Classworks  place paramount importance on the privacy and security of our users. As an Indian EdTech company providing digital courses, software solutions for schools, cybersecurity services, and AI-based learning tools, we are deeply committed to operating within the framework of Indian law—particularly the Information Technology Act, 2000, and all its relevant amendments and data protection provisions. Our Privacy Policy is not just a document but a declaration of our ethical commitment to data protection, transparency, and trust.

This document explains in exhaustive detail how we protect user privacy, the limited data we handle, our approach to cybersecurity, how we structure software-based privacy, our stance on data collection and sharing, and how we ensure compliance with Indian and international privacy norms. This Privacy Policy applies to all users who access our digital platforms, including but not limited to students, schools, teachers, institutions, parents, and organizational clients.

1. No Data Collection Policy

One of the fundamental principles guiding our operations is that we do not collect personal data from individual users. Students using ClassworksGPT or browsing through our educational content do not need to register, log in, or provide names, emails, phone numbers, or addresses. We intentionally avoid gathering personal identifiers to eliminate the risk of privacy violations. Our services are designed to provide value without intrusive data monitoring or storage.

When students use ClassworksGPT to get help with their homework or assignments, they interact with the AI engine anonymously. There are no backend logs tying usage to a specific identity. Our systems are structured so that no information about a student’s device, location, browsing behavior, or history is stored or used. We believe this approach minimizes exposure to data breaches and aligns with the growing public demand for privacy-first technology solutions.

2. Institutional Client Data Handling

While individual users are never required to input personal information, we understand that institutional clients such as schools, colleges, and education boards may need to input student-related data for operational efficiency. This includes the use of our school management software and online result system, where names, roll numbers, class data, scores, and attendance records may be uploaded by the institution.

In such cases, Classworks acts purely as a technology enabler and not as a data controller. The data belongs to the client institution, and we never claim ownership. We ensure that all such data is processed strictly for the purpose it was intended and not for any commercial or advertising gain. Institutions retain full rights to delete, modify, or export their data at any time.

We enter into specific data processing agreements (DPAs) with our institutional clients, outlining the purpose, duration, scope, and security standards for data handling. Our backend infrastructure ensures high-grade encryption, access control, and audit logging to protect sensitive educational data.

3. Cybersecurity Measures

Cybersecurity is integral to privacy. All our platforms—including our web portals, software products, and AI interfaces—are protected using state-of-the-art security protocols. This includes SSL/TLS encryption for data transmission, firewalls for intrusion detection, role-based access control for internal systems, and periodic penetration testing. We adhere to OWASP (Open Web Application Security Project) guidelines and continuously monitor for vulnerabilities.

We also provide cybersecurity services to schools and institutions. These services include setting up firewalls, network audits, vulnerability assessments, endpoint protection, and guidance on data security best practices. We help institutions develop incident response plans, password policies, and data recovery strategies. The combination of internal and external cybersecurity efforts ensures a privacy-first environment across our ecosystem.

4. No Use of Tracking Technologies

We do not use browser cookies, session identifiers, or fingerprinting scripts that track user behavior. Our platforms do not deploy third-party ad trackers, analytics scripts, or behavioral advertising technologies. Users are not profiled or segmented based on their usage habits.

If, in the future, we consider the implementation of features such as personalized learning paths or feedback systems that require tracking, we will only do so after obtaining clear, informed, and affirmative consent from users. Even then, such data will be anonymized and stored securely.

5. No Data Sharing with Third Parties

Classworks has a strict policy of not sharing user data with third-party vendors, advertisers, analytics providers, or any external organization. Since we do not collect personal user data in the first place, there is nothing to sell, rent, or exchange. This policy applies across all our services—whether free or paid.

In the case of institutional data, even technical support operations are conducted under confidentiality agreements. Our employees and contractors are trained in data protection standards and are bound by non-disclosure agreements (NDAs). Any third-party service providers (such as cloud infrastructure or communication gateways) we work with are compliant with India’s data security regulations and undergo strict due diligence.

6. Compliance with Indian Law

We ensure that our operations are fully compliant with Indian laws and regulations. Our privacy policy is aligned with the provisions of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. We also monitor developments around the proposed Digital Personal Data Protection Act and are prepared to update our systems and policies accordingly.

Where applicable, we also consider global best practices such as the General Data Protection Regulation (GDPR) of the European Union, especially when serving expatriate institutions or international school branches operating in India. While GDPR is not binding on Indian firms, we voluntarily adhere to its core principles, including purpose limitation, data minimization, and accountability.

7. Protection of Children’s Privacy

Given that many users of our platform are minors, we implement child privacy protections in line with Section 43A of the IT Act and international child safety norms. We do not knowingly collect data from minors. All our content is educational, safe, and free from advertisements. Where applicable, we require school or parent oversight for minor access to our AI tools.

We also conduct periodic reviews of our platforms to ensure age-appropriate content, prevent misuse, and maintain child-friendly user interfaces. Any reports of child data misuse are treated as high-priority incidents and investigated thoroughly.

8. AI Transparency and Usage Ethics

Our AI platform, ClassworksGPT, is designed to assist students in understanding academic concepts, improving study skills, and solving educational queries. It is not designed to replace teachers, write full assignments, or enable academic dishonesty. All interactions with the AI are anonymous and ephemeral. The system does not retain or learn from individual sessions.

We publish guidelines for ethical use and encourage schools and parents to supervise AI usage. We are committed to improving AI reliability and minimizing bias or hallucinations. Our development team follows AI ethics frameworks in terms of data neutrality, transparency, and user safety.

9. User Rights and Controls

Although we do not collect personal data, users and institutions have the right to understand what minimal system metadata is processed (such as IP ranges for security logs), how long it is retained (generally 7–30 days for logs), and how to request data deletion or access. Institutional clients have dashboards and admin tools that allow them to control their datasets.

In the event that we introduce optional user accounts in the future, users will be able to access, rectify, or delete their data upon request. Our systems will be upgraded to support these rights through automated or manual processes.

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in technology, regulation, or our services. All updates will be clearly dated and communicated via email, dashboard notifications, or public announcements. Continued use of Classworks services after a policy update constitutes acceptance of the revised terms.

Users and institutions are encouraged to review this policy regularly to stay informed about our data protection stance.