Privacy Policy

Who we are and our two roles

MizEdu is provided by BrandMiz Private Limited (“BrandMiz”, “we”). We handle personal data in two different roles:

• As a Data Fiduciary for data about our own customers and prospects: people who visit this website, send us an enquiry, book a walkthrough, sign up, administer an institute’s account or contact support. This policy fully applies to that data.
• As a Data Processor for data that institutes put into MizEdu about their students, parents/guardians and enquirers. The institute is the Data Fiduciary for that data and decides why and how it is used; we process it only on the institute’s instructions under our Data Processing Addendum. If you are a student or parent, please read your institute’s privacy notice and contact the institute first. We will help the institute respond to you.

Personal data we collect as a Data Fiduciary

• Enquiries and walkthrough requests: name, work email, phone/WhatsApp number, institute name, city, size and your message.
• Account data: name, email, phone number, password (stored only as a one-way hash), Google sign-in identifier if you use it, role and the institute(s) you belong to.
• Billing data: institute name, billing address, GSTIN, plan, invoices and payment status. Payments are processed by Razorpay; we receive the payment reference and status and never receive or store full card numbers, CVV or UPI PINs.
• Support and communications: messages you send us by email, WhatsApp or phone and our replies.
• Technical data: IP address, browser and device type, pages requested, timestamps and security logs, needed to run and protect the Service.

We do not knowingly collect personal data of children as a Data Fiduciary. The website and our sales communications are intended for adults acting for institutes.

Why we use it and on what basis

Where we rely on consent, you can withdraw it at any time with the same ease as you gave it — by writing to support@mizup.app or using the unsubscribe link. Withdrawal does not affect processing done before it.

Data we process for institutes

Institutes use MizEdu to manage admissions. Depending on how an institute uses it, this can include students’ and parents’/guardians’ names, phone numbers, email addresses, city, course interest, preferred branch and batch, conversations, call outcomes, counselling and demo attendance, application documents, fee plans and payment status, and marketing source (for example the ad campaign).

For this data we act only on the institute’s instructions. We do not use it for our own marketing, we do not sell it, and we do not build profiles of students for advertising. The Service is designed so that lead scoring cannot use sensitive characteristics such as religion, caste, gender, health, disability or income.

Children’s data

Many students who enquire at coaching institutes and schools are under 18. Under section 9 of the DPDP Act, the institute (as Data Fiduciary) must obtain verifiable consent of a parent or lawful guardian before processing a child’s personal data and must not track, behaviourally monitor or target advertising at children. MizEdu supports this with guardian-consent documents for applicants under 18, consent records per channel and opt-out handling. We never use children’s data for our own purposes.

Who we share data with

We share personal data only as needed to provide the Service, with:

• Service providers (sub-processors) who host and operate parts of the Service for us — cloud hosting and storage, email delivery, SMS and WhatsApp Business solution providers, payment processing (Razorpay), sign-in (Google, if you choose it) and customer support tools. They are bound by contracts to protect the data and use it only for our instructions.
• Services an institute connects — for example its own Meta, Google, Razorpay or telephony accounts — on that institute’s instruction.
• Authorities when required by law, court order or a lawful request by a government agency.
• A successor if our business is merged or sold, subject to this policy.

We do not sell personal data.

Cookies and local storage

This website uses only essential storage — for example to remember that you dismissed the cookie notice or chose yearly pricing. The MizEdu app uses essential cookies to keep you signed in securely. We do not use advertising or cross-site tracking cookies. See our Cookie Policy for details.

Where data is stored

Data is stored on servers of our hosting provider in India. Some service providers may process limited data outside India (for example email delivery). Any transfer outside India is made in compliance with section 16 of the DPDP Act and never to a country or territory that the Central Government has restricted.

How we protect data

We maintain reasonable security safeguards, including isolation of each institute’s data, role-based access checked on the server, encryption in transit (HTTPS), hashed passwords, server-side storage of secrets, audit logs and backups. See our Security page. If a personal data breach occurs, we will inform the affected institute(s), the Data Protection Board of India and affected individuals as required by the DPDP Act and the rules made under it.

How long we keep data

We keep data about our customers for as long as the account is active and afterwards only as long as needed for the purposes above — for example invoices and payment records for the period required by tax and accounting law, and enquiry records for up to 24 months after last contact unless you become a customer. Institutes control retention of their own data; the default rules are:

Your rights

Under the DPDP Act you have the right to:

• obtain a summary of the personal data we process about you and the processing activities;
• request correction, completion, updating and erasure of your personal data;
• withdraw consent at any time;
• have your grievances redressed by us;
• nominate another person to exercise your rights in the event of death or incapacity.

To exercise a right, write to support@mizup.app from the email address we know you by, or contact our Grievance Officer. We may need to verify your identity. If your request is about data an institute holds about you as a student or parent, we will forward it to that institute and help them respond.

If you are not satisfied with our response, you may complain to the Data Protection Board of India after exhausting our grievance process.

Grievance Officer

In accordance with the Information Technology Act, 2000, the rules made under it and the DPDP Act, our Grievance Officer is:

Grievance Officer: Sumit Gupta
BrandMiz Private Limited, U-179, Office No. 303, 2nd Floor, Gali No. 4, Shakarpur, East Delhi, Delhi 110092, India
Email: support@mizup.app
Hours: Monday to Saturday, 10:00 am – 7:00 pm IST

We acknowledge grievances within 24 hours and aim to resolve them within 15 days. See Grievance Redressal.

Changes to this policy

We may update this policy. We will post the new version here with a new “last updated” date and, for significant changes, tell account owners by email or in the app.

Contact

BrandMiz Private Limited
Registered office: U-179, Office No. 303, 2nd Floor, Gali No. 4, Shakarpur, East Delhi, Delhi 110092, India
Email: admin@mizup.app · Support: support@mizup.app · WhatsApp: +91 87001 39720