DPDPA 2023 Notice

Privacy & data protection notice.

Compliant with India's Digital Personal Data Protection Act, 2023 (DPDPA Sec 5, 6, and 8(10)).

DPDPA 2023Stored in India (AWS Mumbai)Last updated: 8 May 2026
Statute: Digital Personal Data Protection Act, 2023Last updated: 8 May 2026Entity: CodeLadder Technologies Private Limited

1. Who we are (Data Fiduciary)

Aira Nexus Labs (AiraNexus) — operated by CodeLadder Technologies Private Limited.

  • Email: admin@airanexus.in
  • Privacy contact: privacy@airanexus.in
  • Product: AiraNexus school management platform — admin web portal, parent mobile apps (Android & iOS), staff mobile apps (Android & iOS)

2. What data we process and why

We process the following personal data of school staff, parents, and students for the following purposes, on behalf of subscribing schools (the school is the Data Fiduciary for student records; we act as Data Processor under contract):

PurposeData categoriesLegal basis
Daily school communicationParent name, phone, emailContract performance + DPDPA Sec 7(a)
Student records (attendance, fees, exams, homework)Student name, photo, class, marks, fee historyLegitimate school administration
WhatsApp / SMS notificationsPhone number + opt-in consentDPDPA Sec 6 (consent)
Authentication & securityUsername, bcrypt password hash, mPIN hash, device JWTContract performance + Legal obligation
Payments to school (recharge of platform credits)Billing contact, GST, transaction referenceContract performance

3. Your rights as a Data Principal

Under DPDPA Sec 11–13, you may exercise the following rights with respect to your personal data:

  • Access — see what data we hold about you.
  • Correct — request correction of inaccurate data.
  • Erase — request deletion of your data (school's retention obligations apply — see Section 5).
  • Withdraw consent — opt out of WhatsApp/SMS messaging at any time.
  • Nominate — nominate a person to exercise your rights in case of death or incapacity.
  • Grievance redressal — lodge a complaint with the Grievance Officer (Section 4) or, if unresolved, with the Data Protection Board of India.

How to exercise your rights

  • Logged-in parents: open the parent app → SettingsPrivacy → “My data” / “Erase my data”.
  • WhatsApp opt-out: reply STOP (or its equivalent in your preferred language) to any message from us.
  • Direct request: email admin@airanexus.in with subject “DPDPA Rights Request”.

4. Grievance Officer

We respond to all grievances within 7 working days.

Subject prefix

[DPDPA Grievance]

5. How long we keep data

Data categoryRetention period
Active users (parent / staff)While the student is enrolled at the school
Academic records (marks, attendance, certificates)7 years post-departure (Indian education compliance)
Communication logs (WhatsApp / SMS / email)1 year, then anonymized
Erasure requestsProcessed within 30 days; non-academic data fully deleted, academic records retained per legal obligation
Backups30 days rolling, then automatically deleted

6. Where data is stored

All data is stored in AWS Mumbai (ap-south-1).

No cross-border transfer of personal data takes place in the ordinary course of operations. We do not export data to processors outside India for our core platform.

7. Updates to this notice

This notice was last updated on 8 May 2026. Material changes will be communicated via in-app notification and WhatsApp to active users at least 14 days before they take effect.

For the full corporate privacy policy — including cookies, third-party processors, mobile-app data handling, and security controls — see our Privacy Policy.

This DPDPA notice is effective from 8 May 2026.
Questions or grievances? Email admin@airanexus.in.

Need to file a DPDPA grievance?

Email admin@airanexus.in with subject “[DPDPA Grievance]” — we respond within 7 working days.

Contact us