Last Updated: September 7, 2026

1. Introduction

Rooks Technologies / RooksBrooks IT ("we", "us", or "our") operates the InfevoX Institute Management Application ("InfevoX", "App", or "Service").

InfevoX is an institute management and learning management application intended for educational institutions, coaching centers, academies, colleges, and training organizations.

This Privacy Policy explains what information we collect, how we use it, how we store and protect it, when it may be shared with service providers, and the choices available to users.

By downloading, installing, accessing, or using InfevoX, you acknowledge that you have read and understood this Privacy Policy.

If you do not agree with this Privacy Policy, please do not use the Application.

2. Information We Collect

We collect information that is necessary to provide the features and services of InfevoX.

2.1 Personal Information

Depending on the user's role and the features used, we may collect:

• Full name

• Email address

• Username

• Phone number

• Profile photograph

• Date of birth

• Gender

• Residential address

• City, state, postal code, and country

• Student ID

• Staff ID / Employee ID

• Designation

• Branch information

• Joining date

• Enrollment date

• Guardian or parent information

• Emergency contact information

• Academic qualifications and professional information where applicable

2.2 Academic Information

For students and educational institutions, the Application may process:

• Course enrollment information

• Batch information

• Class schedules

• Timetables

• Syllabus and module completion

• Learning resources

• Video access information

• Quiz responses

• Test submissions

• Assignment submissions

• Examination information

• Scores and grades

• Academic remarks

2.3 Attendance Information

The Application may collect and process:

• Daily attendance

• Present/absent records

• Leave applications

• Holiday schedules

• Attendance percentages

• Staff working-day records

• Staff duty and lecture assignments

2.4 Financial and Fee Information

The Application may process information related to institutional subscriptions, student fees, and staff payroll, including:

• Subscription plan

• Billing frequency

• Subscription status

• Payment dates

• Fee structures

• Discounts and waivers

• Payment receipts

• Due amounts

• Outstanding balances

• Payment transaction identifiers

• Staff salary and payroll information

InfevoX does not store credit/debit card numbers, card expiration dates, CVV/CVC codes, NetBanking PINs, or UPI security PINs. Payment processing is handled through the applicable payment gateway.

2.5 Device and Technical Information

We may process limited technical information necessary to operate and maintain the Application, including:

• Firebase Cloud Messaging (FCM) push notification tokens

• Device operating system information

• Network connectivity status

• Application crash and diagnostic information

• Authentication and OTP verification information

FCM tokens are used to deliver notifications and alerts through the Application.

3. How We Collect Information

Information may be collected through:

3.1 Information You Provide

You may provide information when you:

• Create or access an account

• Complete your profile

• Upload a profile photograph

• Submit assignments

• Upload documents

• Submit academic information

• Update account settings

3.2 Information Provided by the Institution

Authorized institute administrators may create and manage accounts for students, staff, faculty, and other authorized users.

3.3 Information Generated Through App Use

Certain information is generated when you use the Application, such as:

• Attendance records

• Quiz submissions

• Assignment submissions

• Academic results

• System activity

• Notification delivery information

3.4 Payment Information

Payment-related transaction information may be received from the payment service provider when a payment or subscription transaction is completed.

4. How We Use Information

We use collected information only for purposes necessary to provide and operate InfevoX.

This includes:

• Creating and managing user accounts

• Authenticating users

• Providing secure login and OTP verification

• Managing student and staff profiles

• Managing courses and batches

• Providing timetables and schedules

• Managing attendance

• Managing assignments, tests, quizzes, and examinations

• Recording academic performance

• Managing institute branches

• Managing student fees

• Processing payments

• Generating receipts

• Managing staff payroll

• Sending important notifications and announcements

• Providing customer support

• Troubleshooting technical problems

• Improving Application reliability and functionality

We do not sell, rent, or monetize personal or institutional information to advertisers or third parties.

5. How We Share Information

We do not sell personal information.

Information may be shared with or processed by service providers when necessary to operate InfevoX.

5.1 Google Firebase and Google Cloud

InfevoX uses Google Firebase and Google Cloud services for functions such as:

• User authentication

• Database services

• Cloud storage

• Push notifications

5.2 PayU

Where payment functionality is enabled, PayU may process payment-related information for:

• Subscription payments

• Student fee payments

• Payment transaction processing

Only information necessary for these services is shared with the relevant service provider.

6. BILLING, SUBSCRIPTION, AND REFUND POLICY

InfevoX follows a structured subscription-based billing model to provide software services and cloud infrastructure to organizations and educational institutions in a secure, transparent, and scalable manner.

6.1 Subscription Plans & Tiers

• InfevoX offers multiple structured subscription tiers, including Silver, Gold, Platinum, and Enterprise plans.

• Each plan provides a distinct set of features, student enrollment capacities, faculty seats, branch allocations, automated messaging limits, and service levels tailored to organizational needs.

• Institutional administrators can review, select, or upgrade their subscription tier directly through the in-app subscription management dashboard.

6.2 Payment Processing via PayU

• All subscription fees, plan renewals, and in-app tuition collections are securely processed through the PayU Payment Gateway (PayU Payments Private Limited).

• PayU provides a PCI-DSS Level 1 compliant payment gateway with 256-bit SSL encryption, tokenized transactions, and SHA-512 cryptographic response hash verification.

• InfevoX does not store, process, or retain sensitive payment credentials such as credit/debit card numbers, CVV codes, expiry dates, net banking passwords, or UPI PINs on its application servers or databases.

