Privacy Policy
Effective Date: January 1, 2026 · Last Updated: August 25, 2026
1. Executive Overview & Corporate Identity
This Privacy Policy applies to the DhruvaOS platform (available at dhruvaos.com, its associated subdomains, mobile applications, and APIs), engineered, operated, and maintained by NeelStack Solutions Private Limited (“NeelStack”, “we”, “our”, or “us”).
NeelStack Solutions Private Limited is committed to protecting the privacy, confidentiality, and security of educational institutions, administrators, educators, parents, and students who utilize DhruvaOS globally.
2. Scope & Applicability
DhruvaOS acts primarily as a Data Processor (under GDPR/UK-GDPR) and Data Fiduciary / Data Processor (under the India Digital Personal Data Protection Act 2023). Educational institutions (Schools, Colleges, Universities) subscribed to our platform act as the primary Data Controllers / Data Fiduciaries determining the purposes and means of processing personal data.
3. Information We Collect
A. Institutional Account Data
Name of institution, principal/admin contact details, billing address, tax identification numbers, and authorized subscription credentials.
B. Academic & Operational Records
Student rosters, attendance registers, examination grades, homework submissions, timetable configurations, and staff HR records entered by the institution.
C. Financial Transaction Data
Payment receipts, order IDs, fee schedules, and subscription tokens. Full card details are processed directly via PCI-DSS Level 1 certified gateways (Razorpay, Stripe, PhonePe) and are never stored on our servers.
D. Technical & Telemetry Data
IP addresses, browser/device user agents, audit event timestamps, and crash logs to maintain system health and detect security intrusions.
4. Children & Student Data Protection (FERPA, COPPA, DPDP Act)
Educational records relating to minors receive our highest degree of technical and organizational safeguards:
- Zero Advertising & Non-Commercial Use: We never sell student data, build commercial marketing profiles, or serve third-party behavioral ads.
- Parental Consent & Rights: Parental access and rights to review or request deletion of minor records are mediated directly through the subscribing institution.
- FERPA & COPPA Compliance: DhruvaOS operates as a “School Official” with legitimate educational interests under FERPA and complies with COPPA verifiable consent standards.
- India DPDP Act 2023: Processing of minors' personal data is conducted strictly with institutional/parental authorization with zero detrimental tracking.
5. Multi-Tenant Architecture & Cryptographic Isolation
DhruvaOS employs physical and logical separation across all tenants. All database transactions enforce strict Row-Level Security (RLS) and schema-isolated data tenancy. Sensitive Personally Identifiable Information (PII) is encrypted at rest using AES-256 / Fernet symmetric encryption keys managed via dedicated Hardware Security Modules (HSMs).
6. Your Data Subject Rights (GDPR & Global Regulations)
Under applicable data protection legislation (including GDPR, UK Data Protection Act, and DPDP Act), authorized users have the right to:
- Right of Access: Request copies of your personal data processed by DhruvaOS.
- Right to Rectification: Request correction of inaccurate or incomplete personal records.
- Right to Erasure (“Right to be Forgotten”): Request deletion of data where legal retention periods have expired.
- Right to Data Portability: Export institutional student and financial records in open, machine-readable formats (JSON/CSV).
7. Data Protection Officer & Grievance Contact
For privacy inquiries, Data Processing Addendum (DPA) requests, or grievance redressals, please contact our Data Protection Office:
Entity: NeelStack Solutions Private Limited
Operations: Bangalore • Gorakhpur (UP), India (Serving Institutions Globally)
Attention: Data Protection Officer / Grievance Officer
Email: contact@neelstack.com
Official Portal: https://dhruvaos.com