Privacy Policy
Effective from 2 November 2026
ShulkBook ("ShulkBook", "we", "us") is a product of [[LEGAL_NAME]], [[ADDRESS]]. This policy explains what personal data we handle when you use the ShulkBook website, web app and the payment and receipt links we send, and the choices you have. It is written to follow the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
1. Who this applies to
- Organisations: the coaching centres, academies, daycares, schools, gyms, PGs, hostels and housing societies whose owners or managers sign up and use ShulkBook.
- Payers: the students, parents, members, tenants and residents whose details an organisation adds, and who receive reminders, pay links and receipts.
- Visitors to shulkbook.com.
For payers' data, the organisation decides what to record and why, and is responsible for having a lawful basis to share it with us. We process that data only on the organisation's instructions, to provide the service.
2. Data we collect
| From | Data |
|---|---|
| Organisation owners and managers | Mobile number (for sign-in by one-time code), name, organisation name, type, city, logo, UPI ID, language preference, subscription payments. |
| Payers (entered by the organisation) | Name of the student, member, tenant or flat; group such as class, batch, room or block; the payer's name and WhatsApp number; flat area where maintenance depends on it; fee plans, dues, payments, receipts and notes. |
| Organisation expenses | Amounts, dates, categories and who was paid, as recorded by the organisation. |
| Parents using a pay link | The UPI transaction reference and, if they choose to upload one, a payment screenshot. |
| Everyone | Basic technical logs (IP address, browser type, time of request) kept for security and to fix errors. |
We do not collect bank account, card or UPI PIN details. Payments happen inside the payer's own UPI app, directly to the organisation.
3. How we use it
- To run the service: sign-in, keeping fee records, preparing reminder messages, pay links and receipts.
- To bill organisations for their subscription and give support.
- To keep the service secure, prevent misuse and meet legal obligations.
We do not sell personal data, and we do not use student or parent data for advertising.
4. WhatsApp and messages
Reminders and receipts are sent to payers on WhatsApp by the organisation, from its own WhatsApp. If we later send messages through the WhatsApp Business Platform (Meta), only the payer's phone number and the message content are shared with Meta for delivery, under Meta's terms. Payers can ask the organisation to stop reminders at any time.
5. Sharing
We share data only with service providers that help us run ShulkBook (cloud hosting, SMS delivery of sign-in codes, email), under contracts that require them to protect it, or when required by law. Each organisation's data is kept separate and is never visible to another organisation.
6. Storage and security
Data is stored on secure cloud servers with encryption in transit (HTTPS). Access is limited by role, every organisation's records are isolated at the database level, and payment records are kept tamper-evident with an audit log. Files such as receipts and screenshots are served only through private, expiring links.
7. How long we keep it
We keep an organisation's data while its account is active. After an account is closed, we delete it within 90 days, except payment and receipt records that the law requires us or the organisation to retain for accounting (up to 8 years). Technical logs are kept for up to 180 days.
8. Your rights and data deletion
You can ask to access, correct or delete your personal data, withdraw consent, or nominate someone to act for you.
- Organisations: edit or remove records in the app, or email [email protected] from your registered details to close your account and delete your data.
- Payers: contact the organisation you pay first. You can also write to us and we will pass on and track your request with it.
We reply within 30 days.
9. Children
Some records, for example at tuition centres, daycares and schools, relate to children. They are added by the organisation, with the parent's knowledge, only to manage fees. We do not track children or show them advertising.
10. Cookies
The app uses one essential cookie to keep you signed in. We do not use advertising or third-party tracking cookies.
11. Grievance Officer
[[GRIEVANCE_OFFICER]], Grievance Officer
[[LEGAL_NAME]], [[ADDRESS]]
Email: [email protected] · Phone: +91 [[PHONE]]
If you are not satisfied with our response, you may complain to the Data Protection Board of India.
12. Changes
We will post any changes on this page with a new effective date, and tell organisations in the app about important changes.