Privacy Policy
Last updated: April 14, 2026 · Effective: April 14, 2026
Upkram ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at upkram.in and our mobile application (collectively, the "Service").
1. Information We Collect
1.1 Information You Provide
- Account Information: When you register, we collect your name, email address, phone number, and organization details.
- Student Data: Institution administrators may enter student names, roll numbers, contact details, guardian information, and academic records.
- Payment Information: Fee payment records, transaction amounts, and payment dates as entered by administrators.
- Communication Data: Messages sent through our contact form or support channels.
1.2 Information Collected Automatically
- Usage Data: Pages visited, features used, time spent, and interaction patterns.
- Device Information: Browser type, operating system, device type, and screen resolution.
- Log Data: IP address, access times, and referring URLs.
2. How We Use Your Information
We use the collected information to:
- Provide, maintain, and improve the Service
- Process and manage student enrollment, attendance, fees, and academic records
- Send administrative notifications (fee reminders, attendance alerts, exam schedules)
- Generate reports and analytics for institution administrators
- Respond to your inquiries and provide customer support
- Detect, prevent, and address technical issues and security threats
- Comply with legal obligations
3. Data Storage & Security
Your data is stored on secure cloud servers with industry-standard encryption. We implement appropriate technical and organizational measures to protect your personal information, including:
- Encryption of data in transit (TLS/SSL) and at rest
- Regular security audits and vulnerability assessments
- Access controls limiting data access to authorized personnel only
- Secure authentication with JWT tokens and password hashing
While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
4. Data Sharing & Third-Party Services
We do not sell your personal information. We may share data with:
- Service Providers: Cloud hosting, email delivery, and analytics services that help us operate the platform.
- WhatsApp Business API: When institutions choose to send fee receipts or notifications via WhatsApp, relevant data is shared with WhatsApp/Meta for message delivery.
- Legal Requirements: When required by law, court order, or governmental authority.
5. Cookies & Tracking
We use essential cookies for authentication and session management. These are strictly necessary for the Service to function. We do not use third-party advertising cookies or trackers. You can configure your browser to reject cookies, but some features of the Service may not work properly.
6. Children's Privacy
Our Service is used by educational institutions that may manage data of students under 18 years of age. Such data is entered and managed by institution administrators, not directly by minors. Institution administrators are responsible for obtaining necessary parental or guardian consent before entering minor student data into the platform.
7. Your Rights
You have the right to:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data, subject to legal retention requirements.
- Data Portability: Request your data in a structured, commonly used format (CSV export).
- Withdraw Consent: Withdraw consent for optional data processing at any time.
To exercise these rights, contact us at connect@upkram.in.
8. Data Retention
We retain your data for as long as your account is active or as needed to provide the Service. When an institution deletes their account, we delete associated data within 90 days, except where retention is required by law. Anonymized, aggregated data may be retained indefinitely for analytics purposes.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at: