Privacy Policy

Last updated: 2 October 2026

This policy explains what personal data Indigle collects through indigle.com, why we collect it, who we share it with, how long we keep it, and the rights you have. It is written to meet India's Digital Personal Data Protection Act, 2023 (DPDP Act), and we apply the same practices to visitors from other countries.

1. Who we are

Indigle ("we", "us") is the data fiduciary (data controller) for personal data collected on this website. We are based in Gorakhpur, Uttar Pradesh, India.

  • Email: [email protected] (use the subject line "Privacy request")
  • Phone: +91-9555462178
  • Grievance Officer: questions and complaints about personal data can be sent to our Grievance Officer at the email address above.

2. What we collect and why

When you contact us

Your name, email address, optional phone number, and message. We use them only to reply to your enquiry and follow up on it.

When you register your school

Your school's name, your name, email address, phone number, and a password. We use them to create and run your school's Indigle account, take payment, set up your Indigle School ERP login, and contact you about your subscription. We store your password only as a one-way hash. To set up your ERP login we also keep an encrypted copy for a short time; it is deleted once your account is set up, and in any case within 7 days. We also record when you accepted our terms and this policy, and which version you accepted.

When you pay

Payments are handled by Razorpay. We never receive your card, UPI, or bank details. We keep the Razorpay order and payment references, the amount, and whether the payment succeeded, so we can issue invoices and resolve disputes.

Security and abuse prevention

When you submit a form or sign in, we record your IP address and browser type in our security logs and use your IP address to limit repeated submissions. This protects the site and your account from abuse.

Analytics (only if you allow it)

If you choose "Allow analytics", we use Google Analytics to understand which pages are visited and how the site is used. If you do not allow it, Google Analytics is not loaded.

We do not collect more than we need for these purposes, and we do not use your data for automated decisions about you.

3. Our legal grounds

  • Your consent for analytics cookies. You can withdraw it at any time, as easily as you gave it.
  • Data you give us for a specific purpose (DPDP Act, section 7(a)), such as an enquiry or a registration. Outside India, this corresponds to performing a contract with you or our legitimate interest in answering you.
  • Legal obligations, such as keeping invoices and payment records under Indian tax and company law.
  • Security, to protect the website and accounts against fraud and abuse.

4. Cookies and similar storage

  • Essential (always on): a sign-in cookie for Indigle staff using our admin console, and a small entry in your browser's storage that remembers your cookie choice.
  • Analytics (off unless you allow it): Google Analytics cookies (_ga and _ga_*), which Google keeps for up to 2 years.

We do not use advertising or cross-site tracking cookies. You can change your choice any time with the "Cookie settings" button in the footer. If you turn analytics off, we delete the analytics cookies from your browser.

5. Who we share data with

  • Razorpay, to process payments.
  • Google, for analytics, only if you allow it.
  • Cloud hosting and database providers that run this website for us.
  • Indigle School ERP, our school management service, to create your school's account after you pay.
  • WhatsApp (Meta), only if you choose to message us on WhatsApp. Their privacy policy applies to that conversation.
  • Authorities, when the law requires it.

These providers may only use your data to provide their service to us. We do not sell your personal data, and we do not share it for advertising.

6. Student and staff data in Indigle School ERP

Schools that use Indigle School ERP decide what student, parent, and staff data goes into it. For that data the school is the data fiduciary, and Indigle processes it on the school's behalf under our agreement with the school. If you are a student, parent, or school staff member, please send requests about that data to your school first.

7. How long we keep data

  • Contact enquiries: 24 months, then deleted.
  • Registrations that were never paid for: 90 days, then the personal details are erased.
  • Encrypted copy of your registration password: deleted once your ERP login is set up, and at most after 7 days.
  • IP addresses and browser details in security logs: 180 days, then removed.
  • Staff sign-in sessions: deleted 30 days after they end.
  • Customer account details: for as long as your school has an Indigle account.
  • Invoices and payment records: up to 8 years, as required by Indian tax and company law.

8. Your rights

You can ask us to:

  • give you a summary of the personal data we hold about you and how we use it, in a machine-readable file;
  • correct, complete, or update your data;
  • erase your data (we will tell you if we must keep some of it by law, and why);
  • withdraw consent you have given;
  • handle a complaint about how we use your data;
  • accept a person you nominate to act for you if you die or become unable to act.

If you are in the EU, UK, or California, you also have the rights your local law gives you, including to object to or restrict processing and not to be treated differently for exercising your rights.

How to make a request: email [email protected] from the email address your data is linked to, with the subject "Privacy request". We may ask you to confirm your identity before acting. We reply within 30 days. If you are not satisfied with our response, you can complain to the Data Protection Board of India, or to the data protection authority where you live.

9. Security

The site is only served over HTTPS. Passwords are stored as one-way hashes, temporary credentials are encrypted, and our admin console is limited to authorised staff, with sign-ins and account changes logged. No system is perfectly secure; if a breach affects your personal data, we will tell you and the Data Protection Board of India as the law requires.

10. Data stored outside India

Some of our providers, including our database host and Google, may store or process data outside India. We only use providers that protect it to the standard described in this policy, and we follow any restrictions the Government of India places on transfers to particular countries.

11. Children

This website is for school owners and administrators. It is not meant for anyone under 18, and we do not knowingly collect children's personal data through it. If you think a child has sent us personal data, contact us and we will delete it.

12. Changes to this policy

When we make a material change, we will update the date above and, if you have an account with us, tell you by email before the change takes effect.