1. Current sub-processors
| Name | Purpose | Data | Location | Safeguards |
|---|---|---|---|---|
| DigitalOcean DigitalOcean, LLC | Servers that run Acadvio; private object storage (Spaces) for documents, photos, exports and encrypted backups | All service data, as stored by the school | Bengaluru, India | Private storage opened only through signed links that expire in minutes; backups encrypted with AES-256-GCM before upload; access limited to our operations team |
| MongoDB Atlas MongoDB, Inc. | Database hosting | School records (each school in its own database) and user accounts | Mumbai, India (AWS ap-south-1) | Encrypted connections; database access limited to the application and our operations team |
| Cashfree Payments Cashfree Payments India Private Limited | Online school fee payments, only where a school turns them on, under the school’s own merchant account | Payer name, phone, email (optional), amount, school and payment reference. Card, UPI and bank details are entered on Cashfree’s checkout, never with Acadvio | India | RBI-authorised payment aggregator; the school is the merchant and contracts with Cashfree directly |
| Google Firebase Google LLC | Push notifications to the Acadvio app (Firebase Cloud Messaging, with Apple Push Notification service on iPhones) | A device token and app installation identifier. A notification carries only a generic title, such as “New notice from <School>”, and the ids the app needs to open the right screen: never names, marks, amounts or message text | Google cloud (outside India) | No school records are sent; the app shows the details only after sign-in |
Locations are where the data is stored. Transfers outside India follow section 16 of the DPDP Act and never go to a restricted country.
2. What we do not use
- Email is sent from our own mail server (Postal, run by us); no third-party email provider receives school data.
- No SMS provider: Acadvio does not send SMS.
- No analytics, advertising or tracking services, on this website or in Acadvio.
- No AI services process school data.
3. How we tell you about changes
Before we add or replace a sub-processor, we update this page and email the administrators of every school organisation at least 30 days in advance. A school may object on reasonable data protection grounds within that period; if we cannot address the objection, it may end the affected part of the service with a pro-rata refund, as set out in clause 7 of our Data Processing Addendum (v2026-10-16).
Questions: info@boffincoders.com.
Boffin Coders Private Limited · CIN U72900PB2017PTC046403 · GSTIN 03AAHCB2157K1ZT · C 201-202 (B), Cyber Cube, Phase 8B, Industrial Area, Sector 74, Mohali, Punjab 160055. All legal documents