1. Who we are (Data Fiduciary)
Aira Nexus Labs (AiraNexus) — operated by CodeLadder Technologies Private Limited.
- Email: admin@airanexus.in
- Privacy contact: privacy@airanexus.in
- Product: AiraNexus school management platform — admin web portal, parent mobile apps (Android & iOS), staff mobile apps (Android & iOS)
2. What data we process and why
We process the following personal data of school staff, parents, and students for the following purposes, on behalf of subscribing schools (the school is the Data Fiduciary for student records; we act as Data Processor under contract):
| Purpose | Data categories | Legal basis |
|---|---|---|
| Daily school communication | Parent name, phone, email | Contract performance + DPDPA Sec 7(a) |
| Student records (attendance, fees, exams, homework) | Student name, photo, class, marks, fee history | Legitimate school administration |
| WhatsApp / SMS notifications | Phone number + opt-in consent | DPDPA Sec 6 (consent) |
| Authentication & security | Username, bcrypt password hash, mPIN hash, device JWT | Contract performance + Legal obligation |
| Payments to school (recharge of platform credits) | Billing contact, GST, transaction reference | Contract performance |
3. Your rights as a Data Principal
Under DPDPA Sec 11–13, you may exercise the following rights with respect to your personal data:
- Access — see what data we hold about you.
- Correct — request correction of inaccurate data.
- Erase — request deletion of your data (school's retention obligations apply — see Section 5).
- Withdraw consent — opt out of WhatsApp/SMS messaging at any time.
- Nominate — nominate a person to exercise your rights in case of death or incapacity.
- Grievance redressal — lodge a complaint with the Grievance Officer (Section 4) or, if unresolved, with the Data Protection Board of India.
How to exercise your rights
- Logged-in parents: open the parent app → Settings → Privacy → “My data” / “Erase my data”.
- WhatsApp opt-out: reply
STOP(or its equivalent in your preferred language) to any message from us. - Direct request: email admin@airanexus.in with subject “DPDPA Rights Request”.
4. Grievance Officer
We respond to all grievances within 7 working days.
Subject prefix
[DPDPA Grievance]5. How long we keep data
| Data category | Retention period |
|---|---|
| Active users (parent / staff) | While the student is enrolled at the school |
| Academic records (marks, attendance, certificates) | 7 years post-departure (Indian education compliance) |
| Communication logs (WhatsApp / SMS / email) | 1 year, then anonymized |
| Erasure requests | Processed within 30 days; non-academic data fully deleted, academic records retained per legal obligation |
| Backups | 30 days rolling, then automatically deleted |
6. Where data is stored
All data is stored in AWS Mumbai (ap-south-1).
No cross-border transfer of personal data takes place in the ordinary course of operations. We do not export data to processors outside India for our core platform.
7. Updates to this notice
This notice was last updated on 8 May 2026. Material changes will be communicated via in-app notification and WhatsApp to active users at least 14 days before they take effect.
For the full corporate privacy policy — including cookies, third-party processors, mobile-app data handling, and security controls — see our Privacy Policy.
This DPDPA notice is effective from 8 May 2026.
Questions or grievances? Email admin@airanexus.in.
