At Redparrot Technology LLP ("Redparrot," "we," "us," or "our"), we respect your privacy and are committed to protecting the personal data of our users, clients, students, and website visitors.
This Privacy Policy explains how we collect, process, share, store, and protect your personal data when you use our software products, educational tools, platforms, mobile applications, and web services (collectively, the "Services"), or when you visit our website at redparrottechnology.com.
Regulatory Compliance Notice
This Privacy Policy is structured to meet the requirements of key international data protection frameworks, including but not limited to the Digital Personal Data Protection Act, 2023 (DPDP Act, India) and the General Data Protection Regulation (EU GDPR / UK GDPR).
1. Important Legal Roles & Frameworks
Depending on the nature of your interaction, Redparrot Technology operates as either a Data Fiduciary/Controller or a Data Processor:
- Data Fiduciary / Data Controller: When you interact directly with us (e.g., creating an account, purchasing services, or browsing our website), we decide the purpose and means of processing your data.
- Data Processor: When we provide services to institutional clients (such as schools, educational institutions, or corporate entities) who manage student, parent, or staff data on our platforms, the institution acts as the Data Fiduciary / Controller, and Redparrot acts strictly as a Data Processor.
2. Personal Data We Collect
A. Information You Provide Directly
- Identity & Contact Data: Full name, phone number, email address, mailing address, and organizational/institutional details.
- Credentials: Usernames, passwords, authentication keys, and security tokens.
- Financial & Billing Data: Payment details, transaction records, and tax identifiers (processed via encrypted payment gateways).
- Communications: Support tickets, feedback, and direct inquiries.
B. Educational & Institutional Data
For our educational tools and progress trackers, we process data on behalf of institutions, including:
- Student academic records, attendance, roll numbers, and grades.
- Teacher evaluations, assignments, and administrative school logs.
- Parent/guardian contact information and school communication records.
C. Automatically Collected Data
- IP addresses, device type, operating system, and browser version.
- Feature usage logs, timestamps, clickstreams, and crash reports.
- Session cookies and preference identifiers.
3. Lawful Grounds for Processing
We process your personal data under the following legal bases:
- Consent: Clear, affirmative consent for specified purposes (e.g., newsletters, marketing). Consent can be withdrawn at any time.
- Contractual Obligation: Necessary to perform a contract with you or take pre-contractual steps (e.g., providing software access).
- Legitimate Interests: Fraud prevention, system security, and product improvements (applied strictly where rights are not overridden).
- Legal Compliance: To fulfill statutory duties under Indian or EU/UK law.
4. How We Use Your Data
- Provisioning, maintaining, and personalizing our Services.
- Processing transactions and generating official invoices.
- Sending critical updates, security alerts, and customer support responses.
- Monitoring platform performance, usage trends, and system stability.
- Enforcing our Terms of Service and defending legal claims.
5. Data Disclosure & Sharing
We do not sell your personal information. We only share data under the following strict conditions:
- Vetted Service Providers: Cloud hosting, payment gateways, analytics providers, and email tools bound by stringent Data Processing Agreements (DPAs).
- Legal Compliance: When compelled by law, court orders, or government requests under the DPDP Act or GDPR.
- Corporate Reorganization: In the event of a merger, acquisition, or sale of assets, subject to confidentiality protections.
- Educational Protections: Student data is strictly processed on behalf of institutions and is never used for marketing or commercial profiling.
6. Data Retention Policy
Your personal data will be retained in accordance with the specific terms outlined in our service contract/agreement with you or your institution, or until you explicitly request its deletion, subject to statutory retention requirements under applicable law.
- Contractual Retention: Data processed under an institutional agreement is retained for the active term of the agreement and purged as stipulated in the contract upon termination.
- On-Demand Erasure: You may submit an explicit data deletion request at any time by contacting our DPO at [email protected] or [email protected].
- Statutory Requirements: Certain financial records or legal logs may be retained longer if required by tax or corporate regulations.
7. International Data Transfers
As a global provider, we may store and process data in secure cloud servers located outside your home jurisdiction. All cross-border transfers strictly follow the safeguards required by the DPDP Act (India) and standard contractual clauses (SCCs) mandated under the GDPR to ensure equal protection across borders.
8. Children's & Student Privacy
Our educational tools are designed with strict student privacy safeguards in mind:
- We require verifiable institutional/parental consent before processing personal data of minors (under 18 under DPDP Act / under 16 under GDPR).
- We do not build behavioral profiles or direct targeted advertising toward children or students.
- Educational institutions act as Data Controllers and manage student consent frameworks.
9. Your Rights under DPDP Act & GDPR
DPDP Act (India) Rights
- Right to request a summary of processed data.
- Right to request correction, updating, or erasure.
- Right to grievance redressal via our DPO.
- Right to nominate an individual in case of death or incapacity.
GDPR (EU/UK) Rights
- Right to access, rectify, or erase your data ("Right to be Forgotten").
- Right to restrict or object to processing.
- Right to data portability.
- Right to withdraw consent at any time.
10. Data Protection Officer (DPO) & Contact Information
For any data privacy inquiries, exercise of rights, or grievance redressal under the DPDP Act or GDPR, you may directly contact our designated Data Protection Officer (DPO):
Redparrot Technology LLP
Attn: Tessa Albin
Address: Pragna Uptown, Doddathogur, Electronic City, Bangalore, Karnataka, India – 560100
DPO Email: [email protected]
Privacy Support: [email protected]
Phone: +91 8746 99 99 88
If you are not satisfied with our resolution, you have the right to lodge a complaint with the Data Protection Board of India or your national EU Data Protection Authority (DPA).