This Privacy Policy explains how Edsqr Technologies Private Limited(“Edsqr”, “we”, “us”) collects, uses, shares and protects personal data when schools use the Edsqr School Portal (app.edsqr.com), when students use the Edsqr learning assistant on WhatsApp (together, the “Services”), and when anyone visits edsqr.com.
We process personal data in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the rules made under it, the Information Technology Act, 2000, and other applicable laws.
1. Our role: schools are in control
Edsqr is offered to students through their school. For student data, the school decides why and how the data is processed and acts as the Data Fiduciary; Edsqr processes that data on the school's behalf and under its instructions as a Data Processor, under a written agreement with the school. For school staff accounts, people trying our demo, website visitors and business enquiries, Edsqr acts as the Data Fiduciary.
2. Children's data
Most students who use Edsqr are under 18. We therefore apply additional safeguards:
- Students are enrolled only by their school. Schools are responsible for obtaining verifiable consent from a parent or lawful guardian before enrolling a child, as required by Section 9 of the DPDP Act.
- Only phone numbers registered by the school can access the student service.
- We record students' learning activity — such as questions asked, topics and chapters, and study time — only to provide learning support and learning analytics to their school. We do not use it to profile children for any other purpose.
- Authorised school staff can see students' conversations with the tutor in the School Portal. Schools should inform parents of this when enrolling students.
- We never show advertising to students and never use children's data for targeted advertising.
- We do not sell, rent or trade any personal data.
- Parents or guardians may contact the school or us to review, correct or delete their child's data, or to withdraw consent.
3. Data we collect
From schools (via the School Portal)
- Staff account details: name, email, phone number, role and login activity.
- Student details: student name, grade, section, school and registered WhatsApp phone number.
- School setup details: curriculum, grades, subjects and the number of students covered.
From students (via WhatsApp)
- The WhatsApp phone number and profile name made available to us by the WhatsApp Business Platform. Where a student uses a parent's or guardian's phone, this is that person's number.
- Messages students send and the responses we provide. The tutor is designed for text questions; if images or voice notes are sent, they are received and stored with the conversation.
- Learning activity: message timestamps, delivery and read status, study sessions and time spent, the subject and chapter of each question, and whether a message was about the curriculum.
From people trying our demo
- For a demo, we add the phone number of a school leader or teacher to our demo school so they can try the tutor. We keep their messages only to run the demo and remove the number afterwards on request.
From website visitors
- Information you submit through our forms: name, email, phone, role, school name, city, board, grades, number of students, topic and message.
- Basic technical logs (IP address, browser type, pages visited) used for security and reliability.
4. How we use data
- To answer students' academic questions using the school's prescribed curriculum.
- To give schools learning analytics, such as engagement, common doubts and topics students find difficult.
- To let authorised school staff view students' conversations with the tutor in the School Portal.
- To send service messages for learning on the school's behalf, such as a welcome message on enrolment and study reminders or nudges.
- To operate, secure, troubleshoot and improve the reliability and accuracy of the Services.
- To prevent misuse, enforce our Terms and meet legal obligations.
- To respond to enquiries and arrange demos and trials for schools.
We do not use student conversations to train third-party foundation models, and we use AI providers whose business terms do not permit them to train their models on data we send through their APIs.
5. WhatsApp and messaging
- The student service runs on the official WhatsApp Business Platformprovided by Meta, on a WhatsApp Business account set up in the school's name. Messages are also processed by Meta in accordance with WhatsApp's own terms and privacy policy.
- We only message students whom their school has enrolled, with consent obtained by the school. Students receive a welcome message when enrolled and may receive study reminders or nudges; otherwise we reply to the questions they send. We never send promotional or marketing messages to students.
- A student who no longer wants to receive messages can ask their school to remove them, or contact us; we will stop messaging that number.
- We follow the WhatsApp Business Messaging Policy.
6. AI-generated content
Responses are generated by AI systems grounded in the school's curriculum. They may occasionally be incomplete or inaccurate and are intended to support — not replace — teachers. The tutor is designed to stay focused on the curriculum and to decline unrelated requests.
7. Sharing and service providers
We share personal data only with service providers who help us run the Services, under obligations of confidentiality and security:
- Meta Platforms (WhatsApp Business Platform) — message delivery.
- Google Cloud — hosting, databases and storage.
- AI model providers — generating and retrieving answers through their APIs.
- Email service providers — account emails and delivery of website enquiries.
Student data is shared with the student's own school. We may disclose data where required by law or by a lawful order of a competent authority. Some providers may process data outside India; where they do, we do so only as permitted under the DPDP Act.
8. Retention
We keep student data for as long as the school's agreement with us is active, or as instructed by the school. When a school ends its subscription or requests deletion, we delete or anonymise the related personal data within 90 days, except where we must keep it by law. Website enquiry data is kept for up to 24 months.
9. Security
- Encryption in transit (TLS) and encryption at rest on our cloud infrastructure.
- Authentication and role-based access for the School Portal; staff access on a least-privilege basis.
- Separation of each school's data, so a school sees only its own students.
- Logging and monitoring of access to our systems.
In the event of a personal data breach, we will inform affected schools without delay, and notify the Data Protection Board of India and affected individuals as required under the DPDP Act.
10. Your rights
Subject to applicable law, you have the right to access information about your personal data, to correct, update and erase it, to withdraw consent, to nominate another person to exercise your rights, and to grievance redressal. Students and parents should ordinarily contact their school first; you may also write to us directly. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
11. Cookies
edsqr.com does not use advertising or cross-site tracking cookies. The School Portal uses strictly necessary cookies to keep staff signed in securely.
12. Grievance Officer
Gopinath Alagar Karunanithi, Grievance Officer
Edsqr Technologies Private Limited
Innov8 Millenia, 2nd Floor, East Wing, RMZ Millenia Business Park, Campus 1A, No. 143, Dr. M.G.R. Road (North Veeranam Salai), Perungudi, Sholinganallur, Chennai 600096, Tamil Nadu, India
Email: grievance@edsqr.com
We will acknowledge grievances within 72 hours and aim to resolve them within 30 days.
13. Changes
We may update this policy from time to time. Material changes will be notified to schools in advance. The “Last updated” date above reflects the latest version.
14. Contact
Questions about this policy: contact@edsqr.com or via our contact page.