Privacy Policy
Last Updated: October 10, 2026
1. Introduction and Scope
1.1 Pitthugram ("Pitthugram," "we," "us," or "our") provides a technology platform that enables coaching institutes to establish an online presence, administer tests and assessments, manage question banks, process scanned papers, and generate academic reports and analytics (the "Service"), as further described in our Terms of Service.
1.2 This Privacy Policy explains what personal information we collect, how and why we collect it, how we use and share it, how long we retain it, and the rights and choices available to individuals whose information we process.
1.3 This Policy applies to coaching institutes and their representatives ("Institutes"), institute staff and teachers, students, and any other individual who provides personal information to us or whose personal information is processed through the Service (collectively, "you," "User," or, where referring to the data protection framework under Indian law, "Data Principal").
1.4 By accessing or using the Service, or by providing personal information to us, you acknowledge that you have read and understood this Privacy Policy. Where consent is the applicable legal basis for processing (for example, processing a child's personal data as described in Section 7), that consent is obtained separately as required by law.
2. Definitions
- "Personal Information" or "Personal Data" means any information relating to an identified or identifiable natural person.
- "Institute Content" means academic content, question banks, student records, and related data that an Institute or its staff upload, enter, or generate through the Service.
- "Processing" means any operation performed on Personal Information, including collection, storage, use, disclosure, or deletion.
- "Data Fiduciary" and "Data Principal" carry the meanings given to them under the Digital Personal Data Protection Act, 2023 ("DPDP Act") — broadly, the entity that determines the purpose and means of processing, and the individual to whom the personal data relates, respectively. Depending on the specific data at issue, Pitthugram and the Institute may each act as a Data Fiduciary, as described further in Section 6.
3. Information We Collect
3.1 Information Provided Directly
- Contact and account information: name, institute/organization name, email address, and phone number, submitted when an Institute requests setup, registers, or otherwise signs up for the Service.
- Login credentials: account credentials generated for institute staff to access the Service, delivered via email and, where opted in, WhatsApp.
- Academic content and Institute Content: questions, answer keys, test papers, uploaded documents or images (including scanned papers processed using optical character recognition), and course, subject, and chapter data, entered by Institute staff.
- Student records: names, class or batch assignment, attempt history, scores, and other academic performance data entered by Institute staff for the purpose of administering assessments and generating reports.
- Communications: any information you provide when you contact us via email, WhatsApp, or other support channels.
3.2 Information Collected Automatically
- Technical and usage data: IP address, browser type, device information, pages visited, actions taken within the Service, and similar interaction logs, collected for security, fraud prevention, and service-improvement purposes.
- Bot and abuse prevention: as part of operating the Service, we use automated verification tools (such as Cloudflare Turnstile) to detect and prevent automated abuse of forms on our website. These tools may process limited technical data (such as IP address and browser signals) as part of that verification.
3.3 Cookies and Similar Technologies
We and our service providers may use cookies, local storage, and similar technologies to operate the website and Service, remember preferences, and understand usage patterns. Where required by applicable law, we will seek consent for non-essential cookies through an appropriate mechanism.
4. Legal Basis and Purpose for Processing
We process Personal Information on one or more of the following bases, as applicable:
- (a) performance of a contract with the Institute;
- (b) consent, including the consent of an Institute, parent, or lawful guardian where required for a child's data (see Section 7);
- (c) compliance with a legal obligation; and
- (d) our legitimate interests in operating, securing, and improving the Service, provided those interests do not override your rights.
5. How We Use Information
We use the information described in Section 3 to:
- provision, configure, and administer an Institute's instance of the Service;
- deliver login credentials and transactional, account-related, and support communications, by email and, where opted in, WhatsApp;
- operate test-scheduling, question-bank, paper-review (including OCR), and reporting features;
- prevent fraud, spam, and automated abuse of our forms and systems;
- provide customer support and technical troubleshooting;
- maintain the security and integrity of the Service;
- comply with applicable law and enforce our Terms of Service; and
- communicate changes to this Privacy Policy or our Terms of Service.
We do not use Institute Content or student data to train unrelated third-party products, and we do not sell Personal Information.
6. How We Share Information; Roles of Institute and Pitthugram
6.1 We do not sell, rent, or trade Personal Information.
6.2 We may share Personal Information with:
- Service providers who help us operate the Service (for example, hosting, email and WhatsApp delivery, bot/abuse-prevention, and analytics providers), bound by confidentiality and data-processing obligations;
- Legal and safety authorities, where required by law, legal process, or to protect the rights, property, or safety of Pitthugram, our Users, or others;
- A successor entity, in connection with a merger, acquisition, or sale of assets, subject to this Policy or a substantially similar one; and
- Any party you direct us to, with your consent.
