[ Institutional Legal Policy ]

Privacy Policy

Compliance with India’s Digital Personal Data Protection (DPDP) Act 2023, Information Technology Act 2000, and educational record confidentiality standards.

Effective Date: Academic Year 2026–2027•Version: 2.2 (Institutional), updated 17 October 2026•Entity: W3Builders Technology Solutions LLP (Product: TeachMentor AI)

1. Institutional Role: Data Fiduciary & Data Processor

Under the Digital Personal Data Protection Act, 2023 ("DPDP Act"):

The Subscribing School / Institution

Acts as the Data Fiduciary. The school determines the purpose and legal basis for processing student admissions, class attendance, academic assessments, and parent contact details.

W3Builders Technology Solutions LLP (TeachMentor AI)

Acts strictly as the Data Processor. We host, compute, and synchronize school records solely pursuant to the written agreement and instructions of the subscribing institution.

2. Categories of Information Processed

TeachMentorAI processes only the minimal educational data required to operate daily school workflows:

  • Student Profiles & Rosters: Student full name, roll number, admission registration number, section assignment, date of birth, blood group, emergency contacts, and guardian details.
  • Academic Assessment Records: CBSE, ICSE, and State Board exam scores, formative assessments, marks card layouts, teacher remarks, and homework submissions.
  • Attendance & Check-In Logs: Daily period attendance, absence digests, and timestamped gate entry check-ins.
  • Faculty & Staff Records: Staff employee code, department, assigned teaching timetable slots, approved leaves, and salary expense records.
  • Guardian Communication: Registered parent mobile numbers and emails used for Instant OTP authentication, automated WhatsApp fee receipts, and school broadcast alerts.
  • Photos & Camera: ID card photographs, profile and cover photos, and attendance selfies. When a school turns on face attendance or face sign-in, a staff member's enrolled face photo is compared with a live selfie to confirm it's them. For online tests a school configures to require it, the camera checks that a face is visible during the test.
  • Microphone: Used only while you are in a live class or meeting inside the app.
  • Location: Used for attendance check-in and, for school bus drivers, during a bus trip (see Section 4).
  • Device & App Data: Push-notification tokens so we can deliver school notifications to your phone, and the app version so we can tell you when an update is available.

Service providers. To run these features we use: Google Firebase (push notifications and Google sign-in), Google Cloud (face matching and maps), 100ms (live classes and meetings), Razorpay (fee payments), WhatsApp messaging providers (school messages), and our own W3Builders assistant for in-app Help & Support chat. Each receives only what that feature needs.

3. Strict Anti-Monetization & No-Ads Guarantee

Absolute Zero-Commercialization Pledge

TeachMentorAI will never sell, rent, monetize, or trade student, parent, or institutional records to data brokers, ad networks, or commercial third parties. We do not display advertisements, behavioral trackers, or marketing pixels anywhere inside our software.

4. Location: Attendance Check-In & Bus Trips

TeachMentorAI includes an optional staff and gate attendance check-in feature with GPS geofencing:

  • Strictly Localized Radius Check: Geolocation coordinates are captured exclusively at the precise moment a staff member taps "Check In" or "Check Out" to verify physical presence within the campus boundary radius configured in /settings/geofence.
  • No Background Tracking for Check-In: Attendance check-in does not track you in the background. Once the check-in is logged, location use stops.
  • School Bus Trips (Drivers Only): When a bus driver starts a trip in the app, the driver's phone shares its location every few seconds — including when the app is closed or the screen is off — so the school and the parents of children on that route can see where the bus is. A notification stays on the phone the whole time, and sharing stops as soon as the driver ends the trip. The app explains this and asks for permission before the first trip.

5. Fee Payment Security (Razorpay)

Online tuition and transport fee collections are processed directly through Razorpay, a RBI-licensed, PCI-DSS Level 1 compliant payment aggregator:

  • All UPI, NetBanking, debit, and credit card credentials are entered directly into Razorpay’s encrypted payment gateway iframe.
  • TeachMentorAI never intercepts, logs, or stores card numbers, CVVs, UPI PINs, or banking passwords.
  • We receive only the transaction reference ID, status (Captured/Failed), and amount to update the school ledger in real time.

6. AI Processing & Bring Your Own Key (BYOK)

TeachMentorAI’s AI Center (such as report card remarks and Socratic study mentoring) adheres to strict privacy safeguards:

  • Institutional BYOK Architecture: Schools connect their own AI provider accounts (OpenAI, Google Gemini, Anthropic Claude, Groq). TeachMentorAI does not route your data through opaque third-party shared model weights.
  • No Model Training on Student Data: School prompts and student answers are processed strictly in inference mode and are never used to train public foundation models.
  • Human-in-the-Loop: AI-generated student comments or administrative digests remain drafts until a certified teacher or principal manually approves them.

7. Data Retention, Purge & Account Deletion

Educational records belong exclusively to the school. Upon contract termination or formal exit:

  • The school can export all academic years, rosters, marks, and ledger transactions in standard formats (CSV, JSON, PDF).
  • Following written institutional confirmation, all school database rows, backups, and file tokens are securely shredded and purged from production storage within 60 days.

Deleting your own account. Anyone can delete their TeachMentorAI account in the app (Profile → Delete account) or at teachmentorai.in/delete-account. This removes your sign-in, sessions, push tokens, enrolled face photo and signature straight away. Records your school keeps about you (attendance, marks, fees) stay with the school; ask your school to remove them.

8. Grievance Redressal & Compliance Officer

In compliance with the Information Technology Act, 2000 and Rule 5(9) of the IT Rules 2011, and the DPDP Act 2023:

Designated Grievance Redressal & Compliance Officer

Officer Name: Compliance & Legal Cell

Company: W3Builders Technology Solutions LLP

Product: TeachMentor AI

Legal & Grievance Email: grievance@w3builders.com / hello@w3builders.com

Product Support: hello@teachmentorai.in

All statutory grievances received will be acknowledged within 48 hours and redressed within 30 days of receipt.