Privacy Policy

Abhinav Verma, located in Smart Living Jade, Indore, Madhya Pradesh 452010, India, operates Teaching Assistant Pro. Contact us at abhinav_v@bm.iitr.ac.in about this policy or a privacy request.

Where an institution or educator provides student data, that institution or educator may be the primary decision-maker for that data, and we process it to provide the requested service.

Our privacy and grievance contact is Abhinav Verma, Grievance Officer. You can also call +917905199403 or message us on WhatsApp.

• Account data: name, email, role, password hash, institution details, and account preferences.
• Teaching and learning data: course content, files, enrolments, submissions, grades, feedback, and learner progress.
• Learning and career profiles: preferences, learning goals, background, resumes, transcripts, skills, certifications, saved career conversations, and profile information you choose to provide.
• AI interactions: prompts, selected text, chat messages, Socratic tutor interactions, generated output, and feedback.
• Usage and technical data: device, browser, IP address, timestamps, logs, feature activity, and diagnostic information.
• Payment data: plan, transaction identifiers, payment status, billing contact details, and invoice information. Razorpay processes full payment credentials; we do not store them.

We use information to create and secure accounts; deliver course, assessment, analytics, storage, chat, and AI features; process payments; provide support; send service communications; prevent abuse; troubleshoot; comply with law; and understand and improve product performance.

Authorised platform administrators may access account, course, learning, usage, and billing-status information when reasonably required for support, security, abuse prevention, account administration, or service operations. Privileged changes are restricted and recorded in an administrator audit log.

We process information for the purposes described here only as permitted by applicable law, and obtain consent where required. Accepting our terms does not authorise unrelated marketing or unrestricted sharing of student information.

Content submitted to an AI feature may be sent to the model and infrastructure providers needed to generate a response. Depending on the feature, this may include OpenRouter and the selected model provider. We send only the context needed for the requested task where practicable.

Course chat may use the course material and your saved learning preferences. Career Agent profile sharing with an external AI provider uses the separate consent control in your career profile; you can withdraw that permission there. Withdrawing permission stops future profile sharing through that control and does not recall information already processed.

Do not place confidential, biometric, health, financial, or other highly sensitive personal data in an AI prompt unless your institution has approved it and you have a lawful basis. AI output must be reviewed by an educator before it affects a learner.

We may share information needed to operate the platform with Vercel for hosting, Supabase and PostgreSQL services for database and file storage, Razorpay for payments, OpenRouter and the selected AI/model providers for generation, SendGrid for enabled email delivery, and Tavily or JSearch for enabled web and career searches. The providers used depend on the feature and deployment.

We may also disclose information when required by law, to protect users or the service, during a business reorganisation subject to appropriate safeguards, or with your direction. We do not sell personal information.

Educators and institutions must invite students only with the required authority, notices, and consent, and should limit uploaded information to what is needed for teaching. Where a learner is a child, applicable parental-consent and child-data safeguards must be satisfied before processing that learner’s information.

Institutional permission does not remove our own obligations under applicable law. We will work with the institution, parent, or guardian to address a child’s data request and any missing authorisation.

If you believe a minor has provided data without appropriate authorisation, contact us so we can investigate and take appropriate action.

Information may be processed in India and in other locations where our service providers operate. We use contractual and technical safeguards appropriate to the data and service.

We retain account and course data while the account is active and for a reasonable period afterward for recovery, security, tax, dispute, and legal purposes. Retention may vary by data category. We delete or anonymise data when it is no longer reasonably needed, subject to legal obligations and backups.

You can ask us for the retention period applicable to a particular record or request deletion. Payment and audit records may need to be kept to meet legal duties or resolve disputes. We will explain any exception that prevents immediate deletion; backup removal follows the relevant backup cycle.

We use access controls, encrypted connections, credential protection, monitoring, and service-provider safeguards designed to protect information. No online system can guarantee absolute security, so users should use strong credentials and avoid unnecessary sensitive data.

We use essential cookies and browser storage for authentication, security, session continuity, and preferences. Browser controls can remove cookies, but doing so may prevent core account features from working.

When enabled, Vercel Web Analytics and Speed Insights collect aggregate traffic and page performance information. Web Analytics does not use cookies. Our integration groups record-specific paths and removes URL fragments and query parameters other than campaign labels. Optional interaction events contain only action names and predefined categories, without form contents, messages, assessment answers, grades, or payment details.

You may request access, correction, deletion, restriction, or a copy of personal information, or object to certain processing, where applicable. You may also cancel a subscription and stop optional communications.

Send requests from your account email to abhinav_v@bm.iitr.ac.in, identifying the information and action requested. You may withdraw consent to optional processing; this does not affect processing already lawfully completed or records we must retain. If the information is necessary for a requested service, withdrawing permission may mean we can no longer provide that feature.

We may need to verify your identity and coordinate student-record requests with the responsible institution or educator. We will explain the outcome and address privacy grievances within one month, or any shorter applicable deadline. Requesting deletion is separate from cancelling a recurring payment; ask us to cancel active subscriptions as well.

We may update this policy as the service or law changes. The effective date will identify the latest version, and material changes will be communicated where reasonably required.

Privacy questions and complaints can be sent to abhinav_v@bm.iitr.ac.in, addressed to Abhinav Verma. Our Grievance Redressal page explains the process and your escalation options.