Privacy Policy

1. Scope & Applicability

This Privacy Policy applies to the services, platforms, APIs, websites, and institutional systems operated by Hoducation Technologies Pvt. Ltd. ("Hoducation", "we", "us", or "our"), including our flagship platform AcadOS (TestMaker, Practice CBT Platform, OMR SmartPhone Evaluation, Institute ERP, and CRM), as well as custom enterprise software deployments and automation pipelines.

2. Data We Collect & Process

• Institutional Administrator Information: Name, work email, phone number, institutional role, and institution billing details collected during account provisioning or demo requests.
• Curriculum & Assessment Records: Proprietary question banks, test taxonomies, answer keys, examination schedules, and student scorecards managed by your teachers and administrators.
• Optical Imagery for OMR Scoring: Photographs or scans of physical OMR answer sheets captured via educator smartphones for instant computer vision grading.
• System Telemetry & Audit Logs: Access timestamps, encrypted session cookies, IP addresses, and device fingerprints required to enforce test security and prevent unauthorized administrative logins.

3. Purpose of Processing

We process data exclusively for:

• Providing, maintaining, and scaling AcadOS modules and custom institutional ERP portals.
• Delivering sub-second, 99.8% accurate OMR sheet grading and student performance analytics.
• Executing automated parent notifications, attendance alerts, and fee receipts via authorized channels (e.g. WhatsApp Business Cloud API, transactional email).
• Guaranteeing high concurrency during peak mock examination tests and safeguarding infrastructure security.

4. Data Ownership & Fiduciary Status

Under the Digital Personal Data Protection (DPDP) Act, 2023, the educational institution acts as the Data Fiduciary, and Hoducation Technologies operates strictly as a Data Processor. We will never sell, lease, commercialize, or train third-party public machine learning models on your proprietary examination questions or student personally identifiable information (PII).

5. Cryptographic Security Standards

We enforce bank-grade security protocols across all software and hosting tiers:

• Encryption at Rest: All databases, documents, and OMR image artifacts are encrypted using AES-256 standards.
• Encryption in Transit: All web and API traffic is strictly routed over TLS 1.3 with HSTS enabled.
• Multi-Tenant Isolation: Logical and cryptographic separation ensures that no institution or test center can ever view or modify another institution's data.
• Daily Disaster Recovery: Automated immutable daily backups stored across redundant cloud zones.

6. Third-Party Sub-Processors

To deliver scalable services, we partner with verified infrastructure vendors bound by strict confidentiality and data protection agreements:

• Vercel Inc. / Cloudflare: Edge network, CDN routing, and serverless compute.
• Resend Inc.: Enterprise transactional email transmission.
• Meta Platforms (WhatsApp Cloud API): Institutional communication dispatch upon explicit configuration.

7. Data Retention & Right to Erasure

Your authorized administrators may export all question banks, score archives, and institutional records in standard formats (CSV, JSON, SQL) at any time. Upon contract conclusion, all associated data is permanently decommissioned from production nodes within 30 days.

8. Contact & Grievance Redressal

For data inquiries, compliance audits, or grievance escalations, please contact our Data Protection Office: