Privacy Policy — Flinterra

1. Introduction

Flinterra Private Limited ("Flinterra", "we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our platform.

Flinterra operates as an AI governance, integration, and orchestration platform for educational institutions. Our services are designed with privacy-by-design principles and full compliance with India's Digital Personal Data Protection Act, 2023 (DPDP Act).

2. Data We Collect

We collect only the data necessary to provide our services. This includes:

Institutional Data: Institution name, type, size, contact details of authorised representatives.
User Data: Names, email addresses, phone numbers, and roles of educators and administrators.
Student Data (limited): Anonymised learning goals, AI tool usage patterns, and milestone achievements. Raw student activity data is never accessed by Flinterra.
Parent Data: Contact information and dashboard preferences for receiving reports.
Technical Data: IP addresses, browser type, device information, and usage analytics.

3. How We Use Your Data

We use collected data for the following purposes:

To provide, maintain, and improve our AI governance platform
To generate AI policy documents and compliance recommendations
To create anonymised, aggregated institutional reports
To communicate service updates, policy changes, and support responses
To comply with legal obligations under DPDP Act 2023 and other applicable laws

4. Data Localisation & Storage

All student and institutional data is stored exclusively on Indian cloud servers (AWS Mumbai region / Azure India regions). Data is never transferred outside India without explicit consent and compliance with DPDP Act cross-border transfer provisions.

5. Data Minimisation & Retention

We collect only the minimum data required to deliver our services. Data is retained only as long as necessary for the purpose for which it was collected, or as required by law. Institutional data is retained for the duration of the service agreement plus 12 months, after which it is securely deleted or anonymised.

6. Consent Mechanisms

Flinterra operates on an explicit consent framework as required by the DPDP Act 2023. Parents or guardians provide consent for student data processing. Institutions provide consent for institutional data. Consent can be withdrawn at any time by contacting our grievance officer. Withdrawal of consent may affect service delivery.

7. Data Sharing & Disclosure

Flinterra does not sell personal data. We do not share personal data with third parties except:

With explicit consent from the data principal
With authorised institutional representatives as part of service delivery
With government authorities as required by law
With trusted service providers (cloud infrastructure, analytics) under strict data processing agreements

8. Your Rights

Under the DPDP Act 2023, you have the right to:

Access your personal data held by Flinterra
Correct inaccuracies in your personal data
Withdraw consent at any time
Request erasure of your personal data (subject to legal retention requirements)
Grievance redressal through our designated Grievance Officer

9. Security Measures

Flinterra implements appropriate technical and organisational measures to protect personal data, including encryption at rest and in transit, access controls, regular security audits, and employee training on data protection. We are working toward ISO 27001 certification.

10. Grievance Officer

In compliance with DPDP Act 2023, Flinterra has designated a Grievance Officer to address any concerns regarding data processing:

Email: grievance@flinterra.in
Address: Flinterra Private Limited, Surat, Gujarat, India

We acknowledge grievances within 24 hours and resolve them within 30 days as per DPDP Act requirements.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email and through our platform. Continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Us

For questions about this Privacy Policy or our data practices, please contact us at privacy@flinterra.in.