Who We Are
FretBox is a hostel management software product developed and operated by BinaryDots Technologies Pvt. Ltd., a company registered in India.
Registered office: 1st Floor, B-32, Sector 57, Noida, UP 201309, India.
Under India's DPDP Act 2023, BinaryDots Technologies Pvt. Ltd. acts as a Data Processor on behalf of institutions (the Data Fiduciaries) that deploy FretBox for their students and staff.
Data We Collect
We collect only the data necessary to provide hostel management services. Data is provided to us by the institution — we do not collect data directly from students without institutional instruction.
Institutional data
- →Contact and administrative information
- →Billing and contract records
- →Configuration and settings
Resident / student data
- →Identity and contact details (as provided by institution)
- →Room allotments, attendance, leave records
- →Complaint and maintenance requests
- →Fee transaction records
Biometric data
- →Fingerprint or face data (only where biometric hardware is deployed by the institution)
- →Stored and processed under institution's direction
- →Never used for any purpose beyond access control
Platform usage data
- →Log data for security and debugging
- →Aggregated, anonymised usage analytics
- →No individual profiling for advertising
How We Use Data
🚫 We do not sell, rent, or share personal data with any third party for marketing, advertising, or analytics purposes — ever.
Data Ownership
The institution owns all student and resident data.
FretBox processes this data solely as a Data Processor under the institution's documented instructions. We have no independent right to use, analyse, or share this data for any purpose other than delivering the contracted services.
Security
FretBox is ISO 27001:2022 certified and undergoes annual independent VAPT by a CERT-In empanelled firm. Here's what that means in practice:
All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Role-based access controls ensure staff see only what their role permits. All access to production data is logged and reviewed quarterly.
Full security documentation → Security & Compliance pageData Retention
All institutional and student data is retained for the full duration of the active contract.
Data is retained for 12 months after contract end to allow for data export, dispute resolution, and regulatory compliance.
Institutions may request earlier deletion. We complete deletion within 30 days and provide a written deletion certificate.
Platform access and security logs are retained for 90 days and then automatically purged.
Where required by law or court order, data may be retained beyond the standard period. We will notify the institution where legally permitted.
DPDP Act 2023 Compliance
FretBox is designed and operated in alignment with India's Digital Personal Data Protection Act, 2023. Here's what that means for institutions and their students.
The institution determines the purpose and means of processing student data. They are responsible for obtaining consent from students (data principals) as required under the DPDP Act.
FretBox processes personal data only on documented instructions from the institution. We have no independent right to use this data and are contractually bound to the institution's data protection obligations.
Rights of Data Principals (Students / Residents)
Data Processing Agreement (DPA)
Our DPA is available to institutions during the evaluation process. It documents our obligations as a Data Processor, including data handling, sub-processor management, breach notification, and deletion procedures.
Request DPA → privacy@fretbox.inFull data privacy FAQ answered by our security team
8 detailed Q&As covering data ownership, residency, breach notification, third-party sharing, and more.
Grievance Officer
In accordance with the Digital Personal Data Protection Act 2023 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021, BinaryDots Technologies Pvt. Ltd. has designated a Grievance Officer to address data privacy concerns.
Grievance Officer
BinaryDots Technologies Pvt. Ltd.
1st Floor, B-32, Sector 57
Noida, UP 201309, India
grievance@fretbox.inResponse SLAs
Any data principal (student or resident) may raise a grievance directly with the Grievance Officer. If the grievance is not resolved to your satisfaction within 30 days, you may escalate to the Data Protection Board of India once constituted under the DPDP Act 2023.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:
- ✓Update the "Last updated" date at the top of this page.
- ✓Notify active institution administrators by email at least 14 days before the change takes effect.
- ✓For significant changes affecting data subject rights, we will seek fresh acknowledgement from institutions.
Continued use of the FretBox platform after the effective date of a policy update constitutes acceptance of the revised policy. We encourage institutions to review this page periodically.
Current version: September 2025 · Previous versions available on request at privacy@fretbox.in
Contact Us
Postal address: BinaryDots Technologies Pvt. Ltd., 1st Floor, B-32, Sector 57, Noida, UP 201309, India.
We aim to respond to all privacy-related queries within 2 business days.