Privacy Policy

Campushost is a school Enterprise Resource Planning (ERP) platform provided by Campushost, a company incorporated in India with its registered office at Raebareli, Uttar Pradesh, 229001, India.

Schools that use Campushost decide what personal data they process and why. Under India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”), the school is generally the Data Fiduciary for the personal data of its students, parents, guardians, and staff, and Vellumarc acts as a Data Processor that processes that data only on the school’s documented instructions. Where we determine the purposes and means of processing (for example, operating and securing the platform itself), we act as a Data Fiduciary for that limited processing.

If you are a parent, guardian, student, or staff member and have questions about how your data is used, please contact your school in the first instance, or reach us using the details in the Grievance Officer section.

Depending on how Campushost is used, we may process:

• Contact & identity data of parents, guardians, students, and school staff — such as name, mobile phone number, email address, and relationship to the student.
• School records entered by the school — such as fee and payment status, admission and enrolment details, class/section, attendance, and related academic or administrative information.
• WhatsApp messaging data — the phone numbers we send messages to, the content of notifications and reminders sent, and message delivery/read status returned by the WhatsApp Business Platform.
• Technical & usage data — such as log data, IP address, device/browser type, and actions taken within the platform, used for security and to operate the service.

We do not intentionally collect special categories of sensitive personal data beyond what a school chooses to enter into the platform.

We use personal data to:

• Provide, operate, and maintain the Campushost platform;
• Send fee reminders, payment confirmations, and administrative notifications to parents and guardians over WhatsApp, on the school’s instructions;
• Provide customer support and respond to requests;
• Secure the platform, prevent fraud and abuse, and maintain audit logs;
• Comply with legal obligations and enforce our Terms of Service.

We do not sell personal data, and we do not use the contents of WhatsApp messages for advertising.

Campushost uses the WhatsApp Business Platform (provided by Meta Platforms, Inc. and its affiliates) to deliver messages to parents and guardians through our messaging provider, Meta Cloud API.

• Opt-in. Messages are only sent to recipients whose phone numbers the school has provided and who have opted in to receive communications. Schools are responsible for obtaining and recording that consent.
• Message types. We send transactional and utility messages such as fee reminders, payment receipts, attendance and admission updates, and similar school notifications.
• Opt-out. Recipients can stop receiving WhatsApp messages at any time by replying STOP, by blocking the sender in WhatsApp, or by asking their school or us to remove their number.
• Meta’s role. When we send messages, Meta processes the phone number and message content to deliver them, as described in Meta’s own privacy and WhatsApp Business terms.

Under the DPDP Act, we and the schools we serve process personal data on the basis of consent and for legitimate uses permitted by law. Schools are responsible for providing the required notice to, and obtaining consent from, the individuals (Data Principals) whose data they enter into Campushost, including consent to receive WhatsApp communications.

We share personal data only as needed to run the service and never sell it. Our sub-processors include:

• Meta Platforms (WhatsApp Business Platform) — to deliver WhatsApp messages;
• Messaging provider — Meta Cloud API (our WhatsApp Business Solution Provider);
• Hosting & infrastructure — Vercel;

We may also disclose personal data where required by law, to comply with legal process, or to protect the rights, safety, and security of our users, the public, or Vellumarc.

We retain personal data for as long as a school uses Campushost and as needed to provide the service. After an account or engagement ends, we retain data for 90 days after account closure, unless a longer period is required by law, after which it is deleted or irreversibly anonymised. See our Data Deletion page for how to request earlier deletion.

We use reasonable technical and organisational measures — including encryption in transit, access controls, and audit logging — to protect personal data against unauthorised access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Subject to the DPDP Act, and typically exercised through the school that holds your data, you have the right to:

• Access and obtain a summary of your personal data;
• Correct, complete, or update inaccurate data;
• Request erasure of your personal data;
• Nominate another person to exercise your rights;
• Raise a grievance about how your data is handled (see below).

To exercise these rights with us directly, contact our Grievance Officer or email privacy@campushost.in.

Campushost processes data about students, who may be children, strictly on behalf of and on the instructions of their school. Schools are responsible for obtaining any consent required from a parent or lawful guardian before entering a child’s data. We do not use children’s data for tracking, profiling, or targeted advertising.

Personal data is hosted with Vercel. Where data is processed outside India (for example, by Meta to deliver WhatsApp messages), we take steps to ensure it remains protected consistent with applicable law.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date at the top of this page, and where appropriate we will provide additional notice.

In accordance with India’s DPDP Act, 2023 and applicable IT Rules, you may contact our Grievance Officer with any questions, concerns, or complaints about your personal data:

• Name: Karan Yadav
• Designation: Grievance Officer
• Email: grievance@campushost.in
• Phone: +91 84007 17646
• Address: Raebareli, Uttar Pradesh, 229001, India

We aim to acknowledge and address grievances within statutory timelines.