Privacy Policy

1. Data Collection

EvalAI Technologies Pvt. Ltd. ("Company", "we", "us", or "our") collects primary credentials (name, institutional email, phone number, and address) upon registration. We also collect student identifiers (names, roll numbers) and handwritten answer sheet scans uploaded by you for evaluation purposes.

2. AI Processing & Model Improvement

We process answer sheets using Optical Character Recognition (OCR) systems and Large Language Models (specifically Google Gemini APIs). By uploading content, you acknowledge and agree that:

• • Data may be shared securely with third-party cloud APIs (such as Google Vision and AI hosting environments) solely for text extraction and scoring.
• • Anonymized answer data, extracted transcripts, and grading feedback logs may be used internally to train, refine, and improve proprietary EvalAI machine learning models.

3. Security & Cloud Storage

All scanned documents and scorecards are encrypted in transit using TLS 1.3 and at rest on secure cloud servers using AES-256 standards. We restrict database access exclusively to authorized system microservices and staff bound by non-disclosure agreements.

4. Data Retention Policy

To preserve student privacy, we enforce strict data retention limits:

• • Scanned papers and scorecard reports are stored only for the duration specified by your plan (e.g., 7 days for Free Trial, 30 days for Starter).
• • The maximum data retention period is capped at 90 days for all accounts.
• • Once the retention period expires, scanned files and student transcripts are permanently purged from our primary database block storages.

5. User Rights & Account Deletion

You retain full rights of access, rectification, and erasure over your personal credentials and uploaded files. You can submit account deletion requests at any time by visiting our Contact Page or contacting us at support@evalai.dev. All account deletion requests are processed in full and completed within 30 days of receipt.

6. Indian IT Act Compliance

We process personal data in accordance with Section 43A of the Indian Information Technology Act, 2000, and the rules framed thereunder. Any disputes regarding data handling shall be subject to the exclusive jurisdiction of the courts located in Ghaziabad/Noida, Uttar Pradesh, India.