Last Updated: August 2026
This policy explains what Edrox collects, why, and what rights you and your child have over that data. It applies to parents, students, and teachers using the Edrox platform (web app and any connected services).
We collect information you provide directly when creating an account: parent name, email, phone number, city/state, and child details (name, date of birth, school, grade, and board). Teachers additionally provide qualification documents, identity documents, and background declarations as part of verification.
We also collect usage data automatically as your child learns: chapters viewed, AI Tutor conversation history, quiz and test results, video watch progress, and session attendance. This data exists specifically to power progress tracking and personalized recommendations - it is not used for advertising.
Your information is used to: provide and improve our educational services; personalize AI Tutor responses and study plans to your child's understanding level; generate progress reports for parents; match students with appropriate teachers; process payments; and send service-related communications (account, billing, safety notices). We do not sell personal data, and we do not use children's data to serve targeted advertising.
Edrox is built for K-12 students, most of whom are minors under Indian law. Every student account is created and owned by a parent - children do not self-register. By creating a child profile, the parent provides verifiable consent to the collection described in this policy, consistent with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and, where applicable, the U.S. Children's Online Privacy Protection Act (COPPA).
We do not knowingly show behavioral or targeted advertising to child accounts, and we do not permit public profile pages, public chat, or unsupervised messaging between students and teachers outside of scheduled, session-linked communication. Parents can review, export, or delete their child's data at any time from the parent dashboard.
Data is stored in MongoDB with access restricted to authenticated services. Passwords are hashed with bcrypt and never stored in plain text. All traffic between your browser and Edrox is encrypted (HTTPS/TLS). Payment card details are never stored on our servers - Razorpay processes and stores payment information under its own PCI-DSS compliant infrastructure. Live tutoring sessions run over Daily.co's encrypted video infrastructure.
We retain account and learning-progress data for as long as the account is active, plus a limited period afterward for legal, accounting, and dispute-resolution purposes. On request, we delete personal data within the timelines described in Section 7, subject to records we are legally required to keep.
We share the minimum data necessary with these service providers, each acting under their own privacy and security terms:
We do not permit these providers to use Edrox user data for their own advertising or model-training purposes beyond what's needed to deliver the service to us.
Edrox uses browser local storage to keep you signed in and remember preferences (such as language). We do not use third-party advertising or cross-site tracking cookies.
You have the right to access, correct, export, or delete your (or your child's) personal data. Requests can be made from the parent dashboard or by emailing us. We respond to access and correction requests within 30 days, and to deletion requests within 30 days unless a longer retention is legally required (e.g. payment records).
If a breach affecting your personal data occurs, we will notify affected users and, where required by law, the relevant data protection authority, without undue delay after becoming aware of it.
In accordance with the Information Technology Act, 2000 and rules made thereunder, the contact details of the Grievance Officer are:
Grievance Officer, Edrox
Email: grievance@edrox.co.in
We may update this policy as our services evolve or as law requires. Material changes affecting how children's data is handled will be notified to parents by email before they take effect.
For privacy-related questions, contact us at privacy@edrox.co.in
This document is a working draft intended to accurately describe current data practices. It should be reviewed by qualified legal counsel before Edrox processes real user data in production.