GDPR & DPDP Act 2023 compliance

How KshiyaRise supports data protection rights under both the EU's GDPR and India's Digital Personal Data Protection Act 2023.

Your privacy rights

Right to access & export: Request a full export of your personal data as a self-service action
Right to rectification: Ask us to correct inaccurate or incomplete personal data
Right to erasure: Request account deletion. It's scheduled with a 30-day grace period, during which you can cancel it before it's permanently processed
Right to restriction: Ask us to limit how your data is processed while a request or dispute is resolved
Right to data portability: Request your data in a structured, commonly used format
Right to object & manage consent: Review and change your consent preferences, including optional consents like marketing communications, with a complete consent history

How we protect your data

We enforce role-based access control with server-side permission checks, isolate data by organisation, branch, and academic year, and log administrative and sensitive actions in an audit trail. Integration credentials, such as WhatsApp tokens, are encrypted at rest.

Data Processing Agreement

If your school or trust needs a formal Data Processing Agreement covering our role as a data processor, contact us — we'll work through the details as part of your evaluation.

Exercise your rights

Use the self-service tools in your account settings for data export, consent management, and account deletion. For anything else, reach us via the Contact page or write to our privacy contact:
Email: dpo@kshiyarise.com
Response time: We aim to respond within 30 days