Privacy notice
This notice explains what personal data BISKOOL EDU HUB LLP (“Compass IAS”, “we”) collects through the IAS @ School learning platform, why, where it is kept and what choices you have. Most of our students are under 18, so we ask a parent or legal guardian to act for them, and we collect as little as we need.
1. What we collect
| When | What |
|---|---|
| Admission enquiry form | Parent/guardian's name and relationship, student's name and class, mobile number, and optionally email, city and a message; the wording of the consent you agreed to. |
| Student account (created by the academy after enrolment) | Student's name and class; login email (the parent's or the student's); parent/guardian name, mobile and optional email. Your password is stored only in scrambled (hashed) form. We cannot see it. |
| Enrolment and fees | Course, enrolment status and dates, and a payment reference and amount. We do not collect or store card or bank account details. |
| Parental consent | Who gave consent, how, when, and which version of the consent text. |
| Learning | Quiz and exam attempts, answers, scores and timing; which study materials were opened and when; which classes the student has marked as watched; topic feedback; leaderboard privacy choice. |
| Security and operation | Login session cookies (strictly necessary; see section 6), and technical records such as sign-in events and error codes. Staff accounts also record authenticator (2-step) set-up and an audit trail of administrative actions. |
We do not use advertising, tracking or analytics tools on the learning platform, and we do not build profiles of students for marketing.
2. Why we use it
- To reply to enquiries and manage admissions.
- To create and secure accounts and give enrolled students access to their courses.
- To run live classes, share recordings and study materials, and run quizzes and exams (including scoring, results and reports for students, parents and teachers).
- To record fee payments and parental consent.
- To keep the platform secure, prevent misuse and fix problems.
We process children's data on the basis of verifiable consent from a parent or legal guardian, given in the online application or on a signed consent form at admission, in line with the Digital Personal Data Protection Act, 2023 and its Rules.
3. What other students and teachers can see
- Teachers and academy staff can see enrolled students' details and results for the courses they are responsible for.
- Leaderboards (only on exams where a teacher switches them on) show other students in the same course a first name and initial and a score, for the top 10. Students can choose to appear as “Anonymous” in their Settings, or a parent can ask us to set this.
- Recorded classes are shown only to students enrolled in that course. They are unlisted YouTube videos, so anyone who is given a video's link could watch it; we ask students not to share links. Recordings of classes may show teachers and students who took part.
- Study materials are stamped with the student's name, a short ID code and the date, to discourage sharing.
4. Where your data is kept and who helps us
We use trusted service providers who process data on our behalf:
| Provider | Purpose | Location |
|---|---|---|
| Supabase (on Amazon Web Services) | Database, logins, file storage | Mumbai, India |
| Google Cloud | Running the website | Mumbai, India |
| Zoom | Live classes | Zoom's data centres (may be outside India) |
| YouTube (Google) | Hosting recorded classes as unlisted videos, played inside this site in YouTube's privacy-enhanced mode (no tracking cookies until you press play). We don't send YouTube any student details. | Google data centres |
| Google Drive (academy account) | Encrypted backups | Google data centres |
| Resend | Account invitations and password resets (sends your email address and the message) | Tokyo, Japan |
We do not sell personal data.
5. How long we keep it
- Enquiries that don't lead to admission: 12 months.
- Student accounts, results and consent records: 3 years after the course ends.
- Fee records: 8 years, as required by tax and accounting law.
- Backups: overwritten on a rolling basis (currently the newest 14 are kept).
6. Cookies
The platform uses only strictly necessary cookies, which keep you signed in securely. They are not used for tracking or advertising. Public pages that don't require login set no cookies of their own.
7. How we protect it
- Database rules ensure each student can see only their own records and enrolled courses.
- Staff must use a password and an authenticator app (2-step verification).
- Data is encrypted in transit (HTTPS); backups are encrypted with a separate password.
- Administrative actions are logged; access is limited to staff who need it.
No system is perfectly secure. If a breach affects your data, we will inform you and the relevant authority as required by law.
8. Your rights
A parent or guardian (or an adult student) can ask us to: provide a summary of the data we hold; correct, complete or update it; erase it where it is no longer needed; and withdraw consent (which may mean the student can no longer use the platform). You may also nominate someone to exercise these rights on your behalf, and have the right to raise a grievance.
Contact: HR, Compass IAS, info@compassias.in. We aim to respond within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.
9. Changes
We will update this notice when the platform changes and show the date above. Significant changes will be communicated to parents.
See also our Terms of use.