Privacy Policy — LumenX

For the LumenX platform and applications listed below, LumenX acts as a Data Fiduciary (and, where an institute determines the purpose and means of processing student/staff data, LumenX may also act as a Data Processor / service provider on the institute’s instructions).

Contact for privacy and grievance redressal: official.lumenx@gmail.com. Address: Door / PIN 534201, Bhimavaram, West Godavari District, Andhra Pradesh, India.

Apps covered: LumenX Nexus (platform operations); LumenX Admin (institute administration); LumenX Connect (parents, teachers, and students); LumenX Admissions (applications and institute admissions); LumenX Careers (jobs and hiring); LumenX Transport (fleet and journey operations).

This Policy is designed with India Digital Personal Data Protection Act, 2023 (DPDP Act) first. Where other laws apply to specific users, we will honour mandatory rights under those laws to the extent required.

Account and identity data: name, email address, mobile number, password or authentication secrets (stored using industry-standard hashing/security controls), role, and institute or organisation affiliation.

Profile and service data: academic records inputs, attendance, fees visibility data, homework/diary content, applications, résumés, job posts, documents you upload, transport assignments, and similar education-operations data.

Device and usage data: app/pages used, feature actions, approximate timestamps, device/browser type, IP address (where logged for security), and crash/diagnostic events.

Communications: support messages, in-app notifications, and OTP / verification records.

Payment and billing records for institutes: plan selections, offline payment confirmations, invoices, and related audit metadata. We do not intend to store full card PAN or UPI credentials in Admin for offline settlement flows.

To create and manage accounts, authenticate users (including OTP where enabled), and provide requested features.

To operate institute workflows: academics, attendance, fees visibility, documents, admissions, careers hiring, transport operations, alerts, and notifications.

To process offline subscription billing, invoicing, and licence entitlements for institutes.

To secure the Services, prevent fraud/abuse, debug incidents, and enforce our Terms.

To comply with applicable law, respond to lawful requests, and handle grievances.

To improve product reliability and user experience using aggregated or de-identified insights where feasible.

We process personal data for lawful purposes connected with providing the Services, fulfilling institute contracts, complying with law, and employment/education administration as instructed by institutes.

Where consent is required under the DPDP Act or other applicable law, we will seek it in a clear manner (for example at signup or before a non-essential processing activity). You may withdraw consent for consent-based processing, subject to legal or contractual limits and the need to keep certain records.

Institutes remain responsible for providing necessary notices to students, parents, and staff for school-managed data and for ensuring they have a lawful basis to upload such data into LumenX.

Within your institute: authorised roles (admins, teachers, coordinators, drivers, etc.) may access data according to permissions configured by the institute.

Across portal workflows: recruiters receive applicant data for jobs you apply to; institutes receive admissions data you submit; parents may receive transport/academic notifications for linked children where enabled.

Service providers: trusted processors for hosting, databases, email/SMS OTP delivery, and similar infrastructure, under confidentiality and security obligations.

Legal and safety: where required by law, court order, or to protect rights, safety, and integrity of users or LumenX.

We do not sell personal data to third-party advertisers.

We aim to host and process primary production data in a manner consistent with Indian regulatory expectations for education platforms.

If any processing occurs outside India through a sub-processor, we will take steps required under applicable Indian law (including DPDP transfer conditions when notified/applicable) and contractual safeguards.

We retain personal data only as long as needed for the purposes above, including the life of an institute subscription, account status, dispute resolution, security logs, and legal record-keeping.

Institutes may request deletion or export of tenant data through supported channels, subject to backup cycles, audit requirements, and law.

OTP and short-lived verification records are retained for limited security windows.

We implement reasonable technical and organisational measures such as encrypted transport (HTTPS), access controls, hashed passwords, role-based permissions, and operational monitoring.

No method of transmission or storage is perfectly secure. Please protect your devices and credentials and notify us promptly of suspected unauthorised access.

Subject to the DPDP Act and other applicable law, you may have rights to access, correction, updating, and erasure of personal data; to withdraw consent where processing is consent-based; and to grievance redressal.

You may update certain profile fields in-product. For other requests, email official.lumenx@gmail.com with enough detail to verify your identity and locate the data.

We may decline or limit requests where law allows (for example legal holds, security, or where data is required to provide an active service).

Institute-controlled student data requests may need to be routed through the institute administrator.

Student accounts and academic data are typically provisioned or managed by institutes. Parents/guardians use Admissions and parent features on behalf of minors where applicable.

We collect only what is needed for educational and operational Services and expect institutes to minimise unnecessary data about children.

We use cookies, local storage, and similar technologies as described in our Cookie Policy — primarily for authentication, session continuity, and preferences.

Core academic, admission, and hiring decisions are made by institutes or recruiters. LumenX may use automated rules for security (for example rate limits, fraud signals) and operational alerts. Significant decisions about a student’s academic standing or hiring outcome are not intended to be made solely by LumenX automation without human institute/recruiter involvement.

We may update this Privacy Policy from time to time. The “Last updated” date (4 September 2026 or later) shows the latest revision. Continued use after an update constitutes acknowledgement of the revised Policy where permitted by law.

Privacy requests and grievances: official.lumenx@gmail.com.

Support: official.lumenx@gmail.com.

Postal: LumenX, Door / PIN 534201, Bhimavaram, West Godavari District, Andhra Pradesh, India.

We will endeavour to acknowledge and address grievances within timelines expected under applicable Indian law.