Privacy Policy

SurSadhana Music Classes ("we", "us", or "our") is operated by Mansi Kulkarni Deshpande from Pune, Maharashtra, India. This Privacy Policy explains how we collect, use, store, and protect personal information when you use our website (sursadhana.co.in) or our Student Portal (app.sursadhana.co.in).

By using our website or enrolling in our classes, you agree to the practices described in this policy.

1. Information We Collect

Information you provide directly:

• Contact enquiries — name, phone number, and email address when you contact us via WhatsApp, phone, or email.
• Student enrolment — student name, parent/guardian name, phone number, email address, date of birth, and course preferences when registering on our Student Portal.
• Fee payments — payment amount and payment screenshots uploaded by you. We do not collect or store card numbers, UPI PINs, or banking credentials — all online payments are processed by Cashfree Payments, a PCI-DSS compliant payment gateway.
• Profile photo — an optional photo uploaded for the student profile in the portal.

Information collected automatically:

• Basic usage data such as pages visited and browser type, collected through Firebase Analytics (if enabled).
• Session data stored in your browser's local storage to keep you logged in to the Student Portal during your session.

2. How We Use Your Information

• To enrol you in classes and manage your learning progress.
• To communicate class schedules, fee reminders, and important announcements.
• To process fee payments and issue receipts.
• To respond to your enquiries via phone, WhatsApp, or email.
• To improve the website and student experience.

We do not use your information for unsolicited marketing, nor do we sell or rent your data to any third party.

3. Data Storage & Security

All student data is stored securely in Google Firebase Firestore, hosted on Google Cloud Platform servers (US and Asia regions). Google's security practices and infrastructure protect this data at rest and in transit using industry-standard encryption (TLS/SSL).

Profile photos and payment screenshots are stored in Firebase Storage, also hosted on Google Cloud. Access is restricted so that only authorised administrators and the student themselves can view their own data.

We take reasonable precautions to protect your data, but no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

4. Payment Processing

Online fee payments on the Student Portal are processed by Cashfree Payments (Pine Labs Pvt. Ltd.), a licensed and PCI-DSS compliant payment gateway. When you make a payment, you are redirected to Cashfree's secure environment. We do not collect, see, or store your card details, UPI credentials, or net banking passwords.

Cashfree's privacy policy is available at cashfree.com/legal/privacy-policy.

5. WhatsApp Communication

By contacting us on WhatsApp or providing your phone number, you consent to receiving class-related messages from us on WhatsApp. You can opt out at any time by informing us or blocking our number. We do not add you to bulk groups without consent.

6. Cookies & Local Storage

Our website uses browser local storage (not cookies) to remember your login session on the Student Portal. This data stays on your device and is cleared when you close your browser tab or log out.

Google Firebase may set minimal technical cookies required for its services to function. No advertising cookies are used on this website.

7. Sharing of Information

We share personal data only with the following parties, and only to the extent necessary:

• Google Firebase / Google Cloud — for data storage and authentication.
• Cashfree Payments — for processing online fee payments.

We do not share your information with any other third party, including advertisers, data brokers, or social media platforms.

8. Children's Privacy

Many of our students are under 18 years of age. We do not knowingly collect personal data directly from children. Student accounts for minors are created and managed by a parent or guardian, who is responsible for the information provided. If you believe we have inadvertently collected personal data from a child without parental consent, please contact us immediately.

9. Data Retention

We retain student records for the duration of enrolment and for up to three years thereafter for administrative and legal purposes (e.g., fee records). You may request deletion of your data at any time (subject to legal retention obligations) by contacting us.

10. Your Rights

Under the Digital Personal Data Protection Act, 2023 (India), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your data (subject to legal obligations).
• Withdraw consent for specific uses of your data.

To exercise any of these rights, please contact us using the details below.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "Last updated" date. Continued use of our website or portal after changes are posted constitutes acceptance of the updated policy.

12. Governing Law

This Privacy Policy is governed by the laws of India, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023. Any disputes shall be subject to the jurisdiction of courts in Pune, Maharashtra.