Privacy Policy

1. Information We Collect

We collect information you provide directly to us when you browse the Service, submit an enquiry, or register for a student or teacher account. Depending on how you use the Service, this may include:

a) Enquiries / "Get in touch" leads

When you fill out a simple enquiry form (before creating a full account), we collect your name, phone number, email address, state and city so our team can follow up about admissions.

b) Student portal registration

c) Teacher portal registration

d) Information collected automatically

Like most websites, our hosting and security infrastructure (Firebase/Google Cloud) may automatically log limited technical information such as IP address, browser type, device information and access timestamps, for security, fraud-prevention and diagnostic purposes. We do not use this information to build advertising profiles.

2. Google Sign-In

The Service offers "Sign in with Google" as an optional way to create or access your account, using Google's OAuth sign-in. When you choose this option, Google shares only your basic profile information — your name, email address and profile photo — with us, strictly to create and authenticate your account.

• We request only the standard profile and email scopes. We do not request access to your Gmail, Google Drive, Google Contacts or any other Google data.
• We do not post to your Google account, and we never sell or share the information obtained through Google Sign-In with advertisers or unrelated third parties.
• Your use of Google Sign-In is also subject to Google's own Privacy Policy.

3. How We Use Your Information

We use the information we collect to:

• Create, maintain and secure your student, teacher or admin account;
• Process admissions/enrollment, assign classes, subjects and (for home tuition) teachers;
• Calculate fees, process and verify payments, and process teacher payouts;
• Communicate with you about your account, enrollment status, edit requests, renewals and important service updates via phone call, SMS/WhatsApp or email;
• Respond to enquiries, support requests and edit/correction requests;
• Maintain internal records, prevent fraud, and enforce our terms; and
• Comply with applicable legal, accounting and tax obligations.

We do not use your personal data for third-party advertising, and we do not sell your personal data to anyone.

4. Payments

Fee payments are made either (a) via UPI directly to the institute's UPI ID, which you then self-report as "payment made" inside the portal, or (b) via our payment gateway partner Razorpay. When you pay through Razorpay, your card, UPI or net-banking details are entered directly on Razorpay's secure, PCI-DSS compliant checkout — we never see, collect or store your card number, UPI PIN, or banking passwords. We only receive a payment confirmation reference (payment ID) and status from Razorpay, which we store to match against your fee record. Every self-reported or gateway payment is separately verified by the institute before being marked as fully confirmed.

5. How We Share Information

We do not sell, rent or trade your personal information. We only share information with:

• Service providers who process data on our behalf, currently: Google Firebase (authentication, database and file storage) and Razorpay (payment processing), each of which is contractually/technically restricted to using the data only to provide their service to us;
• Our teachers and staff, on a need-to-know basis — e.g. a teacher assigned to a student can see that student's name, class and contact details in order to teach and coordinate with them;
• Parents/guardians, where information is provided to or on behalf of a minor student;
• Law enforcement or regulators, where required to comply with a legal obligation, court order, or to protect the rights, property or safety of NB Institute, our students, teachers or the public.

6. Data Storage & Security

Your data is stored on Google Firebase (Cloud Firestore for records, Firebase Authentication for login credentials, and Firebase Storage for any uploaded files), which runs on Google Cloud infrastructure with encryption in transit (HTTPS/TLS) and at rest.

• Access to student, teacher and payment records in our admin dashboard is restricted to authorized institute staff only, enforced through Firestore security rules tied to authenticated admin accounts.
• Passwords are never stored by us in plain text — Firebase Authentication stores only a salted, hashed representation.
• While we take reasonable technical and organizational measures to protect your information, no method of transmission or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Children's Privacy

NB Institute provides tuition to students from Class 1st to 12th, many of whom are minors under 18 years of age. Student portal accounts and related personal information (including father's/mother's name and home address) are expected to be submitted by, or with the knowledge and consent of, a parent or legal guardian. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us using the details below and we will promptly review and, where appropriate, delete that information from our systems.

8. Data Retention

We retain personal data for as long as your account remains active, and for a reasonable period afterward to maintain enrollment history, resolve disputes, satisfy accounting/tax record-keeping requirements, and enforce our agreements. You may request earlier deletion of your data as described in "Your Rights & Choices" below, subject to any records we are legally required to keep.

9. Cookies & Similar Technologies

We use only strictly necessary cookies/local storage set by Firebase Authentication to keep you signed in to your student, teacher or admin session. We do not use third-party advertising or cross-site tracking cookies. You can control or delete cookies through your browser settings, though this may prevent you from staying signed in.

10. Your Rights & Choices

You have the right to:

• Access the personal data we hold about you, by viewing your profile inside the student or teacher portal, or by contacting us;
• Correct inaccurate details — the portal includes a built-in "request edit" flow for updating your name, mobile, email and other profile fields, which is reviewed and applied by the institute;
• Withdraw consent / delete your account — you may request deletion of your account and associated personal data at any time by contacting us below, subject to information we must legally retain (e.g. for tax or accounting records);
• Opt out of non-essential communications by informing us directly.

To exercise any of these rights, please reach out using the contact details in Section 12. We will respond within a reasonable timeframe.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any changes will be posted on this page with a revised "last updated" date at the top. We encourage you to review this page periodically. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact: