Privacy Policy

1. Introduction

Edacify (“we”, “our”, or “us”) is committed to protecting the privacy of students, educators, administrators, and all other users of our education management platform (“Platform”). This Privacy Policy explains what information we collect, how we use it, and the choices you have regarding your data.

By using Edacify, you agree to the collection and use of information as described in this policy. If you do not agree, please discontinue use of the Platform.

2. Information We Collect

We collect the following categories of information:

• Account Information: Name, email address, mobile number, and role (student, teacher, or administrator) provided during registration.
• Institution Information: Institution name, type, address, and academic configuration (classes, subjects, divisions).
• Academic Data: Attendance records, exam marks, quiz attempts and scores, performance reports, and feedback submitted through the Platform.
• Profile Data: Optional profile details including address, emergency contact number, and face registration data (used solely for identity verification within your institution).
• Usage Data: Pages visited, features used, and interaction logs collected automatically to improve Platform performance and reliability.
• Device & Technical Data: Browser type, IP address, and device information collected automatically when you access the Platform.

3. How We Use Your Information

• To provide, operate, and maintain the Platform.
• To generate AI-powered quizzes and content based on teacher-provided topics and subjects.
• To display attendance records, performance analytics, and reports to authorized users within your institution.
• To send notifications and alerts relevant to your role and institution.
• To process subscription payments and manage billing for your institution.
• To provide customer support and respond to inquiries.
• To improve Platform features based on aggregated, anonymized usage data.
• To comply with applicable laws and regulations in India.

4. Legal Basis for Processing

We process personal data in compliance with applicable Indian data protection laws, including:

• Information Technology Act, 2000 and the rules made thereunder.
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”).
• Digital Personal Data Protection Act, 2023 (“DPDP Act”) and any rules notified thereunder.

Our legal basis for processing your data includes: (a) consent provided by you or by your institution on your behalf; (b) performance of our contract with your institution; (c) compliance with legal obligations; and (d) our legitimate interests in operating, improving, and securing the Platform.

5. Data Sharing and Third Parties

We do not sell your personal data. We share data only in the following limited circumstances:

• AI Service Providers: Quiz topics and subject context are sent to third-party AI providers to generate quiz questions. No personally identifiable student data is included in these requests.
• Hosting and Infrastructure Providers: Our Platform is hosted on third-party cloud infrastructure that provides server, storage, and content delivery services.
• Analytics Providers: We use anonymized analytics services to understand Platform performance and usage patterns. These services do not collect personally identifiable information.
• Payment Processors: Subscription payments are processed by third-party payment gateways that comply with applicable financial and data protection regulations.
• Legal Requirements: We may disclose data if required by law, court order, or government authority in India.

All third-party service providers are contractually bound to process data only as instructed by Edacify and to maintain appropriate security and confidentiality safeguards.

6. International Data Transfer

Some of our service providers may operate data centres outside India. By using the Platform, you acknowledge and consent to the transfer, storage, and processing of your data in jurisdictions that may have data protection laws different from those of India. We ensure that any such transfers are protected by appropriate contractual safeguards (such as standard contractual clauses or equivalent protections) consistent with applicable Indian law.

7. Data Isolation and Access Control

All data on Edacify is strictly scoped to your institution. No institution can access another institution's data. Within your institution, access is controlled by role — students can only view their own academic data, teachers can access their assigned classes, and administrators have institution-wide access.

8. Data Retention

We retain your data for as long as your institution maintains an active account with Edacify. If an institution cancels its subscription, data is retained for 90 days to allow for export or re-activation, after which it is permanently deleted. You may request earlier deletion by contacting us at support@edacify.com.

9. Data Breach Notification

In the event of a personal data breach that is likely to result in risk to your rights, we will notify the affected institution administrators and, where required, the Indian Computer Emergency Response Team (CERT-In) and the Data Protection Board of India, within the timelines prescribed by applicable law. Notifications will describe the nature of the breach, the data affected, the measures we have taken, and the steps you can take to mitigate potential harm.

10. Cookies and Tracking

Edacify uses session cookies to maintain your authenticated session. We also use anonymized analytics services to understand how the Platform is used. We do not use third-party advertising cookies or cross-site tracking.

11. Children's Privacy

Edacify is used by educational institutions and may involve student data including minors under the age of 18. Student accounts are created and managed by the institution (administrator or teacher), not directly by students themselves. Institutions are responsible for ensuring that appropriate consent is obtained from parents or legal guardians of minors as required by applicable law, including the DPDP Act, 2023. We do not knowingly collect personal data directly from minors without such consent.

12. Your Rights

Depending on your role and applicable law, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (subject to legal and contractual obligations).
• Withdraw consent previously provided.
• Nominate another individual to exercise your rights in the event of death or incapacity, as permitted under the DPDP Act.
• Lodge a complaint with the Data Protection Board of India.
• Export your institution's data in CSV/Excel format.

To exercise any of these rights, contact your institution administrator or reach us at support@edacify.com. You may also contact our Grievance Officer (see Section 16).

13. Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. All data is encrypted in transit (HTTPS) and at rest. Access to production systems is restricted to authorized Edacify personnel only.

14. Governing Law and Jurisdiction

This Privacy Policy is governed by and construed in accordance with the laws of India. Any disputes arising out of or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts at Ahmedabad, Gujarat, India.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify institution administrators of significant changes via email or an in-platform notice. Continued use of the Platform after changes constitutes acceptance of the updated policy.

16. Grievance Officer

In compliance with the Information Technology Act, 2000, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023, the contact details of our Grievance Officer are provided below. The Grievance Officer is responsible for addressing user complaints relating to the Platform and the processing of personal data.

17. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us: