Privacy Policy

1. Who we are

GoGrade AI is operated by DevsTree IT Services Private Limited, located at B - 433-442, Money Plant High Street, Near Ganesh Glory, Jagatpur Road, S.G. Highway, Ahmedabad - 382470, India. For privacy requests, contact support@gograde.ai.

For institutional deployments, your school or organisation typically acts as the data controller for student and academic records. We generally act as a processor / service provider processing data on the institution's instructions to deliver the Services.

2. Information we collect

Depending on how you use the Services, we may process:

• Account and contact data: name, email, phone, role, school name, branch, and authentication data.
• Institutional profile data: school details, seats, academic structure (years, standards, divisions, subjects), and licence/onboarding information.
• Student and parent data uploaded or created by the institution: identity details, academic identifiers, relationship links, and profile information.
• Assessment content: question papers, answer keys, rubrics, answer-sheet files (including scans/PDFs), scores, overrides, comments, and report cards.
• Usage and technical data: device/browser information, IP address, logs, credit consumption, and support tickets.
• Payment-related data: payer name/email/phone, transaction references, amounts, and status from our payment partner (for example, Cashfree). We do not store full card details on our servers when payments are completed through the payment partner's hosted pages/links.
• Marketing/enquiry data submitted via demo or contact forms.
• Cookies and analytics data if you use our marketing site (for example, Google Analytics / Tag Manager where enabled).

3. How we use information

• Provide, operate, secure, and improve AI evaluation, marking workflows, analytics, and report cards.
• Authenticate users, manage roles, and isolate tenant workspaces.
• Allocate and track credit usage and process payments/invoicing-related records.
• Send service emails (invites, password setup, payment links, operational notices).
• Respond to support requests and investigate abuse or security incidents.
• Comply with legal obligations and enforce our Terms.
• With appropriate consent or legitimate interest, send product updates or respond to demo enquiries.

4. AI processing

Answer sheets and related assessment materials may be processed by AI systems (including third-party model providers such as Google Gemini where configured) to extract answers and suggest scores against your answer key/rubrics.

Institutions should avoid uploading data not needed for evaluation. Teachers may review and override AI outputs. We design workflows so institutions retain human control over final grades.

5. Legal bases (where applicable)

Where data-protection laws require a legal basis (for example, India's Digital Personal Data Protection Act, 2023, or GDPR for applicable users), we rely on one or more of: contract performance, legitimate interests (secure operation and product improvement), consent (where required), and legal obligation.

6. How we share information

We may share information with:

• Subprocessors needed to run the Services (hosting/object storage such as Google Cloud Storage, email/SMTP providers, AI model providers, analytics, and payment processors such as Cashfree).
• Your institution's authorised users according to role permissions.
• Professional advisors or authorities when legally required.
• A successor entity in connection with a merger, acquisition, or corporate reorganisation, subject to appropriate safeguards.

7. International transfers

Data may be processed in India and in other countries where our subprocessors operate. We take reasonable contractual and organisational measures appropriate to the risk and applicable law.

8. Retention

We retain personal and assessment data for as long as needed to provide the Services to the institution, meet legal/accounting requirements, resolve disputes, and enforce agreements. After offboarding, we delete or anonymise tenant data within the contract term plus 90 days, unless a longer retention is required by law or agreed in writing.

9. Security

We use administrative, technical, and organisational measures designed to protect data, including encryption in transit (TLS), encryption at rest (enabled by default on Google Cloud), access controls, multi-factor authentication for administrator accounts, tenant isolation, and audit logging for platform operations. No method of transmission or storage is fully secure; institutions should apply least-privilege access and strong credentials.

10. Children's data

GoGrade AI may process children's/students' data when provided by educational institutions for academic evaluation. Institutions are responsible for ensuring they have the right to upload and process such data. We do not knowingly market directly to children.

11. Your rights

Depending on applicable law and your role, you may request access, correction, deletion, or withdrawal of consent. Students and parents should typically contact their institution first. You may also email support@gograde.ai. We may need to verify identity and coordinate with the relevant institution before acting on requests that affect institutional records.

12. Cookies

Our marketing site and application may use essential cookies for authentication and security, and optional analytics cookies where configured. You can control cookies through your browser settings.

13. Changes

We may update this Privacy Policy periodically. The "Last updated" date will change when we post revisions. Material changes may be communicated through the Services or email where appropriate.