Privacy Policy

Introduction

Orientrix Pvt. Ltd. ("Orientrix", "we", "our", "us") operates the Orientrix GenEval and GenTutor platforms. This Privacy Policy explains how we collect, use, disclose, and protect personal data when you use our website and services. We process personal data in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable Indian law.

Information We Collect

What we collect depends on which product you use:

GenEval (for institutions):

• Account information of institutional users (name, email, institution).
• Student data uploaded by the institution: student names, email addresses, roll numbers, and scanned handwritten answer sheets.
• Files and documents you upload (question papers, answer keys, answer sheets).

GenTutor (learning):

• Account information of learners and authors (name, email).
• Course material you upload and your learning activity (progress, quiz attempts).

All users:

• Usage data (pages visited, feature usage, timestamps, IP address).
• Support and communication content when you contact us.
• Payment data: payments are processed by Razorpay. We do not collect or store your card numbers, UPI credentials, or banking details — these are handled directly by Razorpay under its own privacy policy. We store only payment references (order and payment IDs) needed to confirm your transaction.

How We Use Information

We use personal data for the following purposes:

• To provide, operate, and maintain the platform and associated services.
• To generate rubrics and evaluate or analyse answer sheets using AI services.
• To deliver your reports and results to the email address you provide.
• To communicate with you, respond to requests, and provide customer support.
• To detect and prevent fraud, abuse, and security issues.

Where Your Data Is Stored

Your data is stored with Supabase on AWS infrastructure located in Sydney, Australia, and in Google Cloud Storage. When your documents are analysed, they are processed by our AI sub-processors (listed below), which may process data in other regions, including outside India and Australia. By using the service you consent to this cross-border transfer and processing.

Sub-processors & Third Parties

We do not sell personal data. We share data only with the following categories of service providers ("sub-processors"), and only to the extent needed to deliver the service:

• Supabase / AWS — database, authentication, and file storage (Sydney, Australia).
• Google Cloud — Vertex AI (AI evaluation), Cloud Storage, and Text-to-Speech.
• OpenRouter — AI model routing; requests may be processed by OpenRouter's third-party model providers.
• Razorpay — payment processing (India).
• Sentry — error tracking and application monitoring.
• Langfuse — AI/LLM observability and quality monitoring.
• Email provider — transactional email delivery (reports, notifications).

We require such providers to protect your data and use it only for the purposes described by us.

Children's Data

Some learners on our platforms (for example, school students whose work is evaluated through GenEval, or students using GenTutor) may be minors (under 18). Where a minor's personal data is processed, we require the consent of a parent or legal guardian, which is obtained by the institution or at the time of sign‑up. We do not carry out behavioural tracking of children, and we do not use children's data for advertising or profiling. If you are a parent or guardian and believe a minor has used our services without your consent, contact us at the address below and we will act on a verified request.

Retention

Answer sheets, uploaded documents, and generated results are retained while your account or engagement with us is active, so that you can access your reports and we can provide support, comply with legal obligations, resolve disputes, and enforce agreements. Upon a verified deletion request made through our grievance channel (email below), we will delete your personal data and uploaded documents, except where retention is required by law.

Security

We use industry-standard practices to secure data in transit and at rest. However, no system is completely secure — if you believe your account has been compromised, contact us immediately.

Breach Notification

In the event of a personal data breach affecting your data, we will notify the Data Protection Board of India and affected individuals as required by the DPDP Act, 2023, and will take prompt steps to contain and remediate the breach.

Cookies & Tracking

We use cookies and similar technologies to improve the user experience and analyze usage. You may control cookies via your browser settings.

Your Rights under the DPDP Act, 2023

As a Data Principal under the DPDP Act, 2023, you have the right to:

• Access — obtain a summary of the personal data we hold about you and how it is processed.
• Correction — have inaccurate or incomplete personal data corrected or updated.
• Erasure — have your personal data deleted when it is no longer necessary or when you withdraw consent.
• Grievance redressal — have your complaints addressed through our grievance channel.
• Nominate — nominate another individual to exercise your rights in the event of death or incapacity.

To exercise any of these rights, email us atinfo@orientrix.org from the email address associated with your account or submission. We may ask for information to verify your identity before acting on a request.

Grievance Officer

In accordance with applicable Indian law, the contact details of our Grievance Officer are:

Grievance Officer: [Name to be appointed]
Orientrix Pvt. Ltd.
Email: info@orientrix.org

We aim to acknowledge grievances promptly and resolve them within the timelines prescribed under applicable law.

Contact

For privacy-related inquiries contact: info@orientrix.org

director@orientrix.org