Privacy Notice

2. Information Handled by the Platform

• Account & Contact Data: Name, work email, phone number, role, institute name, login credentials.
• Institute Operations Data: Course syllabi, batch timings, classroom details, fee installment schedules.
• Learner Records Entered by Institutes: Student name, student ID, attendance marks, test scores, guardian contact details, fee payment references entered by authorized institute staff.
• Technical Logs & Telemetry: IP addresses, browser types, audit trail timestamps, error diagnostics for system security and operational integrity.
• AI Generation Prompts: Syllabus topics and draft question inputs submitted to the AI Paper Generator.

3. Legal Roles: Data Fiduciary vs Data Processor

For personal data entered by an institute concerning its students, guardians, and faculty, the institute acts as the Data Fiduciary (Data Controller). The institute determines the lawful basis and permissions for collecting learner information. Expolio Group acts as the Data Processor (Service Provider), processing records strictly to provide and maintain the software service on behalf of the customer institute.

4. Multi-Tenant Security & Isolation

ClassPilot employs strict multi-tenant database isolation. Each institute’s student records, fee collection records, and custom question papers are isolated and restricted by role-based authorization controls. No academy has access to another academy’s confidential records. Data in transit is secured using modern TLS encryption.

5. Minor Learners and Student Privacy

Institutes using ClassPilot to manage records of minor students must ensure that lawful parental or guardian consent has been obtained where required by law. ClassPilot does not use student personal data for advertising, behavioural profiling, or commercial resale.

6. Data Retention and Export

Records are retained for the duration of the institute’s active subscription. Institute administrators maintain the ability to export student records, attendance reports, and fee transaction logs to CSV and spreadsheet formats. Upon account termination, customer data is held for an export grace period prior to secure de-identification or scheduled deletion.

7. Individual Data Rights & Inquiries

Individuals seeking access, correction, or deletion of learner records entered by an institute should contact that specific institute administrator directly. For inquiries regarding platform-level data or privacy requests regarding Expolio software services, contact: