Privacy Policy

Vidya Vault is an answer-sheet grading service for coaching institutes and schools, made by Divyavyoma Technologies Private Limited ("we"). This policy covers this website (vidyavault.in), the pilot form on it, and the Vidya Vault web and mobile apps.

Two kinds of personal data pass through Vidya Vault, and the law treats them differently:

• Data inside an institute's workspace — students, their answer sheets, marks and reports, parents' contact details, and the accounts of the institute's own staff. The institute is the Data Fiduciary: it decides what goes in and why. We are its Data Processor and handle that data only to run Vidya Vault for it, under our agreement with the institute.
• Data we collect for ourselves — pilot requests from this website, and the contact and billing details of the people we deal with at an institute. For this, we are the Data Fiduciary.

If you are a student or a parent, your institute is the first place to ask about your data. You can also write to our Grievance Officer, and we will help, or pass your request to the institute, as the law requires.

When you visit this website. No analytics, no advertising trackers and no cookies. Our host, Cloudflare, processes technical data such as your IP address and browser to deliver the page and stop attacks.

When you ask for a pilot. Your name, phone or WhatsApp number, institute, and optionally your city and number of students — what you type in the form.

When an institute uses Vidya Vault.

• Staff accounts: name, email address, phone number, role and branch; passwords are stored only as a one-way hash.
• Students: name, roll number, class, batch and branch, as the institute enters them.
• Answer sheets: the scanned pages, which carry the student's handwriting and whatever the student wrote.
• Results: the marks proposed, the teacher's decisions and notes, and the reports produced from them.
• Parents' contact details, where the institute adds them to send reports.
• Technical records needed to run and secure the service: sign-in times, device and app version, and error logs.

We do not ask for, and ask institutes not to upload, any data beyond what grading and reporting need — such as health information or financial account numbers.

• To read answer sheets, propose marks against the institute's marking scheme, and put each proposal in front of a teacher for approval.
• To produce the results and reports the institute asks for.
• To sign people in, keep accounts and data separate between institutes, and keep the service secure.
• To respond to pilot requests, set up pilots, support institutes and invoice them.
• To keep the books, tax and company records Indian law requires.

Every mark Vidya Vault proposes is a proposal. A teacher approves or changes it, and nothing reaches a student or parent without that approval. We make no automated decision about any student.

We do not sell personal data, rent it, use it for advertising, or build profiles of students. Student data is used only for the institute that holds it.

Most students whose sheets are graded on Vidya Vault are children. Students do not sign up to Vidya Vault themselves: their institute adds them. The institute, as Data Fiduciary, is responsible for the notice and the verifiable consent of a parent or lawful guardian that the Act requires, and it agrees with us to obtain them before adding a child's data.

For children's data we go further than for anyone else's: no tracking, no behavioural monitoring, no targeted advertising, and no use of it for any purpose other than the institute's grading and reporting.

To read handwriting and propose marks, the page images and the institute's marking scheme are sent to Gemini models on Google Cloud's Vertex AI. Google processes them to return the reading and the proposal, as our sub-processor, under Google Cloud's terms for Vertex AI, which do not allow Google to use this content to train its models.

This processing may take place on Google's infrastructure outside India. The Act allows this, except to countries the central government restricts; we will not send data to such a country.

A small number of providers handle personal data on our behalf, only to provide their service to us:

• Google Cloud — storage of scanned answer sheets (Cloud Storage, Mumbai region), and the Gemini models on Vertex AI that read them.
• Cloudflare — this website, the pilot form's database, security, DNS and email routing.
• Google (Google Workspace) — our email, including sign-in codes and messages we send you.
• Telegram — notifications of new pilot requests to our team.
• Our chartered accountant and auditors — invoices and billing contacts, for tax filings and statutory audit.

We may disclose personal data to a government authority only when Indian law requires it, and we tell the institute when we are allowed to.

Pilot requests that do not become an engagement

Deleted 24 months after our last exchange, or sooner if you ask.

Data in an institute's workspace

For as long as the institute's agreement runs, and deleted as the institute instructs. When the agreement ends, the institute can export its results; we keep the workspace for 30 days so it can, then delete it. Backup copies expire within a further 35 days.

Contract and invoice records

For as long as Indian company and tax law requires us to keep books of account — currently up to eight years.

Security and access logs

Up to 180 days, unless needed to investigate an incident.

Under the Act you can ask for a summary of the personal data held about you and how it is used; ask for it to be corrected, completed, updated or erased; withdraw consent you have given; and nominate someone to exercise these rights for you if you die or become unable to. A parent or guardian exercises these rights for a child.

For data inside an institute's workspace, the institute answers these requests and we help it. For anything else, or if you cannot reach the institute, write to our Grievance Officer at grievance@vidyavault.in. We acknowledge every request within two working days and answer it within 30 days. If you are not satisfied with the answer, you may complain to the Data Protection Board of India.

Data travels encrypted. Each institute's data is kept separate from every other institute's, and inside an institute people see only what their role allows. Passwords are hashed, not stored. Access to our systems is limited to the people who need it.

If a breach affects personal data, we tell the institute without undue delay — within 24 hours of becoming aware of it — and, where we are the Data Fiduciary, we inform the Data Protection Board and the people affected as the Act requires.

When this policy changes, the date at the top changes with it. If a change affects how we use data already given to us, we tell institutes by email before it takes effect.

Vidya Vault is a product of Divyavyoma Technologies Private Limited (CIN U63111GJ2026PTC184103), registered office: Block-A, 606 Prahladnagar, Trade Center, BH Titanium, Jivraj Park, Ahmadabad City, Ahmedabad 380051, Gujarat.

Enquiries and pilots

enquiry@vidyavault.in

Grievance Officer

Ashokbhai Solanki, grievance@vidyavault.in

Working hours

Monday to Saturday, 09:00–19:00 IST