6.3 Subscription Usage & Non-Transferability

• Subscriptions are strictly non-transferable between organizations.

• Each subscription is linked to a specific registered organization/tenant account.

• A subscription cannot be shared, reassigned, sublicensed, or transferred to another institution.

6.4 Data Security and Strict Isolation

• Each organization's data is securely stored and maintained with strict isolation within Google Cloud Firestore.

• InfevoX ensures that data, financial reports, student records, and administrative communications belonging to one organization are not shared across different organizations.

• Access to organizational information is controlled according to applicable account roles and permissions.

6.5 Refund Policy

• Subscription fees are generally non-refundable once the billing cycle has commenced and services have been provisioned.

• In eligible cases, as determined by company policy, refunds may be processed. Examples may include verified duplicate transactions or technical provisioning failures.

• Approved refunds will be completed and credited back to the original payment method within 5–7 working days from the date of approval.

7. Data Storage

InfevoX uses cloud infrastructure for storing and processing application information.

The Application uses Google Cloud Firestore and Cloud Storage for applicable database and media-storage functions.

User and institutional information is logically separated according to the institution and user role. Access is controlled using role-based permissions and server-side security rules.

8. Application Permissions

InfevoX may request certain permissions depending on the features you use.

Camera Permission

Camera access may be requested when you choose to:

• Take a profile photograph

• Capture a document

• Capture an image for an assignment

Photos / Storage Permission

This permission may be required when you choose to:

• Upload photographs

• Upload assignments

• Upload documents

• Upload educational PDFs

• Save digital receipts

Notification Permission

Notification access may be used to send:

• Academic announcements

• Attendance alerts

• Fee reminders

• Examination notifications

• Emergency announcements

• Other important system notifications

Internet Permission

Internet access is required to:

• Connect to application servers

• Synchronize information

• Retrieve application data

• Submit information

• Access cloud-based services

You can manage applicable permissions through your device settings. Disabling certain permissions may prevent related Application features from functioning.

9. Data Security

We use reasonable technical and organizational measures designed to protect information from unauthorized access, alteration, disclosure, or destruction.

Security measures described for InfevoX include:

• Encrypted communication between the Application and cloud services

• Encryption of stored data

• Authentication controls

• Access controls

• Role-based permissions

• Authentication rate limiting

• Session/token protections

• Administrative audit records

No method of electronic transmission or storage can be guaranteed to be completely secure. Therefore, while we take appropriate measures to protect information, we cannot guarantee absolute security.

10. Data Retention

We retain information for as long as reasonably necessary to provide the Application and its services.

For institutional accounts, personal and academic information may be retained during the institution's active subscription period.

After subscription termination, applicable data may remain available during a limited period for account closure, data export, and administrative purposes.

Following account cancellation and expiration of the applicable retention period, data may be deleted from active systems according to our deletion and backup procedures.

11. Account and Data Deletion

Users may request deletion of their account or personal information, subject to applicable legal, contractual, academic, or institutional retention requirements.

To request deletion, contact:

Email: support@rookstechnologies.com

Institutional administrators may also request deletion of institutional data on behalf of their organization.

When a deletion request is approved and no legal or operational requirement requires continued retention, applicable information will be deleted in accordance with our data-retention procedures.

12. User Rights

Subject to applicable laws and institutional policies, users may have rights including:

Right to Access

Users may access information available through their InfevoX account, such as profile, attendance, academic, and fee information.

Right to Correction

Users may request correction of inaccurate personal information.

Right to Deletion

Users may request deletion of their personal information where applicable.

Right to Control Notifications

Users may disable application notifications through their device settings.

Requests relating to institutional or academic records may need to be handled through the relevant educational institution administrator.

13. Children's and Student Privacy

InfevoX may be used by educational institutions serving students under the age of 18.

Where students are minors:

• Accounts may be created and managed under the supervision of the educational institution and/or authorized parent or guardian.

• Information is collected for educational and institutional management purposes.

• We do not use student information for behavioral advertising.

• We do not sell student information for commercial purposes.

Parents or guardians with questions or concerns about a minor's information may contact us or the relevant educational institution.

14. Third-Party Services

InfevoX relies on third-party services to provide certain application functions.

These may include:

Google Firebase / Google Cloud

• Authentication

• Database

• Cloud storage

• Push notifications

PayU

• Payment gateway services

• Subscription payments

• Fee payment processing

Third-party services may process information according to their own applicable privacy policies and terms of service.

15. No Sale of Personal Information

We do not sell, rent, or trade personal information to third parties.

We do not use personal or institutional information for behavioral advertising or commercial profiling.

Information may be processed by service providers only when necessary to provide, maintain, secure, or support the Application and its associated services.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Changes may be made when:

• Application features change

• New services are introduced

• Data-processing practices change

• Applicable legal or regulatory requirements change

• Security or technical improvements are implemented

When we make changes, we will update the Last Updated date shown at the beginning of this Privacy Policy.

Users are encouraged to review this Privacy Policy periodically.

17. Contact Us

If you have questions, concerns, requests, or complaints regarding this Privacy Policy or the handling of your information, please contact us.

Rooks Technologies / RooksBrooks IT

Attention: Data Protection & Privacy Grievance Officer

Email: support@rookstechnologies.com

Phone: +91 89256 33099

Operating Hours: Monday – Saturday, 9:00 AM – 6:00 PM 

Location: Chennai, Tamil Nadu, India

We will review and respond to privacy-related requests in accordance with applicable laws and our internal procedures.