Privacy Policy

1. Who is the data controller

Divisocial Tech Solutions Pvt. Ltd.("we") is the data controller for personal information collected through The Big Class. Our registered office is 7-B Race Course Road, Dehradun, Uttarakhand 248001, India.

For data you upload about your students, you are the data controller and we are the data processor. The terms governing that relationship are in our Data Processing Addendum.

2. What we collect

Account information

• Your name, email, WhatsApp number (E.164), country, workspace name, role.
• Authentication tokens used to keep you signed in.

Workspace activity

• Courses, lessons, quizzes, assignments, live class metadata you create.
• Logos, brand colours, and uploaded media (used to render your workspace).
• Settings, integrations, and preferences.

Student-facing data you upload

• Student names, emails, phone numbers, enrolment records.
• Attendance records, quiz attempts, assignment submissions.

Usage data

• Pages visited, features used, error logs — used only to operate and improve the product.

3. What we don't collect

• We do not collect payment card numbers — those are handled by our PCI-compliant payment processors.
• We do not use third-party advertising trackers. You will not see Google Ads, Facebook Pixel, or other ad-network beacons on our product surfaces.
• We do not use your Content, or your students' Content, to train artificial-intelligence models.

4. How we use it

• To operate the service — render your workspace, deliver classes, send reminders, process payments.
• To send transactional emails and WhatsApp messages (account verification, password reset, class invites) using the senders you configure.
• To detect abuse, fraud, and security incidents.
• To improve the product (anonymised usage analytics).
• To send product updates — you can opt out from your account settings.

5. Cookies

We use a minimal set of first-party cookies and localStorage entries to keep you signed in, remember your workspace, and remember your preferences. See our Cookies Policy for the full list.

6. Sub-processors

We use the following sub-processors to run the service. They are bound by data-processing terms equivalent to or stricter than these:

• Cloud hosting — Amazon Web Services (Mumbai region by default; EU / US on request for Scale).
• Transactional email — ZeptoMail by Zoho Corporation.
• WhatsApp delivery — Meta Platforms Inc. (via WhatsApp Business API, when you connect your sender).
• Video conferencing — Google Meet / Zoom / Microsoft Teams (only when you choose to use them).
• Payments — your chosen processor (e.g. Razorpay, Stripe).

7. Your rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data (subject to legal retention requirements).
• Export your workspace data in a portable format.
• Object to or restrict certain processing.
• Lodge a complaint with a data protection authority.

Email hello@thebigclass.com to exercise any of these rights. We respond within 30 days.

8. Data retention

We retain workspace data for as long as your workspace is active. After cancellation, your data is retained for 30 days to allow re-activation or export, after which it is permanently deleted from our production systems.

9. International transfers

Your data is hosted in India by default. For Scale customers we can host data in EU or US regions. When personal data crosses borders, we rely on Standard Contractual Clauses (SCCs) or equivalent legal mechanisms.

10. Children

The Big Class is not directed at children under 13. If you are a school or institute teaching minors, the Workspace Owner is responsible for obtaining the consents required under applicable law and confirms by using the platform that those consents are in place.

11. Changes to this policy

We will notify you of material changes via email and an in-app announcement. The "last updated" date at the top of this policy tells you when it was last revised.

12. Representatives

For UK and EEA-specific representatives, see our UK Privacy Representation and GDPR Representation pages.