Privacy policy

Last updated 8 November 2026

1. Who we are

FeeSure is run by ElvoStack LLP, India ("FeeSure", "we", "us"). FeeSure helps academies and tutors in India track fees, record payments, issue receipts and remind families. This policy explains what personal data we handle, why, and your rights. It covers the FeeSure app (app.feesure.in), our website (feesure.in) and the pay pages students open from their pay link. It takes effect on 8 November 2026.

2. Our role and the academy's role

• Data about students and staff: the academy decides whose details go into FeeSure and why. The academy is the data fiduciary (under India's Digital Personal Data Protection Act, 2023) and the controller (under the EU GDPR). FeeSure is its data processor and handles that data only to run the service for the academy.
• Data about account holders (owners and staff who sign in) and visitors to our websites: FeeSure is the data fiduciary and controller.

If you are a student, please contact your academy first. It can see, correct or delete your details at any time. If you contact us, we will pass your request to the academy.

3. What we collect

• Account: your mobile number, name and a sign-in ID from Google Firebase.
• Academy: name, type, address, contact phone and email, UPI ID or payment link, logo, brand colour, branches and their phone numbers.
• Staff: name, phone number, the access and branches the owner gives them, and their invite status.
• Students (added by the academy): names, phone numbers, subjects, batches, fee plans, fees due, payments, receipts, promises to pay, reminders sent, the language for their messages, and notes.
• Activity: a log of changes made in the account (who, what and when), so the academy can see who did what.
• Devices: a random ID per browser, the browser and system name, and when it was first and last used, so we can warn you about a new sign-in. If you turn on notifications, the push address your browser gives us.
• Payment page: when a student's payment link is opened and when Pay is tapped, and any promise to pay made there. We do not store the visitor's name, phone or IP address for this.
• WhatsApp link: if the academy links a WhatsApp Business number, its number, Meta account IDs and an access token, kept encrypted.
• Messages sent from a linked number: which reminder or receipt went to which number, when, and whether it was delivered or failed.
• AI replies: only where the academy asks us to set them up, the questions and answers (FAQs) and fee details we give Meta's business AI for that academy. The chats themselves are handled by Meta, not stored by FeeSure. See section 17.
• Website forms: if you fill in the contact form on feesure.in or app.feesure.in, your name, WhatsApp number and academy name, and anything else you choose to tell us, such as your email, what you teach, your number of students and your message.
• Custom plan requests: what you ask for, the number of students, your academy name and your phone number.
• Technical data: IP address, browser details and request logs, handled by our hosting, network and security providers; and error reports with personal details removed.

We do not collect payment card or bank details. FeeSure never holds or moves money: students pay the academy directly.

4. Where it comes from

From you when you sign up, use FeeSure or fill in a form on our websites; from the academy, which adds its students and staff (including by importing a spreadsheet); from students who use the pay page; and from our providers, such as Firebase for sign-in and Meta for WhatsApp link status and message delivery.

5. Why we use it, and on what basis

• To provide FeeSure (sign-in, records, receipts, reminders, messages from a linked WhatsApp number, payment pages, staff access, and AI replies where the academy asks for them): to perform our contract with you, and with your consent when you sign up. For academy data, on the academy's instructions.
• To keep FeeSure and your account secure (new-device notices, rate limits, bot checks, error reports, backups): our legitimate interest in a safe, working service, and the legitimate uses the DPDP Act allows.
• To send notifications you turn on: your consent. Turn them off at any time in More › Notifications or in your browser.
• To reply to you about support, website enquiries, custom plans and requests about your data: our contract with you or your request.
• To meet legal duties and answer lawful requests from authorities.

We do not sell personal data. We do not show ads, build marketing profiles, or use analytics or advertising trackers, in the app or on our websites. We message students only for the academy, about its fees, and never for our own marketing.

