Privacy Policy
Last updated: 20 April 2026 · Compliant with DPDPA 2023 (India)
What we collect
- School metadata (name, address, board, affiliation number)
- Student academic records (marks, grades, attendance) strictly for analysis
- Principal/teacher contact details (phone, email) for authentication
- Parent phone (for WhatsApp report delivery; opt-out available)
What we never collect
- Aadhaar numbers, bank details, passport numbers (even when present in DoxaEd, Analyticx cannot read them)
- Student health records, face encodings, or biometric data
- Behavioural tracking data outside academic analysis
Data residency
All personal data is stored in Indian AWS regions (ap-south-1 / ap-south-2). Cross-border transfers to AI providers require explicit consent; the default AI provider (Claude on Bedrock) operates entirely within India.
Your rights under DPDPA 2023
- Access a copy of your data
- Correct any inaccurate data
- Request erasure (30-day grace window before purge)
- Withdraw consent at any time
To exercise any of these rights, email our Grievance Officer at grievance@analyticx.doxaed.com.
Sub-processors
We use AWS (hosting + storage), Anthropic Claude via AWS Bedrock (AI inference), Gupshup (WhatsApp delivery), and Amazon SES (email). Full list at /legal/sub-processors.
Breach notification
In the event of a data breach, we will notify the Data Protection Board and affected users within 72 hours of discovery, per DPDPA Section 8(6).