Privacy Policy

Edmento Technologies Private Limited (“Edmento”, “we”, “us”) acts as:

• Data Controller — for personal data collected directly from individual users (teachers, parents, administrators) who register on our Platform.
• Data Processor — for student academic data and institutional records, which are processed solely on behalf of the subscribing school (Data Fiduciary) as defined under the Digital Personal Data Protection Act, 2023 (DPDP Act).

Our registered address is Cherukavu, Malappuram, Kerala 676519, India.

2.1 Account & Registration Data

Name, email address, mobile number, designation/role (Administrator, Teacher, Parent, or Student), school name, and city.

2.2 Usage & Device Data

Pages visited, features used, session duration, device type, browser, operating system, IP address, and approximate location derived from IP.

2.3 Student Academic Data

Attendance records, grades, assignments, quiz responses, progress tracking, timetables, and AI-generated assessments. This data is processed exclusively on behalf of the school as Data Fiduciary. Edmento does not use student academic data for any purpose other than delivering the contracted service to the school.

2.4 Payment Data

Transaction ID, amount, payment status, and GST details. Card numbers, UPI handles, net banking credentials, and bank account details are processed directly by our authorised payment gateway partners and are never stored on Edmento’s servers.

2.5 AI Interaction Data

Prompts submitted to and responses received from AI-powered features on the Platform, including the AI Question Paper Generator, AI Quiz Generator, AI Lesson Plan Generator, AI Writing Assistant, AI Substitution Intelligence, and the AI Principal Chatbot. Where AI interaction data is used for product improvement purposes, it is anonymised and aggregated before such use. Individually identifiable AI interaction data is not used for model training or product improvement.

2.6 Communications

Support queries, feedback submitted via forms, and messages sent through the Platform’s communication features.

• To provide, operate, maintain, and improve the Platform and its features.
• To process subscription payments through authorised payment gateway partners.
• To send transactional notifications (payment receipts, attendance alerts, assignment reminders, renewal notices).
• To provide customer support and respond to queries within committed timelines.
• To generate anonymised, aggregated analytics for product improvement — never to identify individual users.
• To comply with legal obligations under Indian law (Income Tax Act, GST Act, Companies Act, DPDP Act).
• To send product updates and renewal reminders — you may opt out at any time.
• To detect, investigate, and prevent fraudulent, abusive, or unlawful activity on the Platform.

• Consent — for marketing communications and optional personalisation features. You may withdraw consent at any time without affecting prior processing.
• Contract — data necessary to deliver the subscription service you have paid for.
• Legitimate Interests — security monitoring, fraud prevention, and aggregate product analytics.
• Legal Obligation — compliance with Indian tax, financial, and regulatory requirements.

All institutional data, student records, and school-specific content remain the exclusive property of the subscribing school. Edmento processes such data only as instructed by the school and does not sell, licence, or commercially exploit institutional data in any form.

Upon subscription termination, Edmento will provide a reasonable data export window before deletion in accordance with our retention schedule.

We do not sell your personal data. We share data only as follows:

• Authorised payment gateway partners — to process subscription payments. Their privacy policies govern data they independently collect.
• Cloud infrastructure and security provider — for hosting, content delivery, DDoS protection, and security services. Data is processed under a signed Data Processing Addendum.
• Voice AI processing partner — for the AI voice assistant feature available to school owners and management on the Owner Dashboard. Only anonymised voice utterances are transmitted for speech processing; no voice data is retained by the voice processing partner beyond the active session.
• Managed database provider — for secure cloud database hosting.
• Push notification service provider — for mobile push notifications (anonymised device tokens only).
• Video conferencing integration providers — the Platform provides integration links to third-party video conferencing services (such as Google Meet). Edmento does not host, access, record, or store any video call content. All call data is governed exclusively by the third-party provider's own privacy policy.
• Law enforcement or regulatory authorities — only when required by valid Indian law or court order, and only to the minimum extent required.

All third-party data processors are bound by data processing agreements requiring adequate protection of your data consistent with DPDP Act obligations.

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access a summary of the personal data Edmento holds about you.
• Correct inaccurate or outdated personal data.
• Erase your personal data, subject to overriding legal retention obligations.
• Withdraw consent for processing based solely on consent, without affecting prior lawful processing.
• Nominate a person to exercise these rights on your behalf.
• File a complaint with the Data Protection Board of India if you believe your rights have been violated.

To exercise any of these rights, contact: privacy@edmento.com. We will respond within the timeframes prescribed by the DPDP Act.

Student accounts for minors are created and managed by the subscribing school acting as Data Fiduciary. Schools are responsible for obtaining appropriate parental or guardian consent before creating accounts for minor students. Edmento does not knowingly collect personal data from children except as directed by the school under the institutional subscription agreement.

We implement AES-256 encryption for data at rest, TLS 1.3 for data in transit, Role-Based Access Controls (RBAC) across all user types, multi-factor authentication for administrative accounts, and regular security assessments.

No digital system is completely immune to security incidents. In the event of a data breach that is likely to affect your rights and freedoms, Edmento will notify you and the Data Protection Board within the timeframes prescribed by the DPDP Act.

Our cloud infrastructure partners may process data across international regions. Any transfer of personal data outside India is conducted under appropriate safeguards, including standard contractual clauses or equivalent mechanisms, consistent with DPDP Act requirements.

We may update this Privacy Policy periodically. Material changes will be communicated via email and a prominent notice on the Platform at least 14 days before the effective date. Continued use of the Platform after that date constitutes acceptance of the revised Policy.

• Email: privacy@edmento.com
• Cherukavu, Malappuram, Kerala 676519, India