6. Children

Many students are under 18. Their details are added by the academy, which must get verifiable consent for a child wherever the law requires it. FeeSure does not track, profile or monitor the behaviour of children, and never targets ads at them. FeeSure accounts are for adults only.

7. Who helps us run it

We use these providers. Each gets only what it needs to do its job for us.

• Google Firebase: sign-in and the one-time SMS code.
• Google reCAPTCHA: checks that sign-in is not a bot. Google's privacy policy and terms apply to it.
• Google Fonts: loads the fonts on feesure.in. Your browser asks Google for them, so Google sees your IP address. The app at app.feesure.in serves its own fonts.
• Neon (on Amazon Web Services, Singapore): the database that holds your records.
• Amazon Web Services (Lightsail, Mumbai, ap-south-1): the servers that run FeeSure.
• Cloudflare: network protection for the app and websites, hosting of feesure.in, and storage of receipts, logos and backups.
• GitHub: runs our weekly backup job.
• Meta: only if the academy links a WhatsApp Business number. It carries the messages sent from that number and, where the academy has the AI replies add-on, its business AI answers messages using the FAQs and details we give it.
• Sentry: error reports, with personal details removed, when switched on.
• Formspree: delivers website contact forms and custom plan requests to us by email.
• Your browser's push service (Google, Apple, Mozilla or Microsoft): delivers notifications, only if you turn them on. The content is encrypted.

We may also share data if the law requires it, to protect people or the service, or with a company that takes over FeeSure, which must keep to this policy. FeeSure staff access academy data only when needed to run, support or secure the service, or when the law requires it.

8. Data outside India

Some providers store or process data outside India, for example in Singapore, the United States or the European Union. We transfer data only to countries that Indian law does not restrict. For personal data covered by the GDPR, we rely on an adequacy decision or the European Commission's Standard Contractual Clauses in our providers' terms.

9. How long we keep it

• We keep data while the account is open. The academy can delete individual records at any time.
• When the academy asks to delete its account (Settings › Account › Delete my academy), it is blocked and hidden at once. For 7 days it can still be restored, in case of a mistake or a stolen phone. After 7 days the academy, its records, files and sign-in accounts are removed from FeeSure.
• We then keep one locked copy of the academy's records and activity logs for one year from that date, as the Digital Personal Data Protection Rules, 2025 require. Only we can open it, only to investigate a security incident or to answer a lawful request from the authorities. It is never used for anything else, and after one year it is deleted for good.
• Receipt links you already shared stop opening within 7 days.
• Backups are encrypted and kept for up to 90 days, then deleted. After the one-year locked copy is deleted, copies of it can remain in those backups for up to 90 more days, and then they are gone. We do not restore deleted data from backups except to recover from a fault.
• Website enquiries are kept only as long as we need them to reply and follow up, then deleted.

10. Security

We use reasonable security measures: encrypted connections, sign-in by one-time code, access limited to each academy and to each staff member's areas and branches, encrypted WhatsApp tokens, rate limits, error reports with personal details removed, and regular backups. No system is perfectly secure, so we cannot guarantee that data will never be lost or accessed without permission. Keep your phone locked. If FeeSure warns you about a sign-in you do not recognise, tap Sign out everywhere. If you lose your phone, tell us at once.

11. If something goes wrong

If we learn of a personal data breach, we will act to contain it. We will tell affected academies without undue delay, so they can meet their own duties. For data we control, we will tell the Data Protection Board of India, CERT-In and the people affected as the law requires.

12. Your rights

Depending on the law that applies to you, you can:

• get a summary of your data and how it is used, and a copy of it;
• correct, complete or update it;
• have it deleted;
• withdraw consent at any time (this does not affect what was done before);
• object to, or ask us to limit, some uses, and take your data to another service (GDPR);
• nominate someone to act for you if you die or cannot act (DPDP Act);
• complain to us, and then to the Data Protection Board of India, or to your local data protection authority in the European Union.

