Privacy Policy & Child Data Charter

1. Processing of Minor / Child Data (Section 9 Compliance)

In accordance with Section 9(1) of the DPDP Act 2023, EduOS Cloud strictly mandates verifiable parental or guardian consent prior to creating, indexing, or processing any personal records of a child (individual under the age of 18 years).

Consent is captured digitally through one-time password (OTP) verification sent to the parent’s registered mobile number or via physically signed verification documented by the affiliated school.

2. Absolute Prohibition on Behavioral Tracking & Advertising

Under Section 9(3) of the DPDP Act, EduOS Cloud categorically states:

• We do not undertake tracking, profiling, or behavioral monitoring of children or students.
• We do not serve targeted advertising, sponsored banners, or commercial promotions of any kind to minors.
• We do not sell, lease, or monetize student academic, biometric, or personal information to third-party data brokers.

3. Indian Data Localization & Infrastructure Sovereignty

All databases, media assets, student marks, and backups are hosted entirely on sovereign cloud infrastructure located in Mumbai, India (AWS Asia Pacific Region). No student personal data is transferred or mirrored to foreign jurisdictions without explicit statutory approvals.

4. Rights of Data Principals (Parents, Students & Teachers)

Under Chapter III of the DPDP Act, parents and adult students hold the following enforceable rights:

• Right to Access Information: View all summary data and processing activities associated with your profile.
• Right to Correction & Erasure: Rectify inaccurate personal records or request erasure of non-statutory data.
• Right to Grievance Redressal: Direct escalation to our designated institutional Data Protection Officer.
• Right to Nominate: Nominate an individual to exercise rights on behalf of the Data Principal in the event of death or incapacity.

5. Data Protection Officer (DPO) & Redressal Mechanism

If you have questions, concerns, or wish to file a grievance regarding data privacy, you may contact our resident Data Protection Officer: