Legal
Privacy Policy
Last updated: 29 August 2026
This page explains how EasyGrade (“we”, “us”) handles personal data on easygrade.in and in EasyGrade Assessments, EasyGrade Clinical, and EasyGrade Skills (in development).
It is written for people at a school, college, board, or employer — and for students or parents who appear in that workspace. It is not legal advice. Your organization may have extra rules for exams or health training. Those stay with them.
1. The short version
- You cannot create an EasyGrade workspace on this website. We set up the organization. They add staff.
- The school or college is in charge of student, staff, and exam data they put in the app.
- We run the software they bought and follow their instructions for that data.
- We are in charge of this website and of emails or forms you send us for a demo or support.
- There is an India app and a US app. Each customer’s workspace stays in that app’s region.
- We do not sell personal data or use exam data to advertise to students.
2. Who this covers
People who visit this website or ask for a demo. Staff the organization adds to the app. Students and candidates whose details the organization uploads, or who sit an exam. Parents who use a results portal. Medical learners and faculty on Clinical. When Skills opens, candidates and employers on that product.
3. Who is responsible
Your organization chooses what goes into EasyGrade: rosters, papers, scans, marks, clinical training records, and who may see them. They must have a lawful reason to give us that data, including any parent notice or consent for children, proctoring, or a photo used to confirm identity.
EasyGrade stores and processes that data so the product can run: login, grading, reports, proctoring when they turn it on, and support. We do not use their exam or training data to advertise.
This website is ours. If you write to us, we use your message to reply and to talk about a possible contract.
Different countries use different legal labels for the same split. The idea is simple: the organization owns its workspace; we provide the service.
4. How people get access
This website has no public sign-up. We create the organization’s workspace. Their admins add staff. Students and parents use a link, exam login, or portal the organization gives them.
If you emailed us from the contact form, you chose to send that information. You can ask us to stop using that inquiry by writing to connect@easygrade.in. If you use the app through an organization, ask them to close or change your access. We may still keep some records if the contract or the law requires it.
5. Where workspace data lives
Customers use either the India application or the US application. We do not mix those customer databases. India workspaces store that data in India. US workspaces store that data in the United States. Privacy rules for a workspace follow the app that organization uses. If someone in one country uses the other country’s app, both sets of rules can apply — we follow the stricter duty for that work.
Some AI steps used to draft marks or check identity may run on global processing endpoints. We send input only to produce the requested result. It is not used to advertise. If a contract or a future law requires a stricter location for a feature, we will follow that.
If support staff in another country must see a ticket, they see only what is needed, under confidentiality.
6. Other companies that help us run the service
We use other companies to host the service, send email or text messages, and keep it secure. They may handle personal data only to do that work. They are not allowed to sell it or use it for ads. They are bound by written terms. The same purpose and region limits apply to them as to us.
7. What we collect
This website
You can read the site without an account. A contact or demo form may include your name, organization, work email, phone, message, and simple checks that stop spam. Please do not send government ID numbers, passwords, bank details, or health records in a demo request.
EasyGrade Assessments
The organization may store staff accounts (name, email, phone, role), student lists (name, roll or candidate ID, class or course, contacts they choose, and an optional photo used to confirm identity in a proctored exam), exam papers, answer sheets and scans, marks, rubrics, who marked what, reports (Student Report, Class Report, Teacher Analysis, Teacher Report), portal access, and audit logs.
If they turn on proctoring for an online exam, we may process check-in signals, webcam and screen images, short audio used only so a person can review possible talking, device events, and a server-side face check against the roster photo. That media stays on the server. Students and staff browsers do not open the raw media store. AI does not void or fail an attempt on its own. A person decides voids and when marks are released.
EasyGrade Clinical
We process faculty and learner accounts, courses, lessons, simulated patient cases, session text, vitals used in the simulation, OSCE scores, lesson-exam answers, competencies, and college-scoped analytics. This is training data, not a hospital record system. Organizations must not upload real patient names or real clinical records unless their agreement and the law clearly allow it.
EasyGrade Skills
Skills is not live yet. Until it opens we only keep waitlist or inquiry details you send us. We will update this page before those features launch.
Security logs
We keep IP address, browser type, times, sign-in events (including one-time passwords), and logs needed to run and protect the service. We do not use these to build advertising profiles. We do not ask for Aadhaar, Social Security numbers, or other national ID on this website. Organizations should not put national ID in free-text fields unless a written agreement requires it and the law allows it.
