Privacy policy

1. Who we are

ConnectNow ("we") provides an admissions CRM at connectnowcrm.com and in our mobile apps. For data our customers (institutes) upload about students and parents, the institute is the Data Fiduciary and ConnectNow acts as its Data Processor under India's Digital Personal Data Protection Act, 2023 ("DPDP Act"). For our own account, billing and website data, ConnectNow is the Data Fiduciary.

2. Data we collect

• Account data: name, username, email, phone, role, branch and designation of institute staff.
• Customer data: lead names, phone numbers, city, call outcomes, notes, walk-ins, admissions, photos and documents uploaded by the institute.
• Device & usage data: app version, platform, sign-in times, call metadata logged by the Android app (number, duration, time) for leads only.
• Billing data: plan and payment status; card/UPI details are handled by Razorpay and not stored by us.
• Demo requests: what you enter in our contact form.

3. Purpose and legal basis

We process personal data only to provide and secure the service, bill customers, provide support and meet legal obligations, on the basis of consent or legitimate uses permitted under Section 7 of the DPDP Act. We do not sell personal data or use customer data for advertising.

4. Institutes' responsibilities

Institutes must have a lawful basis, including any required notice and consent, to upload and contact leads, and must respect requests from individuals to stop contact. Data of children must be handled with verifiable parental consent as required by Section 9 of the DPDP Act.

5. Sharing

We share data only with processors needed to run the service: cloud hosting (AWS, Mumbai region), payments (Razorpay) and push-notification services (Google Firebase / Apple / web push). We may disclose data where required by law.

6. Storage, security and retention

Data is stored in India in a separate database per institute, encrypted in transit with TLS and protected by role-based access. We keep customer data while the account is active and delete it within 90 days of account closure, unless law requires longer retention.

7. Your rights

Under the DPDP Act you may request access to, correction, completion or erasure of your personal data, withdraw consent, nominate another person, and seek grievance redressal. If your data was uploaded by an institute, please contact that institute first; we will help them respond.

8. Grievance officer

Grievance Officer: [Name — to be appointed]
Email: info@connectnowcrm.com
We aim to respond within 7 days and resolve within 30 days. You may also approach the Data Protection Board of India.

9. Cookies

We use essential cookies and local storage only to keep you signed in and remember preferences. We do not use advertising cookies.

10. Changes

We will post changes on this page and notify account owners of material changes.