6.3 Roles. As between Pitthugram and an Institute, the Institute determines what student and academic data is entered into the Service and for what purpose, and is responsible for ensuring it has a lawful basis (including, where applicable, verifiable consent) to provide that data to us. Pitthugram processes such data on the Institute's behalf and in accordance with this Policy and the Terms of Service to operate the Service.
7. Children's and Students' Data
7.1 Some Users of the Service, specifically students, may be under the age of 18 ("children," as defined under the DPDP Act and applicable Indian law).
7.2 Institute Responsibility. The Institute is solely responsible for obtaining any verifiable consent required by applicable law from a child's parent or lawful guardian before entering that child's Personal Information into the Service, and for ensuring that its own notice and consent practices toward students and parents meet applicable legal requirements.
7.3 Our Role. Pitthugram processes student data supplied by an Institute solely to provide the Service to that Institute (for example, to schedule tests, record scores, and generate reports) and does not independently collect children's Personal Information directly from students for marketing or other unrelated purposes.
7.4 We do not knowingly permit the use of children's Personal Information for tracking, behavioral monitoring, or targeted advertising.
7.5 A parent, lawful guardian, or Institute may contact us using the details in Section 13 to raise questions about a student's data processed through the Service; requests to access, correct, or delete such data should ordinarily be directed to the relevant Institute in the first instance, as the Institute controls the underlying records, with Pitthugram providing operational support as needed.
8. Data Retention
We retain Personal Information for as long as the relevant Institute's account is active, and for a reasonable period afterward as needed for legal, accounting, security, or legitimate business purposes, after which it is deleted or anonymized, except where longer retention is required by law.
9. Data Security
We implement reasonable technical and organizational measures designed to protect Personal Information against unauthorized access, alteration, disclosure, or destruction, including the use of automated bot/abuse-prevention tools on public-facing forms. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Data Storage and Transfers
Personal Information may be stored and processed on servers located in India or, where a service provider requires it, outside India. Where Personal Information is transferred outside India, we take steps intended to ensure it continues to receive a level of protection consistent with this Policy and applicable law.
11. Your Rights and Choices
Subject to applicable law, you (or, in the case of a child, your parent or lawful guardian, or the Institute acting on your behalf) may have the right to:
- access the Personal Information we hold about you;
- request correction of inaccurate or incomplete information;
- request erasure of your Personal Information, subject to our legal and operational requirements;
- withdraw consent where processing is based on consent, without affecting the lawfulness of processing before withdrawal;
- opt out of non-essential communications, including WhatsApp notifications; and
- lodge a grievance with us (Section 13) or, where applicable, with the competent data protection authority.
We may need to verify your identity, or the identity of the Institute acting on your behalf, before acting on a request.
12. Third-Party Links and Services
The Service and our website may contain links to, or integrate with, third-party websites or services (for example, WhatsApp, or bot-verification providers). This Policy does not apply to those third parties, and we encourage you to review their own privacy practices.
13. Grievance Officer and Contact Information
In accordance with applicable Indian law (including the DPDP Act), grievances or questions relating to this Privacy Policy or the processing of your Personal Information may be directed to:
Grievance Officer: Janardan Mishra (Grievance Officer, Pitthugram)
Email: grievance@pitthugram.com (or support@pitthugram.com)
Address: Pitthugram, Assotech Business Cresterra, Upper Ground Floor, Tower 2, Plot No 22, Sector 135, Noida, Uttar Pradesh, India
We will endeavor to acknowledge and address grievances within the timelines prescribed by applicable law.
14. Changes to This Policy
14.1 We may update this Privacy Policy from time to time, at our discretion, to reflect changes in our practices, the Service, or applicable law.
14.2 Updated versions take effect upon posting, and the "Last Updated" date at the top of this Policy will be revised accordingly.
14.3 As with our Terms of Service, it is each User's responsibility to review this Policy periodically — we recommend checking it at least once a week. Continued use of the Service after a change takes effect constitutes acceptance of the revised Policy.
15. Governing Law
This Privacy Policy is governed by the laws of India. Disputes relating to this Policy are subject to the jurisdiction described in our Terms of Service (Section 15 — courts at Noida / Gautam Buddh Nagar, Uttar Pradesh).
16. Relationship to Terms of Service
This Privacy Policy is incorporated into, and should be read together with, our Terms of Service. In the event of a direct conflict between this Policy and the Terms of Service on a matter specifically addressed by both, this Policy governs with respect to the handling of Personal Information, and the Terms of Service govern all other matters.