This policy explains how Framing Ideaz AI & Tech Pvt. Ltd. ("Acado", "we") handles personal data on the acado.app website and in the Acado mobile and web applications. It is written to meet the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and the rules under them.
Two roles, two sets of data
Institution records. Student, parent and staff records inside Acado are collected and owned by the school, college or group that uses Acado (the "institution"). The institution decides what is collected and who may see it. Acado processes that data only on the institution's instructions, under a written agreement, and does not use it for any purpose of its own. If you are a student, parent or staff member, questions about your record go first to your institution, and we help them answer.
Website and enquiry data. When you visit acado.app, book a demo, write to us or use WhatsApp, we are the data fiduciary for what you share with us. The rest of this policy covers both roles and says which applies where.
What we collect
- Enquiries: the name, institution, role, email and phone number you give us when you book a demo or write to us, and what you tell us about your requirements.
- Website use: pages visited, the device and browser type, approximate location from your IP address, and the referring site. Where advertising tags are active (see Cookies), the tag's provider also receives this.
- App accounts: institutions create accounts for their staff, students and parents. The app stores your login identifier, name, role and the institution you belong to, and the records the institution keeps about you (attendance, fees, marks, timetable, notices and similar).
- App diagnostics: crash reports and performance data through Firebase Crashlytics, which include the device model, operating system version and a technical trace of the error. These do not include the contents of your institution's records.
- Device permissions: the app asks for permissions only for the feature that needs them: notifications for alerts, camera or photos when you choose to attach a photo or document, and location only in features that use it (for example transport tracking by a driver's device) and only while that feature is in use. You can withdraw a permission in your device settings; the related feature then stops working.
We do not collect data from children directly. Student records are created by the institution, which obtains the consent of the parent or guardian as the law requires. Parent and student app access is set up by the institution.
Why we use it
- To provide the Acado service to institutions and to the people they give access to.
- To answer enquiries and arrange demonstrations.
- To send service messages: fee receipts, absence alerts, notices and similar, on the institution's behalf, through the app, SMS, email or WhatsApp as the institution has configured.
- To keep the service secure, find and fix faults, and improve it.
- To measure the effectiveness of our own advertising, where tags are active.
- To meet legal obligations.
We do not sell personal data, and we do not use institution records for advertising or profiling.
Who sees it
- Your institution and the roles it has authorised. Acado shows each person only what their role allows.
- Our team, to the extent needed to run, support and secure the service, under confidentiality obligations.
- Service providers that process data for us under contract: cloud hosting in data centres in India, email and SMS delivery, push notification services, crash reporting (Firebase), and payment gateways (Razorpay, PayU) when a fee is paid online. Payment card and bank details are entered on the gateway's own pages and are never stored by Acado.
- Authorities, where the law requires it.
We do not transfer institution records outside India unless the institution asks us to and the law permits it.
Cookies and tracking
The website sets no cookies of its own. Your theme choice (Brand, Light or Dark) is stored on your device only. When our advertising tags are active, the Meta Pixel and similar tools may set cookies to measure whether an advertisement led to an enquiry; you can block these in your browser. The apps do not use advertising identifiers.
How long we keep it
Institution records are kept for as long as the institution's agreement with us runs, and are returned or deleted on its instruction when it ends, except where the law requires longer retention (for example fee receipts under tax law). Enquiry data is kept for up to two years from the last contact. Diagnostic data is kept for 90 days.
Security
Data is encrypted in transit and at rest, each institution's data is kept separate, access is by role and protected by one-time passwords where enabled, and backups are taken daily. Our Security page says more.
Your rights
Under the Digital Personal Data Protection Act you can ask to see the personal data held about you, to have it corrected or updated, to have it erased when it is no longer needed, and to withdraw consent you have given. You can also nominate someone to exercise these rights for you.
For records held by your institution, ask the institution; it will act on your request in Acado, and we will help it do so. For data we hold as fiduciary, write to [email protected]. App users can ask for their account and the data we hold to be deleted through our Account and data deletion page.
Grievances
Our Grievance Officer is Mir Javid Ahmad, reachable at [email protected] or by post at Hall No 2, Block C, STPI Tower, SIDCO Industrial Estate, Rangreth, Srinagar 190007, Jammu & Kashmir. We acknowledge grievances within 48 hours and aim to resolve them within 30 days. If you are not satisfied, you may approach the Data Protection Board of India. Our Complaints and grievances page sets out the process.
Changes
We will post changes to this policy here, with the date above, and tell institutions of material changes in advance.
Contact
Framing Ideaz AI & Tech Pvt. Ltd., Hall No 2, Block C, STPI Tower, SIDCO Industrial Estate, Rangreth, Srinagar 190007, Jammu & Kashmir. Email [email protected].