Privacy Policy
Last updated: 10 June 2026
MJX Technologies LLP ("we", "us", "our") operates Pathshala by MJX (the "Service"). This policy explains how we collect, use, and protect data when schools use our Service.
1. Information We Collect
School Information
When schools sign up, we collect: school name, owner contact (email, phone), business address, and chosen subdomain. This is required to provide the Service.
Parent/Inquiry Data
When parents submit inquiries via your school's portal, we collect: parent name, phone, email, student name, class, and optional message. This data belongs to the school — we are a processor, not a controller.
WhatsApp Conversations
Inbound and outbound WhatsApp messages between schools and parents are stored on our servers for inquiry tracking, AI response training (anonymized), and compliance with WhatsApp Business API requirements.
Technical Data
We log IP addresses, browser type, session timestamps, and error details for security and debugging purposes.
2. How We Use Information
- Provide and operate the Service (inquiry management, WhatsApp automation)
- AI-powered auto-replies (using Anthropic Claude API)
- Send transactional notifications (template messages, emails)
- Improve our Service (anonymized analytics)
- Comply with legal obligations
3. Third-Party Services
We use these processors:
- Meta WhatsApp Business API — for message delivery
- Anthropic Claude API — for AI auto-replies
- Microsoft 365 / Office — for email delivery (SMTP)
- AWS / GCP cloud infrastructure — for hosting (India region)
Each processor follows their own privacy commitments. We have data processing agreements where required.
4. Data Storage and Security
- Data is stored on AWS/GCP servers (India region)
- Each school's data is isolated in multi-tenant architecture
- SSL/TLS encryption for all data in transit
- Database backups daily, retained 30 days
- Access restricted to authorized personnel only
5. Data Retention
We retain inquiry and conversation data for the duration of your subscription plus 90 days. Upon account closure, you can request full data export or deletion within 30 days of cancellation.
6. Your Rights
- Access your data anytime via the dashboard
- Request data export (within 7 working days)
- Request data deletion (within 30 days)
- Correct inaccurate information
- Object to processing (account closure)
7. Cookies
We use minimal cookies: session management (login), language preference, and CSRF protection. No tracking cookies. No third-party advertising cookies.
8. Children's Privacy
Our Service is used by schools to manage student information. Students under 18 do not directly use our platform. Parents provide consent on behalf of minors during inquiry submission. Schools are responsible for compliance with applicable child-protection laws.
9. Changes to This Policy
We may update this policy. Material changes will be notified via email and in-portal banner. Continued use after changes constitutes acceptance.