Legal & Compliance

Privacy Policy

At Tutora, trust is our cornerstone. We are committed to safeguarding the privacy and security of coaching institutes, schools, teachers, and students.

Last Updated: August 14, 2026

End-to-End Protection

All sensitive institute and student records are encrypted both in transit (TLS 1.3) and at rest (AES-256).

No Data Monetization

We never sell, rent, or monetize your institute or student information to advertisers or third parties.

Data Ownership

Your institute retains 100% full legal ownership of your courses, tests, student rosters, and fee data.

Role-Based Access

Strict permission controls ensure teachers, students, parents, and admins only see what they are authorized to.

1. Introduction

Tutora ("Tutora", "we", "our", or "us") provides an all-in-one Learning Management System (LMS) and institute management software platform that enables coaching institutes, schools, colleges, and independent educators to manage admissions, courses, online tests, attendance, student communications, and fee collection.

This Privacy Policy explains what information we collect, how we process and protect it, and the choices available to you regarding your personal and institutional data when you use our website, web applications, mobile applications, and associated services (collectively, the "Services").

2. Information We Collect

A. Institutional & Administrator Account Information

When an institute signs up for Tutora, we collect:

  • Institute name, address, contact email, phone number, and branding assets (logos).
  • Administrator credentials, name, role, and billing contact information.
  • Bank/payout configuration details required for fee collection gateways.

B. Student, Parent & Teacher Data (Entered by Institutes)

Institutes use Tutora to maintain academic records, which may include:

  • Student names, roll numbers, class/batch allocations, contact numbers, and parent email addresses.
  • Attendance logs, test results, exam submissions, assignment scores, and lecture engagement.
  • Fee transaction receipts, pending dues, and payment confirmation statuses.

C. Automatically Collected Technical Data

When accessing our platform, our servers automatically log standard diagnostic data including IP address, browser type, operating system, device identifiers, session timestamps, and crash reports to ensure platform uptime and security.

3. How We Use Your Information

We strictly utilize the information collected to deliver, secure, and enhance our services:

Service DeliveryEnabling live classes, exam evaluations, video streaming, attendance tracking, and report generation.
Automated CommunicationsSending automated WhatsApp, SMS, or email alerts for fee receipts, class schedules, and student notices.
Security & Fraud PreventionPreventing unauthorized logins, detecting malicious activity, and verifying account ownership.
Customer SupportResponding to technical inquiries, bug reports, and onboarding requests from institute admins.

4. Commitment to Student Privacy & Minor Data

Special Protections for Educational Data:

  • We act strictly as a Data Processor on behalf of the educational institute (the Data Controller).
  • We do not profile students, build behavioral advertising dossiers, or serve third-party ads.
  • All student interactions, chat logs, and exam scores remain strictly confidential within their enrolled institute.

5. Data Sharing & Third-Party Service Providers

We never sell or rent user data. We only share necessary subsets of data with trusted, enterprise-grade cloud sub-processors bound by stringent confidentiality and data protection agreements:

  • Cloud Infrastructure: High-availability servers and encrypted databases (e.g., AWS, Google Cloud).
  • Payment Processors: PCI-DSS compliant payment gateways for secure fee transactions (e.g., Razorpay, Stripe). We do not store complete credit card numbers.
  • Communication Gateways: Enterprise SMS, WhatsApp, and transactional email providers for real-time announcements.
  • Legal Obligations: When strictly required by applicable law, court order, or governmental regulation.

6. Data Security & Retention

We apply industry-standard security protocols including 256-bit encryption, strict firewalls, automated vulnerability scanning, and multi-factor authentication for administrative access.

Institutes can export their data at any time. Upon subscription termination or upon receiving a formal data deletion request from an institute administrator, all institutional and student records are permanently purged from active databases within 30 days, subject to legal compliance requirements.

7. Your Rights & Choices

Depending on your jurisdiction, you have the right to:

  • Access and receive an export of your personal information in a machine-readable format.
  • Request correction or updating of inaccurate personal data.
  • Request erasure of your personal data when no longer needed for service provision.
  • Withdraw consent for optional marketing communications.

8. Contact Us & Grievance Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact our Privacy Team:

Tutora Inc. / MathX Media Technologies

Email: support@mathxmedia.tech

Phone: +91 9116172700

Address: Tech Hub, Jaipur, Rajasthan, India

Have questions about our data security?

Explore our comprehensive Security Architecture & Protocols.

View Security Overview