This policy explains what personal data DESKFLUX (“DeskFlux”, “we”, “us”) collects, why we collect it, who we share it with, and the choices you have. It covers our website at deskflux.in, our dashboard application, and the messages we send on behalf of coaching institutes.

Two different roles. When you visit our site or ask for a demo, we decide how your data is used — we are the data fiduciary. When a coaching institute uses DeskFlux to manage its students, the institute decides what is stored and why; we only process that data on their instructions as a data processor. If you are a student or parent, your institute is the right first point of contact.

1. Who we are

DESKFLUX is a sole proprietorship registered in India as a Micro enterprise under Udyam Registration Number UDYAM-PB-06-0048215, based in Fazilka, Punjab, India. You can reach us at [email protected] or +91 7710566706.

2. Data we collect

Data you give us directly

Demo and support enquiries — your name, phone or WhatsApp number, institute name, city, approximate student count, and anything you write in a support ticket.
Account data — the name, email address and phone number of each user your institute creates, plus their role and permissions.
Billing data — the details needed to raise an invoice. Card and bank credentials are handled by our payment processor and never stored on our servers.

Data your institute puts into DeskFlux

Institutes use DeskFlux to run day-to-day operations, so the account may contain student and guardian names, contact numbers, addresses, dates of birth, batch and course enrolment, attendance records, fee and payment history, exam or test results, employee records including salary and payroll details, and enquiry or lead records. Your institute controls all of it. We do not sell it, mine it for advertising, or use it to train models.

Data collected automatically

Technical data — IP address, browser and device type, pages visited, and timestamps, used to keep the service secure and working.
Cookies — a session cookie that keeps you logged in, and a preference cookie that remembers settings such as language. We do not use advertising or cross-site tracking cookies on this site.

3. Why we use it

Purpose	Data used
Providing the dashboard and its modules	Account data, institute-supplied records
Responding to a demo request or support ticket	Contact details, message content
Sending fee reminders, timetables and notices	Student and guardian contact details
Billing and accounting	Billing data
Security, abuse prevention, backups	Technical data, audit logs
Meeting legal and tax obligations	Billing and transaction records

We rely on your consent where you gave it, on performing our contract with your institute, and on our legitimate interest in keeping the service safe.

4. WhatsApp, SMS and email messaging

DeskFlux sends operational messages — fee reminders, attendance alerts, timetables and notices — on behalf of the institute you are enrolled with. The institute is responsible for having your consent before adding your number.

Messages are limited to what the institute needs to run its operations.
You can stop them at any time by replying STOP to any WhatsApp or SMS message, or by asking your institute to remove your number. We action opt-outs promptly and record them so messaging does not resume.
Where messages are delivered over WhatsApp, delivery is subject to Meta’s own terms and privacy policy in addition to this one.

5. Artificial intelligence features

DeskFlux includes an AI copilot and AI-assisted data import. When you use these, the relevant portion of your request is sent to a third-party model provider to generate a response. Personal identifiers are stripped from these requests where the feature allows it. Your data is not used to train any provider’s models. Actions that change or delete records always require your explicit confirmation before they run.

6. Who we share data with

We do not sell personal data. We share it only with service providers who help us run DeskFlux, each bound to protect it:

Cloud hosting and database providers — to store and serve your data.
Messaging providers — to deliver WhatsApp, SMS and email.
AI model providers — to power the copilot and import features.
Payment processors — to collect subscription fees.
Analytics and error monitoring — to keep the product stable.

We may also disclose data where the law requires it, or to establish or defend a legal claim.

7. Where data is stored

Data is stored on managed cloud infrastructure and may be processed on servers outside India, including by the providers listed above. Where that happens we rely on the provider’s contractual safeguards to keep protection equivalent to what this policy promises.

8. How long we keep it

Institute account data — for as long as the account is active. Deleted records go to a recycle bin and are permanently purged after 30 days.
After an account closes — data is deleted within 90 days, unless we must keep it longer by law.
Invoices and tax records — retained for the period Indian tax law requires.
Demo and support enquiries — up to 24 months from your last contact with us.

9. Security

Traffic is encrypted in transit with TLS. Each institute’s data is isolated at the database level so one tenant cannot read another’s. Access to production systems is restricted and audited, sensitive access tokens are encrypted at rest, and deletions are reversible for 30 days to protect against mistakes. No system is perfectly secure, but if a breach affects your data we will notify you and the relevant authority as required by law.

10. Your rights

Under the Digital Personal Data Protection Act, 2023, you may ask us to confirm what data we hold about you, correct or complete it, erase it, or withdraw consent you previously gave. You may also nominate someone to exercise these rights on your behalf.

If your data was entered by a coaching institute, ask the institute first — they control it, and we will help them action your request. Otherwise write to [email protected] and we will respond within 30 days.

11. Children’s data

Coaching institutes routinely enrol students under 18. Institutes are responsible for obtaining verifiable parental consent before entering a child’s data. We do not use children’s data for advertising, profiling or behavioural tracking of any kind.

12. Grievance officer

Complaints about how we handle personal data can be sent to our Grievance Officer at [email protected], or by post to DESKFLUX, Fazilka, Punjab, India. We acknowledge complaints within 72 hours and aim to resolve them within 30 days.

13. Changes to this policy

We will update this page when our practices change and revise the date at the top. If a change materially affects your rights we will tell account holders by email before it takes effect.

14. Contact

DESKFLUX · Fazilka, Punjab, India
Email [email protected] · Phone +91 7710566706
Udyam Registration Number UDYAM-PB-06-0048215