा: डेटा नहीं बेचा जाता; सेवा हेतु आवश्यक सिस्टम्स के साथ ही सीमित साझाकरण।
- आपके अधिकार: पहुँच, सुधार, विलोपन तथा शिकायत — DPDP अधिनियम, 2023 के अंतर्गत।
- संपर्क: admin@tachy.in