8. How we use data
- Run the products the organization has turned on
- Let staff create exams, review AI-drafted marks, and release or revoke results
- Run proctoring when they enable it
- Build student, class, and teacher reports from approved marks
- Run Clinical practice, OSCE, and lesson exams for that college
- Sign people in, apply roles, and protect high-risk actions with a one-time password
- Reply to demo, support, and contract requests
- Stop abuse and investigate incidents
- Meet a valid legal demand
- Improve reliability with counts that do not identify a person, where the contract allows
AI may draft scores, flags, or study material. A person stays responsible for official marks, voids, and release.
9. Children and students
Schools may put children’s details on a roster. In India a child is under 18. In the US children’s online-privacy rules often treat under-13 as a child. We do not market this website to children or ask children to fill the contact form.
The organization must have parent or guardian permission, or another lawful school basis, before they add children or run a proctored exam for them. Parents who want to see, correct, or delete a student’s record should start with the school or college. We help them complete a valid request.
When a US school uses EasyGrade for education records, we use that data only to provide the service they bought. We do not sell student information or use it for targeted ads. We do not build a student profile except to run assessment, reports, or integrity features they turned on.
10. Who we share data with
We share personal data only with the organization that owns the workspace and the people they give access to; the companies that host or send mail or SMS under written terms; advisers who must keep it confidential; and authorities when the law requires it. We do not sell personal data. We do not share it for advertising across other websites.
11. How long we keep it
Website inquiries stay long enough to reply and keep a short business record, then we delete or archive them. App data stays for the life of the organization’s account and any extra period in their contract or exam-board rules. Proctoring media is kept for review, then deleted or reduced as the product and contract say. When an account ends, we delete or return data as the agreement says, except copies we must keep for security, a dispute, or the law.
12. Security
We use protections suited to exam and education data: encryption in transit, access by role, one-time passwords for sign-in and sensitive actions, checks that the app is genuine, audit logs, and a separate workspace for each organization. No system is perfectly safe. Organizations should use strong unique passwords, keep roster photos accurate, and give people only the access they need.
If we learn of a breach the law says we must report, we tell the organization. If the incident is about this website or our own records, we also tell affected people and the authority the law names, in the time those rules set.
13. Cookies on this website
This marketing site does not run advertising pixels. We may use cookies that are needed for the site and the contact form to work and stay secure. We do not use this site to follow you around the web for ads. Browser “do not track” signals do not change an ad profile here because we do not run those ads.
14. Your rights
Depending on where you are, you may ask to see, correct, complete, or delete personal data, limit how it is used, take a copy, or object to some uses. You may complain to your privacy authority — in India, the Data Protection Board of India when it is hearing complaints.
If you live in California you may ask us what we hold as a business, to delete or correct it, and to opt out of sale or sharing. We do not sell or share personal information in that sense. We will not treat you worse for asking.
Students, parents, and staff who only appear inside an organization’s workspace should write to that organization first. We support them on verified requests. If you wrote to EasyGrade yourself (for example a demo request), email connect@easygrade.in. We may need to confirm who you are. Some records cannot be deleted while a legal hold, an exam dispute, or a retention rule applies.
15. AI drafts, not final official results
Scoring drafts, proctoring flags, and Clinical feedback can be produced automatically. Official results, voids, and releases are human decisions. Ask the organization how a mark or flag was reviewed. We do not let a machine alone issue an official result that has legal or similar weight.
16. Questions and complaints
Write to connect@easygrade.in with the subject “Privacy” or “Grievance”. This is also our grievance contact for India.
For complaints that fall under India’s intermediary rules, we acknowledge within 24 hours and aim to finish within 15 days, or sooner if a rule sets a shorter time. Other privacy requests are handled as soon as we reasonably can.
17. Laws this policy is written to meet
We design the service so it can be used with the laws below when they apply. Not every customer is covered by every law. We do not claim a government certificate under any of them. If a local rule is stricter, we follow that rule for that work. If this page and your written agreement disagree, the agreement controls for that organization’s data.
India
- Information Technology Act, 2000
- SPDI Rules, 2011 (sensitive personal data and reasonable security)
- Intermediary Guidelines, 2021, where we act as an intermediary
- Digital Personal Data Protection Act, 2023, and rules issued under it
- CERT-In directions on cybersecurity incidents, when they apply
United States
- California consumer privacy law (CCPA / CPRA) and similar state laws, for information we hold as a business
- FERPA, when a school uses us as their service provider for education records
- COPPA, when a school authorizes use for students under 13
- State student-data laws that ban ads, sale, or extra student profiling, when they apply
Europe and the UK
- EU GDPR and UK GDPR, when those people are involved or a contract says they apply
- Approved transfer terms in the contract if data must leave those regions
18. Changes
We will update this page when the product, hosting regions, or the law change. The date at the top is the current version. If a change matters to an organization’s processing, we will also tell their contract contact when we must.
19. Contact
Privacy, security, and complaints: connect@easygrade.in. Website terms are on Terms.