Privacy Policy
Crestly is a school operating system used by educational institutions in India. This policy explains what data we collect, why, and how we protect it.
1. What we collect
- From school staff: name, mobile number, designation, attendance punches (with selfie and GPS, only when they use the punch feature).
- From schools: student records, fee structures, family contact details, expense vouchers — all data the school chooses to enter into the system.
- From visitors to crestly.in: name, school name, phone, and role — only when you fill the demo form. We also log IP and user agent for spam prevention.
2. How we use it
School data is used only to run the school's own ERP. We do not analyze, sell, or share it with third parties. Demo-request data is used to contact you about Crestly.
3. Where it lives
Each school's data is stored in a dedicated MySQL database on a server we deploy on the school's behalf (Hostinger / DigitalOcean / similar). The school owns the server and the data. We do not maintain a central pool of school data.
4. WhatsApp Business Platform
Crestly is an onboarded Tech Provider on the WhatsApp Business Platform (Meta). We integrate with the WhatsApp Business Cloud API to deliver two categories of messages:
- Platform messages (Crestly-owned number): one-time passwords (OTP) and account/security notifications sent from Crestly's own verified WhatsApp Business number. The only data shared with Meta for these messages is the recipient's phone number and the OTP/template content.
- School messages (school-owned number): when a school enables its own WhatsApp Business Account, message templates are submitted through Meta's Business Manager and sent from a number the school owns and controls. Crestly acts only as the Tech Provider that connects the school's WABA to its ERP.
All messages sent through WhatsApp are subject to Meta's WhatsApp Business Messaging Policy and WhatsApp Business Terms of Service. Phone numbers and message content transmitted to Meta are processed by Meta under its own privacy policy. Crestly does not sell, rent, or share end-user phone numbers or message content with any third party, and does not use this data for advertising or profiling.
5. Your rights
You can request export, correction, or deletion of your personal data at any time by emailing partner@crestly.in. We respond within 7 working days.
6. Cookies
The marketing site uses no analytics cookies. The ERP uses a single session cookie (crestly_sess) for login, with HttpOnly and SameSite=Lax flags.
7. Contact
For any privacy concern, email partner@crestly.in or WhatsApp us at +91 78519 49991.