Privacy Policy

1. Institutional Role: Data Fiduciary & Data Processor

Under the Digital Personal Data Protection Act, 2023 ("DPDP Act"):

2. Categories of Information Processed

TeachMentorAI processes only the minimal educational data required to operate daily school workflows:

• Student Profiles & Rosters: Student full name, roll number, admission registration number, section assignment, date of birth, blood group, emergency contacts, and guardian details.
• Academic Assessment Records: CBSE, ICSE, and State Board exam scores, formative assessments, marks card layouts, teacher remarks, and homework submissions.
• Attendance & Check-In Logs: Daily period attendance, absence digests, and timestamped gate entry check-ins.
• Faculty & Staff Records: Staff employee code, department, assigned teaching timetable slots, approved leaves, and salary expense records.
• Guardian Communication: Registered parent mobile numbers and emails used for Instant OTP authentication, automated WhatsApp fee receipts, and school broadcast alerts.

3. Strict Anti-Monetization & No-Ads Guarantee

4. Campus GPS Geofencing Policy

TeachMentorAI includes an optional staff and gate attendance check-in feature with GPS geofencing:

• Strictly Localized Radius Check: Geolocation coordinates are captured exclusively at the precise moment a staff member taps "Check In" or "Check Out" to verify physical presence within the campus boundary radius configured in /settings/geofence.
• Zero Continuous Background Tracking: TeachMentorAI does not run continuous GPS tracking in the background. Once the check-in is logged, location tracking ceases immediately.

5. Fee Payment Security (Razorpay)

Online tuition and transport fee collections are processed directly through Razorpay, a RBI-licensed, PCI-DSS Level 1 compliant payment aggregator:

• All UPI, NetBanking, debit, and credit card credentials are entered directly into Razorpay’s encrypted payment gateway iframe.
• TeachMentorAI never intercepts, logs, or stores card numbers, CVVs, UPI PINs, or banking passwords.
• We receive only the transaction reference ID, status (Captured/Failed), and amount to update the school ledger in real time.

6. AI Processing & Bring Your Own Key (BYOK)

TeachMentorAI’s AI Center (such as report card remarks and Socratic study mentoring) adheres to strict privacy safeguards:

• Institutional BYOK Architecture: Schools connect their own AI provider accounts (OpenAI, Google Gemini, Anthropic Claude, Groq). TeachMentorAI does not route your data through opaque third-party shared model weights.
• No Model Training on Student Data: School prompts and student answers are processed strictly in inference mode and are never used to train public foundation models.
• Human-in-the-Loop: AI-generated student comments or administrative digests remain drafts until a certified teacher or principal manually approves them.

7. Data Retention & Institutional Purge

Educational records belong exclusively to the school. Upon contract termination or formal exit:

• The school can export all academic years, rosters, marks, and ledger transactions in standard formats (CSV, JSON, PDF).
• Following written institutional confirmation, all school database rows, backups, and file tokens are securely shredded and purged from production storage within 60 days.

8. Grievance Redressal & Compliance Officer

In compliance with the Information Technology Act, 2000 and Rule 5(9) of the IT Rules 2011, and the DPDP Act 2023: