Privacy
Privacy Policy
Version 2026-09-23 — last updated September 23, 2026
This policy explains what personal data Institflow, the vendor of a self-hosted product, collects when you create an Institflow account or when an institute you belong to uses Institflow. It does not describe what happens inside any one institute's own installation — each institute controls that itself, as explained below.
Institflow the vendor, and your institute
Institflow is the company that builds and licenses the Institflow software. Institflow is sold self-hosted only: each institute runs its own installation, on a server it controls, and is the controller of everything recorded inside it — students, attendance, grades, invoices, payments and messages. Institflow does not host, read or process that data. This policy covers only the data Institflow itself holds: your Institflow account and the vendor-run services described below.
Your Institflow account
If you sign in as a student or guardian, or use the Institflow account to reach an institute, Institflow holds your email address, your username, your phone number if you chose to give one, your language preference, the list of institutes you are linked to (and your status at each — invited, active or removed) and your active sign-in sessions. This is the minimum needed to give you one account across every institute you belong to, and to let an institute owner sign in to his own installation from the vendor's site without ever typing a password there.
Signing in as an institute owner or staff member
If you run or work at an institute, your institute's own installation checks your password on its own server — Institflow never sees it. The site's login page only resolves your email to your institute's own address so your browser can be sent there; it reads the address the vendor was told to recognise for you (your sign-up email, or a staff email your institute chooses to publish) for that one purpose, and does not record it.
How you reach an institute (invitations and links)
When an institute invites a student or guardian, it tells the vendor's platform your email so it can mail you an invitation; that invited-email record carries nothing else — no name, no grades, no attendance — and is deleted automatically after 90 days if no account is ever created from it. Once you sign in, the link between your account and that institute is recorded as active; you or the institute can remove it later without deleting your account.
The messaging relay
When an institute sends you email through Institflow's relay (for example a notice from its owner), the relay keeps your address only long enough to deliver the message and to show the institute what happened to it; recipient addresses are erased 90 days after sending. If a message to you bounces or is marked as spam, your address is kept in a suppression list as an irreversible cryptographic hash, never as readable text, so future sends can avoid it without the vendor holding your email indefinitely for that purpose.
Minors and guardians
Institflow is used by students who may be minors. A parent or guardian may hold the Institflow account on a minor's behalf; it is each institute's own responsibility, as the controller of its enrolment records, to decide whom it invites and in what capacity. Institflow does not independently verify age or guardianship.
Your rights over your account
From your account settings you can export a copy of your account data and the list of institutes you belong to, leave any institute without deleting your account, and delete your account entirely. Deleting your account removes the account row, its sessions and its institute links; an institute you belonged to keeps its own records exactly as they were, and you would need to be re-invited to sign in to it again.
Cookies
This marketing site sets no cookies of its own. The Institflow account host sets a single session cookie to keep you signed in, scoped to its own host only (a browser "__Host-" cookie) and never readable by any other site, including this one. Neither site uses tracking or analytics cookies.
Marketing communications
Creating an Institflow account does not sign you up for marketing email, and this policy does not ask for marketing consent. If that ever changes, it will be a separate, explicit choice, never something bundled into account creation.
Changes to this policy, and contact
We may revise this policy; the version and date at the top of this page will change when we do, and the version you accepted is recorded on your account. For a security report, write to security@institflow.com; for any other question about this policy or your data, write to support@institflow.com.