1. Introduction
Archana Info Solutions Pvt Ltd (“we”, “us”, or “EduAssess”) is committed to protecting the privacy of students, parents, teachers, and administrators who use EduAssess AI. This Privacy Policy explains how we collect, use, store, and safeguard information when you use EduAssess AI (the “Service”) at www.archanainfo.com/EduAssessAI.
EduAssess AI is an education technology platform that processes sensitive student data including academic performance, assessment responses, and learning analytics. We treat this data with the highest level of care and comply with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.
By using EduAssess AI, you agree to this Privacy Policy. If you do not agree, please do not use our Service.
DPDP Compliance: EduAssess AI is built to comply with India’s Digital Personal Data Protection Act, 2023. We serve as a Data Processor when handling student data on behalf of educational institutions (Data Fiduciaries). Parental consent is required for processing personal data of children under 18.
2. Information We Collect
2.1 Institution & Staff Information
When your institution registers for EduAssess AI, we collect:
- Institution name, type (K-12, coaching, college), and address
- Administrator and teacher full names and email addresses
- Phone numbers and role designations
- Encrypted passwords (SHA-256 hashed — never stored in plain text)
- Board affiliation (CBSE, ICSE, State Board, IGCSE, etc.)
2.2 Student Data
With your institution’s authorisation, we process the following student information:
- Full name, roll number, class, section, and date of birth
- Parent/guardian name and contact details (for result sharing)
- Subject enrolments and syllabus progression
- Exam attempts, responses, and scores
- AI-generated performance predictions and remedial plans
- Attendance and engagement metrics
Student data is collected and processed only when authorised by the institution (as Data Fiduciary) and, where required by law, with verifiable parental consent for students under 18.
2.3 Assessment Content
Question papers, rubrics, student answer scripts (typed or OMR-scanned), and AI-generated evaluation feedback are stored securely to provide the core assessment and analytics features of the Service.
2.4 Usage Data
We automatically collect:
- IP address and approximate location
- Browser type, device, and operating system
- Pages visited and features used within the platform
- Timestamps of exam attempts, evaluations, and logins
- Error logs and performance metrics
2.5 Cookies
We use essential cookies to maintain your session and preferences. We do not use third-party advertising cookies or share data with advertisers. You can disable cookies in your browser settings, but this may affect certain Service functionality.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the EduAssess AI Service
- Generate AI-powered questions, evaluate answers, and predict performance
- Produce personalised remedial plans and learning recommendations
- Share results, progress reports, and alerts with parents and teachers
- Send service notifications, security updates, and transactional emails
- Respond to support requests from institutions, teachers, and parents
- Detect, prevent, and address security issues, fraud, and exam cheating
- Comply with legal obligations and enforce our Terms of Service
We do not use student data for advertising, profiling for commercial gain, or any purpose unrelated to education.
4. Data Security
We take the security of student and institutional data extremely seriously. EduAssess AI uses:
- Encryption at rest: All student data and assessment content are encrypted with AES-256
- Encryption in transit: All communication uses TLS 1.2 or higher
- Access controls: Role-based permissions (Admin, Teacher, Student, Parent) with least-privilege principles
- Audit trails: Every sensitive action on student data is logged and auditable
- Regular backups: Encrypted backups stored in geographically separate locations within India
- Infrastructure: Hosted in ISO 27001-aligned data centres with 24/7 monitoring
- Proctoring data: Webcam snapshots from live proctoring are retained only as long as required by institution policy and auto-deleted thereafter
No method of internet transmission or electronic storage is 100% secure, but we use industry best practices to protect your data.
5. AI Model Usage
EduAssess AI uses large language models (including Anthropic’s Claude API) to generate questions, evaluate answers, and produce remedial plans. When student data is sent to AI models:
- Student data is not used to train any public AI models
- Student names and personal identifiers are masked where feasible before AI processing
- Requests are encrypted and transmitted securely
- AI providers operate under strict data processing agreements
- AI output is processed only to provide the features you requested
6. Data Sharing & Disclosure
We do not sell, rent, or trade student data or institutional information. We may share information only in the following limited circumstances:
- Within the institution: Teachers see their assigned students; administrators see all users at their institution; parents see only their own child’s data
- Service providers: Trusted third parties who help operate the Service (hosting, AI processing, SMS/WhatsApp, email delivery), bound by confidentiality agreements
- Legal compliance: When required by law, regulation, legal process, or valid government request from Indian authorities
- Safety: To protect the rights, property, or safety of EduAssess, our users, or the public
- Business transfers: In connection with a merger, acquisition, or sale of assets (you will be notified at least 30 days in advance)
7. Parental Consent & Children’s Data
EduAssess AI is designed for use in educational institutions where students are enrolled. For students under 18 years of age:
- We rely on the institution (Data Fiduciary) to obtain verifiable parental consent before enrolling a child on the platform
- Parents have the right to access their child’s data via the Parent Portal
- Parents may request deletion or correction of their child’s data by contacting the institution or us directly
- We do not target behavioural advertising or profiling at children for commercial gain
8. Your Rights Under DPDP Act
As a Data Principal under India’s DPDP Act, 2023, you have the right to:
- Access: Request a copy of the personal data we hold about you or your child
- Correction: Request that we correct inaccurate, incomplete, or outdated data
- Erasure: Request deletion of personal data (subject to legal and contractual obligations)
- Grievance redressal: Contact our Data Protection Officer for complaints
- Nominate: Nominate another person to exercise your rights in case of incapacity
- Withdraw consent: Where processing is based on consent
To exercise any of these rights, email our Data Protection Officer at dpo@archanainfo.com. We will respond within 30 days as required by law.
9. Data Retention
We retain student and institutional data for as long as the institution maintains an active subscription, plus a grace period of 90 days after termination to allow for data export. Academic records required for audit and certification purposes may be retained for up to 7 years as per Indian record-keeping laws.
When an institution closes its account and requests data deletion, we permanently erase personal data within 90 days, except where legal obligations require longer retention.
10. Data Localisation
EduAssess AI is operated from India and all primary student data is stored on servers located within India. Limited non-personal data (anonymised usage statistics, error logs) may be processed outside India by our cloud infrastructure providers, under appropriate safeguards.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page and notify registered institutions of material changes via email. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us: