The agreement behind the platform.

The Institution is the Data Fiduciary for personal data processed through the platform; NexusGrade is the Data Processor, acting on the Institution's documented instructions. The full detail of what that means in practice — what we do and do not do with the data — is set out in the Privacy notice, which forms part of this agreement.

• Publish your own privacy notice to students, parents and staff, and keep it current — the Compliance module is built to hold and version it.
• Obtain and record verifiable parental consent for a minor's data before it is processed, using the consent workflow rather than a paper tick-box.
• Configure account access and appointments accurately — the platform enforces capability × scope against what is actually configured, so an appointment that is not entered correctly does not grant the access a person should have, and one left active after it should have ended does.
• Respond to data-principal rights requests within the timeline you publish, using the Rights requests workflow.
• Use the platform, and permit its use, only for lawful educational administration — not to process data outside the purposes your own notice describes.

The Institution owns the data it puts into the platform. NexusGrade does not claim any ownership interest in it and does not use it for purposes beyond operating the service, as described in the Privacy notice. If the Institution ends its subscription, we will help it export its data, and an already-issued transcript or certificate remains independently verifiable through certificate verification regardless of subscription status.

Subscription fees are quoted against student count and campus structure, not per staff or parent login, as described on Pricing. There is no setup fee for a standard onboarding. Where the Institution collects fees from its own students and guardians through the platform, card and UPI payments settle through Razorpay under Razorpay's own terms; cash, cheque and DD collection at the counter is unaffected by the payment gateway's availability.

Each side keeps the other's confidential information confidential, and uses it only to perform this agreement. NexusGrade's technical and organisational measures — capability × scope authorisation, a full audit trail, an impersonation register, and data hosted within India — are described on Security & compliance and form part of this agreement by reference.

A subscription runs for the term stated on the order form and renews as agreed there. Either side may terminate for the other's uncured material breach. Specific notice periods, renewal terms and a suspension policy for non-payment are [to be confirmed on legal/commercial review]. Termination does not affect data export rights described above.

The service is provided on an "as available" basis; standard limitation-of- liability language, indemnities and a liability cap belong here once counsel has reviewed them against the specific commitments made in this agreement and the order form — [liability cap, indemnity and warranty language pending legal review]. Nothing in this section is intended to limit either side's rights or obligations under the DPDP Act.

This agreement is governed by the laws of India. The specific governing state and the courts with jurisdiction over a dispute are [governing state / jurisdiction to be confirmed on legal review]. A grievance about how personal data has been handled follows the Grievance officer process first, as the DPDP Act requires, before any complaint to the Data Protection Board of India.

We will post any material change to these terms here with an updated "last updated" date, and will tell subscribed institutions directly before a change that materially affects their agreement takes effect.

Questions about these terms can be sent to hello@nexusgrade.com, or via Contact.