Privacy Policy

1. Who we are

OneSkool is an AI teaching assistant that helps teachers generate textbook-grounded lesson plans, worksheets, and presentations. The Service is operated by ONE-SKOOL EDGETECH PRIVATE LIMITED. For the purposes of the Digital Personal Data Protection Act, 2023 (the “DPDP Act”), we are the Data Fiduciary responsible for your personal data, and you are the Data Principal.

If you have any questions about this policy or how we handle your data, contact us at privacy@teachpad.in or via our Contact page.

2. The data we collect

We collect the following categories of personal data:

• Account data — your name, email address, password (stored only in hashed form by our authentication provider), the school you select or enter, and your role (for example, teacher or administrator).
• Content you create — the inputs you provide (such as the board, class, textbook, chapter, topic, and instructions you choose) and the lesson plans, worksheets, presentations, and other materials you generate and save.
• Subscription & payment data — your plan, subscription status, and limited transaction identifiers. Card and bank details are collected and processed directly by our payment partners (see Section 7); we do not store full card numbers.
• Usage & device data — log information such as your IP address, browser and device type, pages visited, generation requests, and timestamps, which we use to operate, secure, and improve the Service.
• Google sign-in data — if you choose “Sign in with Google”, we receive your name, email address, profile picture, and Google account identifier, as permitted by the permissions you approve (see Section 5).

3. How we use your data

We use your personal data to:

• provide, operate, and maintain the Service and generate the materials you request;
• create, authenticate, and secure your account;
• process subscriptions, payments, and renewals;
• send you confirmations, service notices, and respond to your support requests;
• monitor, troubleshoot, improve, and protect the Service, and prevent abuse and fraud; and
• comply with applicable laws and enforce our Terms of Service.

4. Legal basis & your consent

We process your personal data on the basis of your consent, which you give when you create an account and use the Service, and for the other lawful purposes permitted under the DPDP Act, including performing our contract with you and certain legitimate uses. You may withdraw your consent at any time (see Section 12); withdrawing consent may mean we can no longer provide parts of the Service. We do not sell your personal data.

5. Google user data & Limited Use

If you sign in with Google, we use the Google account information described in Section 2 solely to authenticate you and to create and populate your OneSkool profile. We do not use this information for advertising, and we do not sell it.

OneSkool’s use and transfer of information received from Google APIs to any other application will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We only access, use, store, or share Google user data to provide or improve features that are prominent in OneSkool, and only as described in this policy or with your consent, or where required by law.

6. AI generation and your content

When you generate materials, the textbook context and the instructions you provide are sent to our AI provider (Google Gemini / Vertex AI) to produce a result. We design our prompts to ground responses in the textbook content you select. Where our providers offer such controls, we configure them so that your content is used to deliver the Service and is not used to train their general-purpose models. You retain rights to the materials you generate, as set out in our Terms of Service.

7. Service providers & international transfers

We share personal data with trusted third-party providers (“Data Processors”) who help us operate the Service, under contracts that require them to protect your data and use it only on our instructions. These providers, and where they process data, are:

Some of these providers process data outside India (for example, in the United States). Where we transfer your personal data outside India, we do so in accordance with the DPDP Act and take reasonable steps to ensure your data remains protected. By using the Service, you consent to these transfers.

8. Cookies and local storage

We use your browser’s local storage and essential cookies to keep you signed in (by storing authentication tokens) and to save drafts of your work. These are necessary for the Service to function. We do not use third-party advertising cookies. If we introduce analytics or similar technologies in future, we will update this policy.

9. Children’s data

OneSkool is built for teachers and school staff, who must be adults (18 years or older). The Service is not directed to children, students do not create accounts, and we do not knowingly collect personal data from children. The teaching materials concern curriculum content, not identifiable students. If you believe a child has provided us with personal data, please contact us at privacy@teachpad.in and we will delete it.

10. How long we keep your data

We keep your account and content data for as long as your account is active and as needed to provide the Service. After your account is closed, we retain data only as long as necessary to meet legal, tax, and accounting obligations or to resolve disputes, after which we delete or anonymize it. You can ask us to delete your data at any time (see Section 12).

11. How we protect your data

We protect your data using encryption in transit (HTTPS), access controls, and reputable infrastructure providers, and we limit access to those who need it to operate the Service. No method of transmission or storage is completely secure, but we work to protect your data and to notify you and the relevant authorities of a personal-data breach as required by law.

12. Your rights

As a Data Principal under the DPDP Act, you have the right to:

• access a summary of the personal data we process about you;
• request correction, completion, or updating of your data;
• request erasure of your personal data;
• withdraw your consent at any time;
• nominate another person to exercise your rights in case of death or incapacity; and
• have your grievances addressed (see Section 13).

To exercise any of these rights, email privacy@teachpad.in. We may need to verify your identity before acting on your request.

13. Grievance Officer

In line with the DPDP Act, you can contact our Grievance Officer with any concern about how we handle your personal data:

• Grievance Officer: Shreyas Jamkhandi
• Email: grievance@teachpad.in

We aim to acknowledge and resolve grievances within the timelines required by applicable law.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, take reasonable steps to notify you. Your continued use of the Service after an update means you accept the revised policy.

15. Contact us

For any privacy questions or requests, contact ONE-SKOOL EDGETECH PRIVATE LIMITED at privacy@teachpad.in. You can also reach us through our Contact page.

Addendum: the free School Audit

The free School Audit at /school-audit is open to anyone, without an account. Where this addendum differs from the sections above, it is the one that applies to the audit.

What we collect

• Your answers about how your school runs: its name and city, board, size ranges and the practices and tools you describe. Please do not type names or personal details about students or staff into the free-text answers.
• We do not ask for your name, email address or phone number in the audit. We ask for them only if you choose to request a walkthrough.
• To limit abuse we keep short-lived request counters under a keyed hash of your IP address. The address itself is not stored with your report.

On your device

While you answer, your progress is kept in your browser’s local storage and nowhere else. After you generate a report, your browser remembers its private link so you can find it again. You can clear both from the audit page or by clearing this site’s data.

Your report and its private link

Generating the report sends your answers to our servers, where we store them and the report calculated from them. A report opens only with its full private link. The key in that link is made in your browser; we store a one-way fingerprint of it, not the key. Anyone you give the link to can read the report. Reports are not indexed by search engines, and pages of a report are excluded from analytics.

How long we keep it, and deleting it

A report is kept for a limited period (currently 180 days, shown on the audit page) and then deleted automatically. You can delete it yourself at any time from the report; it is then removed from our servers immediately and its link stops working.

AI commentary

Scores, findings and the plan are calculated by fixed rules, not by an AI. Where the service has AI commentary switched on, a summary of the calculated findings is sent to our AI provider (Google Gemini / Vertex AI) to write a short explanation. That summary is built only from the calculated findings: it does not include your school’s name, city, any contact detail or anything you typed in the free-text answers. Every report states whether an AI wrote commentary on it, and is complete without it.

If you request a walkthrough

The request form is filled in from your report, and shows you exactly what will be sent. It includes the school details and priorities you can see there, plus a short note with your score, your top priorities and a short reference that cannot open the report. It does not include your questionnaire answers or your private link. You can change any of it before sending, and nothing is sent until you press send.

We do not sell the information in an audit and do not share it with other schools. To ask about an audit or its deletion, write to privacy@teachpad.in; we will need the report’s private link to find it.