Last Updated: December 15, 2023 | Effective Date: October 15, 2023
1. Information We Collect
At EduAI Labs, we collect information to provide exceptional educational services while complying with the Digital Personal Data Protection Act, 2023 and other applicable Indian laws.
Personal Information
When you register for our courses or contact us, we collect necessary personal information including:
- Student and parent/guardian names
- Contact details (email, phone number, address)
- Academic information and performance data
- Payment and billing information
- Government-issued identification for verification
Usage Information
We collect information about how you use our platform to enhance learning experiences:
- Course progress and completion rates
- Assessment scores and learning patterns
- Platform interaction data
- Time spent on educational content
Technical Information
For security and optimization purposes, we collect:
- IP addresses and device information
- Browser type and version
- Platform usage analytics
- Security and performance metrics
2. How We Use Your Information
We use collected information solely for legitimate educational purposes:
- To deliver and improve our AI-powered educational services
- To process course registrations and manage payments
- To provide personalized learning experiences and progress tracking
- To communicate important updates, course information, and educational content
- To ensure platform security and prevent fraudulent activities
- To comply with Indian educational regulations and legal requirements
- To conduct research and development for educational improvement
3. Information Sharing & Disclosure
We respect your privacy and do not sell your personal data. Information sharing occurs only in specific circumstances:
- With Your Consent: When you explicitly permit information sharing
- Educational Partners: With trusted educational institutions and partners for service delivery
- Legal Compliance: When required by Indian courts, government authorities, or legal processes
- Service Providers: With verified partners who assist in platform operations under strict confidentiality
- Business Transfers: In case of merger, acquisition, or business transfer with proper safeguards
Cross-Border Data Transfer
We primarily store data within India. Any international data transfer complies with DPDPA 2023 requirements and ensures adequate protection.
4. Data Security Measures
We implement robust security measures in compliance with Indian IT Act, 2000 and DPDPA 2023:
- End-to-end encryption for data transmission
- Secure servers with regular security audits
- Access controls and authentication protocols
- Regular security training for our staff
- Incident response and data breach management procedures
- Regular vulnerability assessments and penetration testing
While we implement industry-standard security measures, no electronic storage or transmission method is 100% secure.
5. Your Data Protection Rights (DPDPA 2023)
Under Indian data protection laws, you have the right to:
- Right to Access: Request copies of your personal data
- Right to Correction: Update or correct inaccurate information
- Right to Erasure: Request deletion of your personal data
- Right to Grievance Redressal: File complaints regarding data processing
- Right to Nominate: Appoint another individual to exercise your rights in case of incapacity or death
- Right to Withdraw Consent: Withdraw previously given consent for data processing
To exercise these rights, contact our Data Protection Officer using the details below.
6. Children's Privacy & Parental Consent
We are committed to protecting children's privacy as per Indian regulations:
- We collect minimal information from children under 18
- Parental/guardian consent is required for students under 18
- We do not knowingly collect personal information from children without verification of parental consent
- Parents can review, update, or delete their child's information
- We implement additional safeguards for children's data protection
7. Data Retention Period
We retain personal data only as long as necessary for educational purposes:
- Active student data: Until course completion + 5 years for academic records
- Inquiry data: 2 years from last contact
- Payment information: As required by Indian financial regulations
- Legal compliance data: As mandated by applicable laws
Data is securely archived or anonymized after retention periods expire.
8. Changes to Privacy Policy
We may update this policy to reflect changes in our practices or legal requirements:
- Significant changes will be notified via email and platform announcements
- Continued use of our services after changes constitutes acceptance
- We maintain version history of all policy changes
- Users can review previous versions upon request
9. Grievance Redressal & Contact Information
For privacy-related concerns or to exercise your rights:
10. Governing Law & Jurisdiction
This Privacy Policy is governed by Indian laws, specifically:
- Digital Personal Data Protection Act, 2023
- Information Technology Act, 2000 and its amendments
- Relevant rules and regulations under Indian jurisprudence
Any disputes shall be subject to the exclusive jurisdiction of courts in Mohali, Punjab.