Account holders can do most of this in the app: see and correct records, download everything from Settings › Export data, and delete the academy from Settings › Account. For anything else, write to privacy@feesure.in. We may need to confirm it is you. We reply within 30 days at most. You may also use a consent manager registered with the Data Protection Board once they are available.

How to delete your data

• Academy owners: in FeeSure, open Settings › Account › Delete my academy and confirm. The academy is hidden at once and can be restored for 7 days. After 7 days it is removed from FeeSure with its records, files and sign-in accounts. One locked copy is kept for one year, as the law requires, then deleted; copies can remain in our encrypted backups for up to 90 more days, then they are gone.
• Staff: ask the academy owner to remove you, or write to us.
• Students: ask your academy to delete your details. It can do this at any time in the app. You can also write to privacy@feesure.in with your phone number and the academy's name. We pass the request to the academy and tell you when it is done.
• Anyone else, including people who reached FeeSure through Facebook or WhatsApp: write to privacy@feesure.in. We delete your data within 30 days and confirm by email.

13. Grievance officer

Alfred, grievance@feesure.in, ElvoStack LLP, India. We acknowledge complaints within 24 hours and resolve them within 15 days. If you are not satisfied, you can complain to the Data Protection Board of India.

14. Cookies and storage on your device

We use only what FeeSure needs to work. We use no advertising or analytics cookies.

• Firebase keeps you signed in, using your browser's storage.
• Your browser's storage keeps a few settings: this browser's device ID, the branch you picked, whether you closed the install help or set up reminders, your notification status, and, while you sign in, which step you were on.
• The app saves its own files on your device so it opens fast and works as an installed app. It does not save your records there.
• Google reCAPTCHA (on the sign-in page) and Cloudflare (for security, on the app and websites) may set their own cookies.
• feesure.in sets no cookies of its own.

Clearing your browser data removes these and signs you out.

15. Automated decisions

FeeSure works out what is due, who to remind and, where auto-send is on, when to send, from the academy's own rules. It makes no decisions with legal or similarly significant effects on anyone, and does no profiling.

16. The pay page

Each student has a private payment link. Anyone with that link can see the academy's name, logo and contact number, the student's first name, the amount due and its month, the academy's UPI or payment link, and can make a promise to pay. Once the fee is paid, it can offer the latest receipt. It never shows the student's phone number, other students or payment history. The academy can make a new link at any time, which stops the old one working.

17. WhatsApp messages

The academy can send reminders in two ways:

• From its own phone: FeeSure writes the message and opens it in the academy's WhatsApp, and the academy sends it.
• From a linked number: if the academy links its WhatsApp Business number, FeeSure can send fee reminders and payment receipts from that number on the academy's behalf. These use message templates approved by Meta, in the language the academy sets for each student: English, Hindi or Tamil.

Either way, the academy is the sender. It must have each recipient's agreement (opt-in) to get these messages, and it is responsible for the fees, dates and amounts it enters. FeeSure stores what was sent, when, and whether it was delivered or failed. Meta processes these messages under its own terms.

AI replies (add-on): only where the academy asks us to set it up, Meta's business AI answers messages sent to the academy's number. We set it up on Meta with FAQs and fee details that the academy agrees to. Meta's AI writes and sends the replies, under Meta's own terms and privacy policy; the chats stay in the academy's WhatsApp Business app and with Meta. FeeSure does not read, store or reply to the academy's chats. The academy stays responsible for the replies, so it should keep the details it gives us correct.

18. European Union

FeeSure is built for academies in India and does not offer its service to people in the European Union. We have not appointed an EU representative or a data protection officer. If the GDPR applies to your data, you have the rights listed above and can reach us at privacy@feesure.in.

19. Changes to this policy

We may update this policy. If a change matters, we will tell you in the app before it applies, and ask for your consent again where the law requires it. The date at the top shows the latest version.

Contact

Questions or a request about your data? Write to support@feesure.in.