Data Protection (DPDP Act)

Last updated: 7 November 2026

This page sets out how SV Learning, a brand of Advaitam Trade Solutions Private Limited, works under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act") and the DPDP Rules, 2025, which apply in phases up to May 2027. It adds to our Privacy Policy.

1. Who is responsible for your data

• Family and individual accounts: we are the Data Fiduciary. We decide why and how the data is used, as our Privacy Policy describes.
• Accounts provided by a school: the school is the Data Fiduciary, and we are its Data Processor. We use the data only on the school's instructions.
• School staff contacts, school billing, and people who write to us: we are the Data Fiduciary.

2. Children's data

Anyone under 18 is a child under the DPDP Act, and a parent's or guardian's verifiable consent is needed to process a child's data.

• We do not carry out tracking, behavioural monitoring or targeted advertising directed at children, and we show no third-party advertising.
• For a family account, a parent or guardian must create or approve the child's account. A verified parental consent step will be in place by the date the Rules require it.
• For a school account, the school is responsible for notice to families and for any consent required.
• Learning progress and skill maps are used only to teach the child, and are shown only to the child, their teachers and school, and a linked parent.

3. If you are a school

Before a school uploads a class list, an authorised person accepts our data processing agreement in the school panel. Under it, among other things:

• we process student data only for the school's educational purposes and on its instructions;
• we do not sell student data, use it for advertising, or allow it to be used to train general AI models;
• the school can export its data and remove children; when a child is marked as having left, personal data is erased after 90 days, with marks kept in anonymised form;
• we will tell the school without undue delay about a personal data breach affecting its students.

A fuller written agreement is available on request through our contact form.

We are not affiliated with or approved by CBSE, CISCE or any board. Schools should make their own assessment of the Platform against their board's and education authority's requirements, including the Ministry of Education's child-safety guidance for digital education; we will give you the information you need to do so.

4. Your rights and how to use them

You, or a parent or guardian for a child, have the right to:

• Access your personal data and a summary of how it is processed and who it is shared with;
• Correct, complete or update it;
• Erase it, unless the law requires us to keep it;
• Withdraw consent, as easily as you gave it;
• Nominate someone to exercise these rights if you die or become unable to;
• Raise a grievance with us, and then with the Data Protection Board of India.

To use a right, use our contact form, with the name and the email or login ID on the account. We check that the request really comes from you, or from the child's parent or guardian. A person handles these requests, and we respond as soon as we can and within the time the law allows, which is at most 90 days. For a school account we work with the school.

5. How long we keep data

• Family accounts: while the account is active, then deleted or anonymised within a reasonable period after you delete it.
• A child who has left a school: access ends after 30 days; personal data is erased after 90 days; marks stay in anonymised form.
• Proctoring webcam images: deleted when the result is released, and in any event within 7 days.
• Printable login slips: cleared when marked printed, and in any event within 30 days.
• Login records: 180 days. AI Mentor conversations: 180 days from the last message. Audit logs: 24 months.
• Payment and accounting records: as Indian tax and accounting law requires.

6. Who processes data for us

Google Cloud / Firebase (sign-in, database, files; Google Gemini for reading documents and transcribing audio), Netlify (hosting), Anthropic (AI marking, reports, AI Mentor, email replies), Zoom (live classes and demonstrations), Deepgram (class speech-to-text), Resend and Zoho Mail (email), and Razorpay (payments). See our Privacy Policy for what each does.

7. Where data is held

Our database and file storage are in India (Google Cloud, Mumbai). Some providers above process data outside India, for example when AI marks an answer sheet or an email is sent. We will not transfer data to a country the Government of India has restricted under the DPDP Act.

8. If something goes wrong

If a personal data breach occurs, we will inform the Data Protection Board of India and the people affected as the law requires, in plain language, saying what happened, the likely impact and what we are doing about it. Where a school's students are affected, we will tell the school without undue delay.

9. Contact & complaints

• Grievance Officer (Sameer Sharma), Advaitam Trade Solutions Pvt Ltd
• Email:
• Address: 3582, 4th Cross, 13G Main, Indiranagar, Bengaluru, Karnataka 560008, India

If you are not satisfied with our response, you may complain to the Data Protection Board of India.