Privacy Policy & Data Protection
We believe privacy is a fundamental human right. PRASUNEX safeguards student, educator, parent, and institutional data with zero commercial advertising and zero AI model training on private records.
FERPA Certified
Student Record Safety
COPPA Safe Harbor
Child Privacy Protection
GDPR & DPDP Act
Global Privacy Compliant
ISO 27001 Certified
Info Security Management
SOC 2 Type II Audited
Cloud Data Integrity
256-Bit TLS 1.3
Bank-Grade Transport
1. Overview & Data Fiduciary Scope
Enterprise Privacy StandardPolicy SummaryPRASUNEX (operated by Prasynet Pvt. Ltd.) processes educational, administrative, and AI learning data with transparent data governance and zero commercial monetization.
Prasynet Pvt. Ltd. (operating as “PRASUNEX”, “we”, “us”, or “our”) is committed to the highest standards of data protection, student confidentiality, and informational security across all unified portal workspaces (Student, Parent, Staff, Management, and Job Provider) and connected AI microservices.
This Privacy Policy describes how we collect, process, store, disclose, and safeguard personal information when you access our cloud platform, mobile applications, APIs, or institutional portals.
We operate under a strict principle of Data Minimization and Zero Commercial Exploitation: PRASUNEX never sells, rents, leases, or trades student or institutional data to third-party data brokers or marketing agencies.
Data Fiduciary / Processor Role
PRASUNEX acts strictly as a certified Data Processor (School Official) for educational institutions that retain exclusive ownership over their records.
Universal Portal Governance
Applies seamlessly across web, iOS, Android, and API endpoints across the PRASUNEX ecosystem.
Transparent Data Governance
All data processing is governed by written Data Processing Agreements (DPAs) and verifiable institutional consent.
2. Global Legal Framework (GDPR, DPDP, FERPA, COPPA)
Multi-Jurisdictional AlignmentPolicy SummaryBuilt from the ground up to comply with global privacy laws including India DPDP Act 2023, EU GDPR, US FERPA, COPPA, and California CCPA/CPRA.
PRASUNEX is architected to satisfy the rigorous statutory requirements of major international data protection frameworks:
• Digital Personal Data Protection Act 2023 (DPDP Act, India): Compliance with Data Fiduciary obligations, lawful consent notices, and verifiable parental consent protocols for minors.
• Family Educational Rights and Privacy Act (FERPA, 34 CFR Part 99): Operating as an authorized “School Official” with legitimate educational interests, maintaining institutional records under direct school control.
• Children’s Online Privacy Protection Act (COPPA, 16 CFR Part 312): School Consent Model for students under 13, prohibiting behavioral tracking and contextual advertising.
• General Data Protection Regulation (GDPR, Regulation (EU) 2016/679): Legal basis under Article 6, Article 9 special category protections, and Data Protection Impact Assessments (DPIA).
• California Consumer Privacy Act / CPRA (Cal. Civ. Code § 1798.100): Full disclosure of collection categories and explicit opt-out transparency.
FERPA School Official Status
Institutions maintain absolute legal control over student education records under FERPA Section 99.31(a)(1)(i)(B).
DPDP Minor Safeguards
Prohibiting behavioral profiling, targeted tracking, or detrimental processing of children’s data.
GDPR Standard Contractual Clauses
Equipped with EU Standard Contractual Clauses (SCCs) for international institutional partnerships.
3. Categories of Information We Collect
Itemized Data InventoryPolicy SummaryWe collect only strictly necessary information required to deliver core educational operations, learning analytics, and verified placement services.
The categories of personal information collected by PRASUNEX depend on your institutional role, portal type, and service interactions:
Identity & Authentication Data
Full legal name, institutional email address, phone number, encrypted password hash, and multi-factor authentication credentials.
Academic & Curricular Records
Course enrollments, attendance timestamps, gradebooks, assignment submissions, examination transcripts, and certifications.
Family & Guardianship Information
Parent/guardian name, verified phone/WhatsApp number, student relationship status, and billing invoice details.
Staff & Employment Metadata
Faculty department, designation, qualifications, teaching assignments, and professional development history.
Placement & Career Profiles
Candidate resume/CV, GitHub/portfolio links, technical skill assessments, interview feedback, and job applications.
