Privacy policy

Last updated 7 November 2026

FirstDay is software that education agencies use to run their enquiries, admissions, fees and classes. This policy explains what we collect when you use our website or an agency uses FirstDay, why, and how it is kept.

Who we are

FirstDay is operated from Kerala, India. Questions about this policy can be raised on +91 80898 97266 or through the contact page.

Two kinds of data

Data about you, a visitor or customer: what you type into the demo or contact form (your name, agency, phone number, city and message), and the account details of staff who sign in (name, email, role).

Data an agency enters into its workspace: its enquiries, students, admissions, fees, classes and cases. The agency decides what goes in and is responsible for it. FirstDay holds it only to provide the service to that agency, and never uses it for anything else.

What we use it for

  • To call you back about a demo or a message you sent us.
  • To run the workspace: signing staff in, keeping each branch’s records separate, sending in-app notifications.
  • To keep the service safe: sign-in attempts are rate limited and an audit log records who changed what inside a workspace.

What we do not do

  • No advertising, no analytics trackers, no third-party cookies on the website or in the product.
  • No messages are sent on an agency’s behalf. WhatsApp links open the agency’s own WhatsApp; nothing passes through us.
  • No data is sold or shared with anyone, except the service providers who host the servers and database for us, under contract.

Cookies

The product sets a sign-in cookie, a cookie remembering which branch you are working in, and cookies remembering view preferences such as board or list. The website sets none beyond your theme choice. None of them track you across other sites.

Where it is kept and for how long

Data is stored on cloud servers under our control. Workspace data is kept for as long as the agency’s subscription runs and for 90 days after, so it can be exported; then it is deleted. Notifications are kept for 90 days. Demo and contact requests are kept until the conversation ends.

Your rights

You can ask what we hold about you, ask for it to be corrected, or ask for it to be deleted, and we will do so within 30 days unless the law requires us to keep it. Students whose details an agency has entered should ask that agency, which controls its own records; we will help the agency respond.

We follow the Digital Personal Data Protection Act, 2023 and the rules made under it.

Changes

If this policy changes in a way that matters, the date above moves and signed-in users are told inside the product.