Privacy Policy

1. Who we are

Nirai is a platform for coaching institutes, owned and operated by Testware Informatics Private Limited, based in Chennai, Tamil Nadu, India ("Testware Informatics", "Nirai", "we", "us" or "our"). We are committed to handling personal data responsibly and in line with applicable Indian law, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.

2. Scope of this policy

This policy applies to personal data we handle through our websites, mobile applications and the Nirai platform. It describes two roles. When we handle data of our own account holders and website visitors, we act as the data fiduciary. When an institute uses Nirai to manage data of its students and staff, the institute is the data fiduciary for that data, and Nirai acts as a processor on the institute's behalf and on its instructions.

3. Information we collect

• Account and contact information, such as name, email address, phone number, institute name and role.
• Data an institute enters into the platform, which may include information about its students, staff, courses, attendance, assessments and fees.
• Payment information processed by our payment gateway partners. We do not store full card numbers or banking credentials on our servers.
• Usage and device information, such as log data, IP address, browser type and actions taken in the platform, used to keep the service secure and to improve it.
• Communications you send us, such as support requests and demo enquiries.

4. How we use personal data

• To provide, operate, maintain and secure the Services.
• To set up and manage accounts, subscriptions and billing.
• To respond to enquiries and provide customer support.
• To improve the platform, develop new features and understand how the Services are used.
• To send important service messages, and, where permitted, relevant updates you can opt out of.
• To meet legal, tax and regulatory obligations, and to protect our rights and the rights of our users.

5. Legal basis and consent

We process personal data on the basis of your consent, to perform our agreement with you, to comply with legal obligations, and for our legitimate business interests such as keeping the platform secure. Where we rely on consent, you may withdraw it at any time by contacting us, though this will not affect processing carried out before withdrawal, and some Services may not function without certain data.

6. Student and staff data managed by institutes

Where an institute uses Nirai to manage data of its students and staff, the institute decides what data to collect and how to use it, and is responsible for obtaining any consents required, including for minors where applicable. We process that data only to provide the Services to the institute and on its instructions. If you are a student, parent or staff member, please direct requests about your data to your institute in the first instance.

7. How we share personal data

We do not sell personal data. We share it only as needed to run the Services and to meet our obligations, including with: service providers who host, secure and support the platform; payment gateways that process transactions; communication providers that deliver messages you have chosen to receive; and authorities or advisors where required by law or to protect our rights. We require our service providers to protect personal data and to use it only for the purposes we specify.

8. Where your data is stored

We host the Nirai platform on infrastructure located in India. Where any processing involves a service provider outside India, we take reasonable steps to ensure the data continues to be protected in line with applicable law.

9. Data security

We use reasonable technical and organisational measures to protect personal data, including access controls, tenant isolation, encryption in transit, and secure hosting. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to respond promptly to any security incident in line with applicable law.

10. Data retention

We retain personal data for as long as needed to provide the Services and for a reasonable period afterwards, or as required to meet legal, tax and accounting obligations. When data is no longer needed, we delete or anonymise it in the ordinary course. An institute may export its data before closing its account, as described in our agreement.

11. Your rights

Subject to applicable law, you have the right to access the personal data we hold about you, to request correction of inaccurate data, to request erasure where appropriate, to withdraw consent, and to raise a grievance. To exercise these rights, please contact us using the details below. We may need to verify your identity before acting on a request. If your data is managed by an institute, we will direct your request to the institute where appropriate.

12. Cookies and similar technologies

Our websites and platform use cookies and similar technologies to keep you signed in, remember preferences, keep the service secure, and understand usage. You can control cookies through your browser settings, though some features may not work correctly without them.

13. Children's data

Our Services are intended for use by institutes and their authorised users. Where an institute manages data of minors, it is responsible for obtaining the consents required under applicable law. We do not knowingly collect data directly from children for our own purposes.

14. Third-party links

Our websites may link to third-party sites and services. We are not responsible for the privacy practices of those third parties, and we encourage you to read their policies.

15. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the date at the top of this page and, where appropriate, notify you.

16. Grievance Officer and contact

If you have any questions, concerns or grievances about how we handle personal data, please contact our Grievance Officer:

• Grievance Officer, Testware Informatics Private Limited
• Email: [email protected]
• Address: Chennai, Tamil Nadu, India

We will acknowledge and address grievances within the timelines required under applicable law. For general contact details, see our Contact page.