Privacy information

Privacy Policy

Effective date: 7 August 2024

Step Ahead provides the Perfect Aptitude website and platform. This policy explains the categories of information that may be processed through the public website and configured platform services, why it may be used, and the choices available to users. For institution-managed accounts, the institution may act as the primary decision-maker for student, teacher, guardian, classroom, and academic data.

1. Information collected through the public website

Contact and demo forms may collect your name, work or academic email, phone number, institution, institution type, learner-size range, preferred date, timezone, enquiry type, subject, message, source page, and basic technical information needed to secure and deliver the form. Accepted submissions are stored as private WordPress lead records before email or an administrator-configured webhook is attempted.

2. Account and platform information

Depending on the modules enabled by an institution, the platform may process account, identity, institution, membership, role, class, group, subject, timetable, calendar, session, attendance-related, transcript, translation, audio, content, assignment, reading, summary, question, MCQ, replay, support, guardian, licensing, cost, analytics, and governance information. The exact data depends on the institution’s configuration and operating agreement.

3. How information is used

  • Respond to enquiries, arrange demonstrations, and provide requested support.
  • Create and secure accounts, verify email, route membership requests, and enforce role and institution access.
  • Deliver configured classroom, language, content, revision, replay, calendar, support, analytics, and governance workflows.
  • Protect the service, prevent abuse, diagnose failures, maintain logs, recover incidents, and improve reliability.
  • Meet contractual, accounting, security, compliance, and legal obligations.

4. Service providers and recipients

Information may be available to authorised platform administrators and institution personnel and may be processed by configured hosting, email, security, storage, speech, translation, text-to-speech, document, AI, calendar, classroom, video, media, analytics, or integration providers. Only providers actually enabled for the deployment should receive relevant information, subject to their contracts and the institution’s configuration.

5. Student and child data

Student accounts and classroom workflows should be created and operated under the authority of the responsible institution and, where required, with appropriate guardian permission or other lawful authority. Public forms should not be used to send passwords, secret keys, unnecessary student records, health information, or sensitive classroom content.

6. Retention

Public contact and demo lead records are automatically deleted after 365 days under the current website configuration. Platform retention for accounts, classroom records, transcripts, content, replays, support, logs, and backups may differ and should be defined by the responsible institution and applicable agreement. Information may be retained longer where necessary for security, contractual, accounting, dispute, or legal obligations.

7. Security

The service uses role checks, institution scoping, account verification, nonce validation, private lead storage, anti-spam controls, and deployment-dependent security measures. No internet service can guarantee absolute security. Users must protect credentials and report suspected access or data incidents promptly.

8. International processing

Configured providers may process information in countries other than the user’s location. The responsible operator and institution should assess provider locations, transfer terms, contractual safeguards, and local legal requirements before enabling those services.

9. Your choices and rights

Depending on applicable law and the role of the institution, you may be able to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. Some records may need to be retained for security, contractual, academic, or legal reasons. Requests concerning an institution account should identify the institution and affected account.

10. Contact

Privacy questions may be sent to privacy@perfectaptitude.com or through the contact page.

Registered address: A-76, 1st floor, Udyog Vihar Phase 5, Gurgaon

11. Changes to this policy

This policy may be updated when the website, platform, providers, legal requirements, or operating practices change. The effective date above identifies the current published version.