2026 Student Data Protection Policy

Privacy Policy & DPDP Act Compliance

Edulas is committed to safeguarding student data, academic code submissions, and lab telemetry. We strictly comply with India's Digital Personal Data Protection (DPDP) Act 2023/2026, US FERPA, COPPA, and EU GDPR.

Updated: July 2026• ZERO Third-Party Ad Selling•AES-256 Encrypted at Rest & Transit
01

1. Core Privacy Commitments & ZERO Data Selling

At Edulas, student data privacy is non-negotiable:

🚫 ZERO Data Selling

We never sell, rent, trade, or monetize student PII, lab submissions, or browsing activity to ad networks or third parties.

🔒 Sandboxed Execution Security

Student code is evaluated in isolated, transient server execution sandboxes. Hidden evaluation test cases are kept strictly confidential on the server.

🎓 Academic Purpose

Data collected is strictly used for lab synchronization, Socratic AI assistance, and professor gradebook generation.

02

2. India Digital Personal Data Protection (DPDP) Act Compliance

Pursuant to the Digital Personal Data Protection (DPDP) Act 2023 and 2026 Rules published by the Ministry of Electronics and Information Technology (MeitY), Government of India:

  • A. Notice & Consent Mechanism (Section 5 & 6)

    Every student and professor receives clear, itemized notice before processing personal data. Consent is freely given, specific, informed, conditional, and unambiguous.

  • B. Data Principal Rights (Section 11, 12, 13 & 14)

    Indian users possess the Right to Summarized Data Access, Right to Correction and Erasure, Right to Grievance Redressal, and Right to Nominate an authorized representative in the event of incapacity.

03

3. US FERPA & COPPA Educational Compliance

Under the Family Educational Rights and Privacy Act (FERPA, 20 U.S.C. § 1232g), Edulas operates as a designated "School Official" with legitimate educational interests under institution supervision. Student educational records remain strictly confidential.

04

4. Information We Collect & Telemetry

Data CategoryFields CollectedPurpose
Identity & AccountName, institutional email address, hashed PINLab authentication & role verification
Academic SubmissionsSource code drafts, test assertions, completion statusAutomated grading & professor gradebook
Lab TelemetryDefocus duration, clipboard entropy ledgerFocus assistance & plagiarism analysis
05

5. Sub-processors & Infrastructure Directory

We utilize top-tier enterprise cloud infrastructure sub-processors bound by strict Data Processing Addendums (DPAs):

  • Appwrite Cloud: Authentication backend & session databaseSOC-2 / GDPR
  • Vercel Inc.: Global edge network deployment & CDNISO-27001 / SOC-2
  • Cloudflare: DDoS protection, Web Application Firewall (WAF)HIPAA / FERPA
07

7. Data Grievance Redressal Officer Contact

In accordance with Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and Section 12 of India's DPDP Act 2023, the details of our designated Data Grievance Redressal Officer are as follows:

Grievance Officer: Legal & Data Protection Desk, AIMD Campus Inc.

Official Email: grievance@edulas.xyz

Direct Escalations: dpo@edulas.xyz

Turnaround SLA: All privacy & data principal inquiries resolved within 72 business hours.