Technical & Telemetry Data
IP address, browser type, device operating system, session latency, and access logs.
4. Student Privacy & COPPA/FERPA Safeguards
Highest Protection TierPolicy SummaryStudent data receives our highest security protocols with strict access controls, zero advertising, and complete educational confidentiality.
Student educational data is treated with extraordinary confidentiality. Access is restricted strictly to authorized educators, verified parents/guardians, and institutional administrators with an authenticated need-to-know basis.
We enforce strict data isolation between institutions through multi-tenant database row-level security (RLS) policies.
Student project submissions, exam responses, and chat prompts with Prerana AI are strictly segregated and NEVER shared with external marketing brokers or third-party ad networks.
Strict Privacy Prohibitions
- •No building of behavioral advertising profiles on students across the web.
- •No selling, leasing, or commercial exploitation of student academic scores.
- •No third-party data broker access to student contact directories.
- •No algorithmic automated profiling that produces detrimental legal effects on student admissions.
5. Parent & Guardian Data Protection
Guardian Access & Payment TrustPolicy SummaryParent data is processed strictly for academic tracking, teacher communication, and encrypted fee settlements.
6. Educator & Staff Confidentiality
Faculty IP & Evaluation SafetyPolicy SummaryEducators maintain confidentiality over their teaching materials, lesson plans, and performance records.
7. Job Provider & Candidate Data Privacy
Candidate Data GovernancePolicy SummaryCandidate resumes and test submissions are shared with corporate recruiters exclusively through verified application workflows.
8. Management & System Audit Log Privacy
Tamper-Evident GovernancePolicy SummaryInstitutional administrators have access to comprehensive security audit trails and data governance dashboards.
9. Prerana AI & Zero Model Training Policy
Zero Foundation Model TrainingPolicy SummaryCustomer student data and private exam submissions are NEVER used to train public foundation models.
Prerana AI is an educational cognitive assistant engineered with enterprise-grade privacy boundaries. When students or educators interact with Prerana AI, their prompts and responses are processed in secure, isolated runtime containers.
We explicitly contract with all underlying LLM cloud infrastructure providers (e.g. enterprise Google Cloud Vertex AI) under strict Business Associate Agreements ensuring:
1. Customer prompts and student inputs are NEVER used to train, retrain, or improve public foundation models.
2. In-flight prompts are encrypted with TLS 1.3 and purged from memory immediately following completion generation.
3. Automated safety classifiers monitor for academic integrity and prevent generation of unsafe or harmful content.
Zero Model Retraining
Student assignments and exam questions are never absorbed into public AI datasets.
Ephemeral Processing
Conversational context is stored strictly in user-authorized session memory.
Algorithmic Transparency
Clear visual badges indicate when content or learning assistance has been generated by Prerana AI.
11. Data Security & AES-256 / TLS 1.3 Encryption
Bank-Grade AES-256 & TLS 1.3Policy SummaryAll platform data is protected with AES-256 encryption at rest, TLS 1.3 in transit, and continuous SOC 2 Type II controls.
12. Sub-Processors & Cloud Infrastructure
Certified Sub-ProcessorsPolicy SummaryWe partner exclusively with SOC 2 / ISO 27001 certified cloud infrastructure providers bound by strict Data Processing Agreements.
13. Your Data Subject Rights (Access, Erasure, Portability)
Full Data Subject AutonomyPolicy SummaryUnder GDPR, DPDP Act 2023, and CCPA, users possess complete legal rights to access, rectify, export, and erase their personal information.
14. Data Retention & Cryptographic Destruction
Controlled Lifecycle & PurgePolicy SummaryData is retained strictly for active institutional enrollment periods and purged within 30 days of contract termination.
15. Cross-Border Data Transfers & Standard Clauses
Cross-Border Privacy ShieldPolicy SummaryCross-border data transfers comply with GDPR Standard Contractual Clauses and Indian DPDP data localization requirements.
16. Policy Amendments & Data Protection Officer Contact
Legal Channel & InquiriesPolicy SummaryDedicated Data Protection Officer (DPO) and compliance channel for privacy inquiries, DSARs, and regulatory notices.
Have Questions or Wish to Exercise Your Data Rights?
Submit a formal Data Subject Access Request (DSAR), request data export, or inquire about institutional DPAs with our certified privacy counsel.