Privacy Policy

1. Introduction

Exam Grader AI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered exam grading platform and related services.

By using our service, you consent to the data practices described in this policy. If you do not agree with our policies and practices, please do not use our service.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Name, email address, and contact information
• Organization or institution details
• Payment and billing information
• Account credentials and profile information
• Communication preferences

2.2 Payment Information

For payment processing, we use Cashfree as our third-party payment processor. We do not store your complete payment card details on our servers. Cashfree handles all payment transactions securely and in compliance with PCI DSS standards and RBI guidelines. We only store:

• Transaction IDs, order IDs, and payment session IDs
• Payment status and payment IDs
• Billing addresses for invoice purposes
• Payment method type (card, net banking, UPI, wallet, etc.)
• Order amounts, currency, and timestamps
• Receipt IDs for transaction records

Cashfree is a PCI DSS Level 1 certified payment gateway that ensures secure processing of all payment transactions. All sensitive payment information is encrypted and processed directly through Cashfree's secure infrastructure, and we never have access to your complete card details or CVV numbers.

2.3 Educational Data

As an educational platform, we may collect:

• Student information (names, IDs, grades)
• Exam questions and answers
• Evaluation results and feedback
• Performance analytics and reports
• Usage patterns and learning data

2.4 Technical Information

We automatically collect certain technical information:

• IP address and device information
• Browser type and version
• Operating system
• Usage logs and analytics
• Cookies and similar tracking technologies

3. How We Use Your Information

3.1 Service Provision

We use your information to:

• Provide and maintain our AI grading services
• Process payments and manage billing
• Generate evaluations and feedback
• Create performance reports and analytics
• Manage user accounts and access

3.2 Communication

We may use your contact information to:

• Send service updates and notifications
• Provide customer support
• Send marketing communications (with consent)
• Respond to inquiries and requests

3.3 Improvement and Analytics

We use aggregated data to:

• Improve our AI algorithms and services
• Analyze usage patterns and trends
• Develop new features and functionality
• Ensure security and prevent fraud

4. Information Sharing and Disclosure

4.1 When We Share Information

We may share your information in the following circumstances:

• With your consent: When you explicitly authorize us to share
• Service providers: With trusted third-party vendors who assist in operating our service
• Legal requirements: When required by law or to protect our rights
• Business transfers: In connection with a merger, acquisition, or sale of assets
• Safety and security: To protect against fraud, abuse, or security threats

4.2 Data Protection

We ensure that any third parties with whom we share data are bound by appropriate confidentiality and data protection obligations.

5. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Secure data centers and infrastructure
• Employee training on data protection

6. Data Retention

We retain your information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Improve our services

When we no longer need your information, we will securely delete or anonymize it.

7. Your Rights and Choices

7.1 Access and Control

You have the right to:

• Access and review your personal information
• Update or correct inaccurate information
• Request deletion of your data
• Export your data in a portable format
• Opt-out of marketing communications

To exercise these rights, please contact us at contact@examgrader.ai. We will respond to your request within 7 business days.

7.2 Cookies and Tracking

You can control cookies and tracking technologies through your browser settings. However, disabling certain cookies may affect the functionality of our service.

8. Children's Privacy and Student Data

Exam Grader AI is primarily used by educational institutions, schools, colleges, universities, coaching centers, and other academic organizations that may process student data for users of all age groups, including minors.

We do not directly collect personal information from students unless such information is provided by the institution, teacher, parent, or authorized guardian for legitimate educational purposes such as evaluation, grading, reporting, and academic performance analysis.

Institutions using our platform are responsible for ensuring that they have obtained all necessary permissions, lawful authority, and parental or guardian consent (where required under applicable laws) before uploading or processing student personal data through our services.

This includes compliance with applicable education laws, privacy laws, child protection regulations, and institutional policies related to minors and student records.

If we become aware that student data has been provided without proper authorization or required parental/guardian consent, we may suspend processing, request corrective action, or securely delete such information where appropriate.

Parents, guardians, or institutions may contact us at contact@examgrader.ai to request access, correction, deletion, or review of student-related personal information processed through our platform.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending email notifications to registered users
• Displaying prominent notices in our service

Your continued use of our service after such changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

12. Compliance with Indian Laws

In accordance with the Information Technology Act, 2000 and applicable rules, we are committed to addressing any concerns or feedback you may have regarding this Privacy Policy or the handling of your personal information. We comply with:

• Information Technology Act, 2000: Including reasonable security practices and procedures
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021
• Payment Card Industry Data Security Standard (PCI DSS): For payment processing through Cashfree (PCI DSS Level 1 certified)
• Reserve Bank of India (RBI) Guidelines: Compliance with RBI regulations for payment aggregators and payment gateways
• Cashfree Security Standards: All payment transactions are processed through Cashfree's secure, encrypted infrastructure

For any privacy-related questions, concerns, or feedback, please contact us at:

13. Compliance with India's Digital Personal Data Protection Act, 2023 (DPDPA)

We are committed to complying with the provisions of the Digital Personal Data Protection Act, 2023 (DPDPA), and other applicable Indian privacy and data protection laws.

Personal data is collected, processed, stored, and used only for lawful purposes related to providing our services, including academic evaluation, reporting, customer support, payment processing, security, and service improvement.

We implement reasonable security safeguards to prevent unauthorized access, disclosure, misuse, alteration, or loss of personal data, including access controls, encryption, secure infrastructure, and restricted internal access.

Users and institutions have the right to request access, correction, updating, or deletion of their personal data, subject to applicable legal and operational requirements. Requests may be submitted by contacting us at contact@examgrader.ai.

Where institutions process student data using our platform, such institutions are responsible for ensuring lawful collection, valid consent where required, and compliance with applicable privacy obligations under Indian law.

We will continue to update our practices and policies as regulatory guidance under the DPDPA evolves to ensure ongoing compliance and responsible handling of personal data.