Privacy Policy

GoKlass is a white-label platform that coaching institutes and schools use to run their own classes. That means two different organisations may be responsible for your data:

• Your institute is the data controller for its students, parents and staff. The institute decides what is taught, who is enrolled, what fees are charged and which records are kept. If you are a student or a parent, your institute is the first place to direct questions about your data.
• GoKlass is the data processor acting on the institute's instructions for that data. We are the controller only for our own direct relationships — institute owners who sign up, sales enquiries submitted on this website, and our own support correspondence.

We collect the following categories of data:

• Account data — name, email address, phone number, password (stored only as a bcrypt hash, never in readable form), profile photo if you upload one, and the role assigned to you by your institute.
• Institute data — institute name, city, branding, courses, batches, timetables, attendance, assessment results and any content staff upload.
• Enquiry data — if you submit the contact form on this website, we store the name, email, phone, institute name, city and message you provide so our sales team can respond.
• Payment data — fee payments are processed by Razorpay. Card numbers, UPI IDs and bank credentials are entered on Razorpay's systems and are never stored by GoKlass. We retain the transaction identifier, amount, status, timestamp and the invoice it relates to.
• Video and learning analytics — which lessons you opened, watch position and duration, playback quality, quiz and test submissions, and completion progress. Your institute uses this to track progress.
• Device and technical data — device model, operating system, app version, IP address, a device identifier used to enforce the device limit on your account, and diagnostic logs when something fails.

We do not sell personal data, and we do not run third-party advertising networks inside the platform.

Course videos are distributed in an encrypted format and are decrypted only for playback on an authorised device. To protect institutes' content from redistribution, the platform:

• limits each account to a small number of registered devices, and records which devices are in use;
• logs playback sessions, including device, time and IP address, so unusual sharing patterns can be investigated;
• may overlay a visible watermark containing your account identifier on video playback;
• blocks screen recording where the operating system provides that control.

These records are used for security and licence enforcement. If an account is suspended on this basis, your institute is notified and makes the final decision.

We use personal data to:

• authenticate you and keep your account secure;
• deliver the courses, live classes, tests and communications your institute has set up;
• process fee payments and issue receipts and invoices;
• show progress and performance reporting to you, your institute and (where the institute has enabled it) your parents;
• send service messages such as class reminders and fee dues;
• protect content and detect abuse of the platform;
• diagnose faults, and improve reliability and performance of the product.

We share data only where it is needed to run the service. Our processors include payment processing (Razorpay), cloud storage and content delivery (Cloudflare), email and SMS/WhatsApp message delivery for the notifications your institute sends, and error monitoring. Each is bound by contract to use the data only to provide that service.

We also disclose data where we are legally required to, or to establish or defend legal claims. If GoKlass is ever involved in a merger or acquisition, data may transfer as part of that transaction; we will say so before it takes effect.

Application data and databases are hosted in India. Video and file storage uses Cloudflare R2, and content is served through Cloudflare's global network, which means encrypted media may be cached on servers outside India to reach you faster. Some processors — for example email delivery and error monitoring — operate outside India. Where data leaves India, we rely on contractual protections with those providers.

Account and learning records are kept for as long as your institute keeps its GoKlass subscription active, because they are the institute's records. When a subscription ends, we retain the institute's data for 90 days so it can be exported, then delete or irreversibly anonymise it. Financial and tax records are kept for as long as Indian tax law requires. Sales enquiries submitted on this website are kept for up to 24 months. Security and playback logs are kept for up to 12 months.

Data is encrypted in transit with TLS. Passwords are hashed with bcrypt. Course video is encrypted at rest with per-segment AES-256 keys. Each institute's data is isolated at the database level using row-level security, so one institute cannot read another's. Access to production systems is restricted to staff who need it. No system is perfectly secure; if a breach affects your data we will notify the affected institutes and, where required, the relevant authority.

You can ask us to:

• confirm what personal data we hold about you;
• correct data that is wrong or out of date;
• delete data, where we are not required to keep it;
• provide a copy of your data in a portable format;
• stop sending you non-essential messages.

If your institute is the controller of the data — which is the case for most student and parent records — we will pass your request on to them and act on their instructions, since they decide what is kept. You can withdraw consent for optional notifications at any time in your app settings.

GoKlass is used by school and coaching students, some of whom are under 18. Accounts for minors are created by the institute, not by the child directly, and the institute is responsible for obtaining the consent of a parent or guardian where the law requires it. Parents may request access to, or deletion of, a child's data through the institute.

We use cookies and browser local storage for sign-in sessions, security tokens, remembering your theme and language, and basic usage measurement. We do not use advertising or cross-site tracking cookies. Blocking essential cookies will prevent you from staying signed in.

When we change this policy we update the date at the top of the page. If a change materially affects how we use your data, we will notify institute administrators by email before it takes effect.

For privacy questions or to make a request, write to [email protected] or call +91 93735 19834 (Mon–Sat, 9:00–19:00 IST). Postal address: Vinit Height, Bhavani Nagar, Nasik Road, Nashik, Maharashtra. We aim to respond to privacy requests within 30 days.