Privacy Policy

Last updated: 14 October 2026 · Effective date: 1 October 2026

1. Who we are

This Privacy Policy is issued by The PioneerTech, having its registered office at 658, Iscon Emporio, Beside Star Bazaar, Satellite Road, Ahmedabad, Gujarat 380015, India ("Klass360", "we", "us" or "our"). Klass360 provides coaching and tuition class management software ("the Service") and operates the website https://klass360.com ("the Website").

We are committed to processing personal data in line with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the rules made under it, and other applicable Indian laws.

2. Scope: two kinds of data

This policy covers two different situations, and our role is different in each:

Website and account data. When you visit the Website, request a trial or demo, contact us, or sign up as an institute, we decide why and how your data is used. For this data we act as a Data Fiduciary.
Data inside the Service ("Customer Data"). Institutes that use Klass360 enter data about their leads, enquiries, students, parents, staff and fees. The institute decides why and how this data is used, so the institute is the Data Fiduciary and Klass360 acts as its Data Processor, processing that data only on the institute's instructions and under our agreement with them.

If you are a student, parent or enquirer of an institute that uses Klass360, please contact that institute first about your personal data. We will support the institute in responding to your request.

3. Personal data we collect

3.1 Data you give us

Contact and trial requests: name, mobile number, email address, institute name, city, number of branches or students (if shared) and your message.
Account data: names, email addresses, mobile numbers and roles of users your institute creates, and login credentials (passwords are stored in hashed form).
Billing data: billing contact, institute's legal name, GST number and address, and invoice and payment records. We do not store card or bank account numbers; payments are made through banks or payment providers, which process those details under their own security and privacy terms.
Support communications: emails, calls, chats and messages you exchange with us.

3.2 Data collected automatically

Usage and device data: IP address, browser and device type, pages visited, referring page, and date and time of access.
Service logs: sign-in events, actions taken in the Service and error logs, used for security, audit and troubleshooting.
Cookies and similar technologies: see section 10.

3.3 Customer Data processed for institutes

Depending on how an institute uses Klass360, Customer Data may include enquirer and student names, mobile numbers, email addresses, course interests, follow-up notes, admission details, batch details, fee, discount, installment, payment and refund records, and staff details. We process Customer Data only to provide the Service to that institute.

4. Why we use personal data

We use Website and account data to:

respond to your enquiries, set up your free trial and give you a demo;
create and manage your account and provide the Service;
provide onboarding, data-import help and customer support;
send service messages, such as trial reminders, security alerts, invoices and important changes;
send product updates and offers, where you have agreed to receive them (you can opt out at any time);
keep the Website and Service secure, prevent fraud and misuse, and fix problems;
understand how the Website and Service are used so we can improve them, using aggregated data where possible;
meet legal, tax, accounting and regulatory obligations.

We do not sell personal data. We do not use Customer Data to advertise to students, parents or enquirers.

5. Legal basis: consent and legitimate uses

Under the DPDP Act, we process your personal data on the basis of:

Consent — for example, when you submit a form, request a trial or opt in to updates. Each request for consent will be accompanied by a clear notice of the data and purpose. You can withdraw consent at any time by writing to us (see section 12). Withdrawal does not affect processing already carried out before it.
Certain legitimate uses permitted by the DPDP Act — for example, where you voluntarily share data for a specific purpose and have not said you object to its use, or where processing is needed to comply with law.

For Customer Data, the institute is responsible for having a valid basis, including any consent required from its enquirers, students and parents, before entering data into Klass360.

We share personal data only as needed to run our business and provide the Service:

Service providers (our processors): cloud hosting, data storage and backup, email delivery, customer support tools, analytics and payment processing. They may use the data only to provide services to us and must protect it.
Your institute: if you are a user of an institute's account, your activity in the Service is visible to that institute's administrators according to their role settings.
Professional advisers: lawyers, auditors and accountants, under confidentiality.
Authorities: when required by law, court order or a lawful request from a government agency.
Business transfers: if we are involved in a merger, acquisition or sale of assets, subject to the same protections.

7. Where data is stored

We use reputable cloud service providers and store data primarily on servers located in India. If personal data is transferred outside India, we will do so only as permitted under the DPDP Act and any restrictions notified by the Government of India.

8. How long we keep data

Enquiries and trial requests that do not become customers: up to 24 months after our last interaction, unless you ask us to delete it sooner.
Account and Customer Data: for as long as the institute's subscription is active. After the subscription ends, the institute can export its data within 30 days, after which we delete or anonymise it within a further 30 days, except where the law requires us to keep it longer.
Billing and tax records: for the period required under Indian tax and accounting laws.
Backups and logs: for limited periods for security and recovery, after which they are overwritten. Deleted data is removed from backups within 90 days.

When personal data is no longer needed for its purpose, or consent is withdrawn, we erase it unless we must keep it to comply with law.

9. How we protect data

We use reasonable security safeguards to prevent personal data breaches, including encrypted connections (HTTPS), hashed passwords, role-based access inside the Service so each user sees only what their role allows, access controls for our staff, and regular backups.

No system is completely secure. If a personal data breach occurs, we will inform the Data Protection Board of India and affected Data Principals, and, for Customer Data, the institute concerned, as required by the DPDP Act and its rules.

10. Cookies

The Website uses cookies and similar technologies (such as browser storage):

Essential: needed for the Website and Service to work, such as keeping you signed in and remembering security settings.
Analytics: help us understand how visitors use the Website. We do not currently use third-party analytics or advertising cookies on the Website. If we add them, we will update this policy and ask for your consent where required.

You can block or delete cookies in your browser settings. If you block essential cookies, some parts of the Website or Service may not work.

11. Your rights

As a Data Principal under the DPDP Act, you have the right to:

Access a summary of the personal data we process about you and the processing activities, and the identities of others we have shared it with;
Correction, completion and updating of inaccurate or incomplete data;
Erasure of personal data that is no longer needed, unless we must keep it by law;
Withdraw consent at any time, as easily as you gave it;
Grievance redressal through our Grievance Officer (section 12);
Nominate another person to exercise your rights in the event of your death or incapacity.

To use these rights, email hello@klass360.com or write to the Grievance Officer. We may need to verify your identity. We will respond within 30 days, or any shorter period required under the DPDP rules.

If your data was entered by an institute using Klass360, please send your request to that institute. We will help the institute respond.

As a Data Principal, you also have duties under the DPDP Act, including not registering a false or frivolous complaint and providing only verifiably authentic information when exercising your rights.

12. Grievance Officer and contact

If you have a question, complaint or request about your personal data, contact our Grievance Officer:

Name: Grievance Officer, The PioneerTech
Email: grievance@klass360.com
Address: 658, Iscon Emporio, Beside Star Bazaar, Satellite Road, Ahmedabad, Gujarat 380015, India

General privacy questions: hello@klass360.com or +91 73594 26596.

If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India after using our grievance process.

13. Children's personal data

The Website and Service are meant for institutes and their staff, not for children. We do not knowingly collect personal data directly from children through the Website.

Institutes may enter data about students who are under 18. Under the DPDP Act, the institute, as Data Fiduciary, must obtain verifiable consent from a parent or lawful guardian before processing a child's personal data, and must not track, monitor behaviour or target advertising at children. We process such data only on the institute's instructions and do not use it for tracking, behavioural monitoring or targeted advertising.

14. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page with a new "Last updated" date and, for significant changes, notify account owners by email or in the Service.

See also our Terms of Service and Refund & Cancellation Policy.