What we do with school, parent and student data — stated as facts we can show you, not badges.
For student, parent and staff data, the school is the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 — it decides why and how the data is used and takes consent. MarvelSoft Ventures acts as the school's Data Processor: we process that data only on the school's written instructions, under a Data Processing Agreement.
We protect school, parent and student data with encryption in transit and at rest, role-based access controls, and regular backups.
eKTextAI is used with children's data on the instructions of the school. For student data the school obtains verifiable parental consent when the student is admitted; we do not use children's data for tracking or behavioural monitoring, and we do not run targeted advertising to children or their parents based on it.
When a parent or student uses eKTextAI, the conversation is visible to the school and to the staff the school authorises, so they can follow up. We also see it where we provide support.
We don't sell school, parent or student data and we don't share it for anyone else's purposes. We use service providers strictly to run the service, under contract.
If we become aware of a personal data breach affecting school data, we notify the school without delay and support the school's own notification to affected parents and to the Data Protection Board.
We work to keep eKTextAI available at all times and aim for a high standard of uptime; we do not guarantee uninterrupted service.
An account that is not used is blocked and later deleted; a plan that stops is held to the end of the term it has paid for, and the same sequence runs from that date. We warn you before each step. If you want a copy of your data, ask us before the deletion date and we will send it to you, and we will hold the data longer if your school asks. Signing in while the account is blocked brings it straight back.
Within the notice window, the school can ask us in writing for a copy of its data. We send it within 7 working days and confirm in writing. If a request is open, we do not delete. The admin console also has a self-serve export, so your school can take a copy itself.
A group's IT team will have a questionnaire. Send it to us and we'll answer it.
If you discover a security vulnerability, please report it to us.
security@ektextai.com