This policy explains how Driving Sathi ("we", "us") handles information when a driving school in Nepal uses our software to run its day-to-day operations. By using Driving Sathi you agree to the practices described here.
1. What we collect
To run a driving-school management platform, we collect three kinds of information:
a) Account information
- Driving school name, address, district & contact details
- Owner & staff names, phone numbers, email addresses, role & profile photo
- Login credentials (passwords are stored only as one-way hashes — we never see them)
b) Operational data your school enters
- Student profiles — name, contact, citizenship/license category, emergency contact
- Attendance records — manual or from your fingerprint terminal
- Invoices, receipts, expense entries & ledger transactions
- Vehicle records — plate, type, insurance & service logs
- Notes, announcements & messages created by your team
c) Technical & usage information
- Device type, browser, IP address & approximate location (city level)
- Pages you visit inside the dashboard & the actions you take
- Login & logout timestamps (used for the security audit log)
2. How we use it
We use the information above only to:
- Provide the Driving Sathi platform — run your dashboard, calculate balances, send reminders, generate reports
- Keep your account secure — detect suspicious logins, prevent unauthorised access
- Improve the product — understand which features are useful, where the dashboard is slow, what to build next
- Send essential operational communication — password resets, billing updates, security notices
- Comply with Nepali law — respond to lawful requests, maintain tax/accounting records
We do not use your data to train third-party AI models, do not sell it to advertisers, and do not share it with other driving schools.
3. Who we share with
We share information only with parties that are required to run the service, and only the minimum they need:
- Hosting providers — secure cloud servers that host your dashboard & backups (under strict data-processing agreements).
- Communication providers — SMS & messaging vendors used to deliver reminders & alerts on your behalf.
- Authorised support staff — Driving Sathi employees who help you with onboarding & problems (all under confidentiality obligations).
- Government or legal authorities — only when required by a valid order under the laws of Nepal.
That's it. We do not give your data to anyone else.
4. Where we store it
Your data is encrypted in transit (TLS) and at rest. It is stored on SOC 2-certified infrastructure with daily backups. Backups are kept encrypted in a separate region for disaster recovery.
Access to production data is restricted to a short list of senior engineers and audited automatically. Every access is logged.
5. How long we keep it
- Active accounts — we keep your data for as long as your school uses Driving Sathi.
- Closed accounts — we keep operational records for 12 months after closure to comply with Nepali book-keeping requirements, then delete or anonymise them.
- Audit logs & security records — kept for up to 24 months for security investigations.
- Marketing emails — removed within 30 days of unsubscribing.
You can request faster deletion at any time (see section 6).
6. Your rights
As the owner of your school's account, you can at any time:
- Access a copy of all data we hold about your school
- Correct any inaccurate or out-of-date information
- Export your students, invoices, attendance & reports as Excel/CSV
- Delete your account & all associated data (subject to retention obligations above)
- Restrict certain processing, e.g. opt out of marketing emails
To exercise any of these rights, email privacy@drivingsathi.com. We respond within seven business days.
7. Cookies & tracking
We use cookies for three things only:
- Session cookies — to keep you logged in
- CSRF tokens — to protect against cross-site request forgery
- Anonymous analytics — aggregate page views, with no personally identifiable information attached
We do not run advertising trackers or third-party retargeting pixels on the dashboard. The marketing website uses lightweight analytics; you can block them with any standard browser setting.
8. Children's data
Driving Sathi is built for licensed driving schools, whose students are typically 16+ in Nepal. We do not knowingly collect data about anyone under 13. If you believe we have, please contact us and we will delete it.
9. Changes to this policy
We may update this policy as our product evolves or as the law changes. When we do, we'll update the "Last updated" date at the top of this page and — for material changes — send an in-dashboard notice to all school owners at least 14 days before the change takes effect.
10. Contact us
Questions about this policy or how your data is handled?
- Email — privacy@drivingsathi.com
- Office — Driving Sathi, Kathmandu, Nepal
- Or use our contact form