Privacy Policy

1. INTRODUCTION

Welcome to BrightSchool.ai ("Platform"), operated by Hyperleap Software Technologies Private Limited ("Company," "we," "us," or "our"). We respect your privacy and are committed to protecting the personal information of our users, including teachers, students, administrators, and other education professionals (collectively "Users" or "you").

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered educational platform, including Bright Tools, Bright Assistants, and BrightSpaces. Please read this privacy policy carefully. If you disagree with any part of this privacy policy, please discontinue use of our platform immediately.

2. INFORMATION WE COLLECT

2.1 Personal Information

We may collect personal information that you voluntarily provide when using our Platform, including but not limited to:

• Account Information: Name, email address, password, profile picture, professional credentials, and school affiliation
• Contact Information: Phone number, address, and other contact details
• Educational Information: For teachers - subject areas, grade levels taught, teaching preferences; For students - grade level, learning preferences, academic performance data
• User-Generated Content: Lesson plans, worksheets, assessments, student submissions, feedback, and other educational content created or uploaded to the Platform

2.2 Automatically Collected Information

When you access our Platform, we may automatically collect certain information, including:

• Device Information: Device type, operating system, browser type, IP address, and mobile device identifiers
• Usage Data: Pages visited, features used, time spent on the Platform, navigation paths, and interaction patterns
• Performance Data: Technical information about how our AI tools and features perform for you
• Location Information: General location based on IP address or more precise location if permitted by you

2.3 Information from Third Parties

We may receive information about you from other sources, including:

• Educational Institutions: When schools or districts implement our platform, they may provide roster information and other educational data
• Integration Partners: Information from learning management systems, student information systems, or other educational tools that integrate with our Platform
• Public Sources: Publicly available information such as school websites or professional directories

3. HOW WE USE YOUR INFORMATION

We use your information for various purposes, including:

3.1 Providing and Improving the Platform

• Delivering our AI-powered educational tools and features
• Personalizing learning experiences based on user preferences and needs
• Analyzing usage patterns to improve our Platform's functionality
• Developing new features and tools based on user feedback and needs
• Troubleshooting technical issues and optimizing performance

3.2 AI Training and Model Improvement

• Improving our AI models to better serve educational contexts
• Analyzing patterns in educational content to enhance recommendation algorithms
• Refining language processing capabilities for multiple Indian languages

3.3 Communication and Support

• Responding to your inquiries, comments, or concerns
• Sending service-related announcements and updates
• Providing customer and technical support
• Sending promotional communications if you have opted in

3.4 Analytics and Research

• Conducting research to improve educational outcomes
• Generating anonymized and aggregated insights about teaching and learning
• Measuring the effectiveness of various educational approaches

4. DATA STORAGE AND SECURITY

4.1 Data Storage

Your information is stored on secure servers located in India. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

4.2 Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Account Information: Retained for the duration of your active account plus 90 days after account deletion (for recovery purposes)
• User-Generated Content: Retained for the duration of your active account, permanently deleted within 30 days of account deletion unless required for legal obligations
• Student Data: Retained according to educational institution agreements and applicable laws, typically 1-3 years after student graduation or course completion
• Transaction Records: Retained for 7 years as required by Indian tax and accounting laws
• Usage Logs: Retained for 90 days for security and performance monitoring
• Anonymized Analytics Data: May be retained indefinitely as it cannot be linked back to you

After the applicable retention period, we will securely delete or anonymize your personal data.

4.3 Security Measures

We employ industry-standard security measures, including:

• Encryption of sensitive personal information
• Regular security assessments and penetration testing
• Access controls and authentication procedures
• Regular security training for our staff
• Offline capabilities with secure synchronization protocols

Despite our efforts, no electronic transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please notify us immediately.

5. INFORMATION SHARING AND DISCLOSURE

5.1 Third-Party Service Providers

We may share your information with trusted third-party service providers who assist us in operating our Platform, conducting our business, or serving our users. These providers have access to your information only to perform specific tasks on our behalf and are obligated to protect your information.

