Privacy & Data Protection
A plain-language summary of what EvalAssist AI does with student, parent, and teacher data. Last updated 2026-05-20.
What we process
- Student name, email, class, section, and school identifier.
- Question papers and answer sheets uploaded by you or your school.
- OCR text, per-question marks, and rubric-aligned feedback.
- Parent identifiers and the parent-to-child link.
We do not ask for or store health, biometric, religion, or caste data.
What we do with it
- OCR your handwritten answers and match them to a board-aligned rubric.
- Generate per-student feedback, parent-facing reports, and class analytics.
- Keep audit logs for deletion approvals and calibration changes.
We do not use your data for advertising, and we do not train external foundation models on identified student data.
Your rights
- Access — students can view their own reports; parents can view all linked-child reports.
- Correction — teachers can correct AI-grading errors via the review queue; the change is visible to the student.
- Erasure — a parent can request deletion of a child's data; school admins approve within 30 days and a full cascade delete runs.
Children's data
EvalAssist is designed for school students, including those under 18. We treat all student data as children's data under India's Digital Personal Data Protection Act, 2023 and the EU/UK GDPR Article 8. Verifiable parental consent is required at registration and can be withdrawn at any time via the parent dashboard.
Security & transfers
We use TLS at the load balancer and provider at-rest encryption for databases and the uploaded-file archive. An additional application-layer at-rest encryption pass on the uploaded-file archive is a planned upgrade. Read the honest current state in our school-admin DPA (login required).
Personal data is hosted in Chennai, Tamil Nadu, India. Evaluation requests run on our in-house SARAS evaluation model (internally trained and operated by Team Prachin) and, where the SARAS model declines to score with sufficient confidence, on a vetted backup evaluation tier. No student name, email, or school identifier is carried in those internal evaluation calls.
Full documents
- Data Processing Agreement v1 (school admins, login required)
- DPDP 2023 alignment matrix — request a copy from your school admin.
- GDPR children's-data alignment matrix — request a copy from your school admin.
Grievance redressal: your school admin is the first-line contact. Escalations: contact@evalassist.ai (Robust Results Pvt Ltd, Privacy Officer).