Privacy Policy

• Account details: name, email address, phone number, and a password (stored hashed) or your Google sign-in.
• Learner details: the learner's name, grade, board and subjects, given by the parent or the learner.
• Class activity: attendance, homework, practice scores and teacher feedback.
• Messages: messages sent inside Sariro to teachers, support and the Sariro assistant.
• Payment records: what was bought, the amount and the payment reference. Card, UPI and bank details are handled by Razorpay; we never see or store them.
• Usage data: pages visited and features used, collected with optional analytics cookies only if you allow them.

• To schedule and teach classes, track progress and issue certificates.
• To take payments, issue GST invoices and process refunds.
• To send class reminders, schedule changes and replies to your questions by email or WhatsApp.
• To keep learners safe and prevent fraud or misuse.
• To meet legal and tax obligations.

We do not sell personal data and we do not share contact details with advertisers.

Essential cookies keep you signed in and remember your preferences. Optional analytics cookies are set only after you accept them in the cookie banner, and you can change your choice at any time. We do not use cookies for cross-site advertising.

We share data only with the service providers needed to run Sariro, each bound to protect it:

• Supabase: sign-in and database hosting.
• Razorpay: payment processing (PCI-DSS compliant).
• Google: sign-in, only if you choose it.
• Our email and WhatsApp providers: to deliver messages you asked for.

We disclose data to authorities only when the law requires it.

Most Sariro learners are children. Accounts for learners under 18 are created or approved by a parent or guardian, who can see the learner's progress and ask us to correct or delete the learner's data at any time. Teachers never see a family's phone number or email, and all messages between learners and teachers stay inside Sariro.

You can ask to see, correct, export or delete your personal data, or withdraw a consent you gave. Email support@sariro.com with the subject “Data request”. We reply within 30 days, as required by the Digital Personal Data Protection Act, 2023.

We keep account data while the account is active. When an account is deleted we erase personal data within 30 days, except records the law requires us to keep, such as invoices, which are kept for 8 years.

Data is encrypted in transit (TLS) and at rest, and every database table is protected by row-level access rules. Payment details never reach our servers. If a breach affects your data, we will tell you and the relevant authority without delay.

For any privacy question or complaint, write to our grievance officer at support@sariro.com or by post to the registered office below. We acknowledge complaints within 48 hours and resolve them within 30 days. See also our Terms & Conditions.

When we change this policy we update the date above, and for material changes we email account holders before the change takes effect.