5.2 Educational Institutions

When our Platform is implemented through schools or educational institutions, we may share information with authorized school administrators according to our agreements with those institutions and applicable educational privacy laws.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

5.4 Business Transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Platform of any change in ownership or uses of your personal information.

5.5 With Your Consent

We may share your information with third parties when you have given us your consent to do so.

6. USER RIGHTS UNDER THE DIGITAL PERSONAL DATA PROTECTION ACT (DPDP)

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights regarding your personal data:

6.1 Right to Access (Section 11(1))

You have the right to obtain confirmation of whether we are processing your personal data and, if so, to access:

• A summary of your personal data being processed
• The categories of personal data being processed
• The purposes for which such data is being processed
• The identities of Data Processors and other persons with whom your data has been shared

6.2 Right to Correction and Erasure (Section 11(2) & 11(3))

You have the right to:

• Correct inaccurate or misleading personal data
• Complete incomplete personal data
• Update your personal data
• Erase your personal data, subject to certain legal obligations we may have to retain it

You can update your account information at any time by logging into your account settings. For data erasure, please use the "Delete Account" feature in your privacy settings or contact us at privacy@brightschool.ai.

6.3 Right to Data Portability

You have the right to obtain your personal data in a structured, commonly used, and machine-readable format. You can:

• Download your data at any time from your account settings
• Request transfer of your data to another service provider (where technically feasible)

6.4 Right to Grievance Redressal (Section 11(4))

If you have concerns about how we handle your personal data, you have the right to:

• Lodge a complaint with our Data Protection Officer (contact details below)
• Lodge a complaint with the Data Protection Board of India
• Nominate another individual to exercise your rights on your behalf in case of death or incapacity

6.5 Right to Withdraw Consent

Where we process your personal data based on consent, you have the right to withdraw your consent at any time. This can be done through:

• Privacy Settings page in your account
• Contacting us at privacy@brightschool.ai

Please note that withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

6.6 Communication Preferences

You can opt out of receiving promotional emails by following the unsubscribe instructions in those emails. Even if you opt out, we may still send you essential service-related communications.

6.7 Exercising Your Rights

To exercise any of these rights, you can:

• Access your Privacy Settings in your account dashboard
• Email us at privacy@brightschool.ai
• Contact our Data Protection Officer (details in Section 10)

We will respond to your request within 30 days of receipt. There is no fee for exercising your rights unless your request is manifestly unfounded or excessive.

7. CHILDREN'S PRIVACY

Our Platform is intended for use by teachers, educational institutions, and students under teacher supervision. We recognize the heightened obligation to protect personal information obtained from children.

7.1 Student Data

When our Platform is used by educational institutions with students under 18 years of age:

• We collect only the information necessary to provide the educational service
• We use student information only for educational purposes, not for commercial targeting
• We maintain student information securely and confidentially
• We facilitate parent/guardian access to and correction of student information
• We support school compliance with applicable educational privacy laws

7.2 Parental Rights

Parents/guardians of student users can review their child's personal information, direct us to delete it, and refuse to allow any further collection or use of the child's information. Parents can exercise these rights by contacting their child's school or by contacting us directly at the information provided below.

8. COMPLIANCE WITH LAWS

8.1 Indian Data Protection Laws

We comply with all applicable Indian data protection laws and regulations. As laws evolve, we will update our practices accordingly.

8.2 International Data Transfers

If personal information is transferred outside India, we ensure that appropriate safeguards are in place to protect your information according to this Privacy Policy and applicable laws.

9. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. The updated version will be indicated by an updated "Last Updated" date. We encourage you to review this Privacy Policy frequently to stay informed about how we are protecting your information.

10. CONTACT US & DATA PROTECTION OFFICER

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Note: Please replace placeholder information ([...]) with actual company details before deployment.

11. GLOSSARY

• Bright Tools: Single-purpose AI tools for specific educational workflows
• Bright Assistants: Conversational AI for complex educational needs
• BrightSpaces: Teacher-curated, AI-powered learning environments for students
• Personal Information: Information that can identify you directly or indirectly
• Processing: Any operation performed on personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure, dissemination, or otherwise making available