Privacy Policy
Effective date: 4 August 2026
SonaDot Technologies Pvt Ltd ("SonaDot", "we", "us") builds Bhaskara, a K-12 learning platform used by schools, teachers and students in India. This policy explains what we collect, how we use it, and the choices you have. It is written to align with India's Digital Personal Data Protection Act, 2023 (DPDP Act).
1. Who this policy applies to
- Visitors to www.sonadot.com (this website).
- School administrators, teachers, parents and students using app.sonadot.com (the Bhaskara application).
- Users who contact us via forms, email, phone or LinkedIn.
2. Data we collect
- From website visitors: pages visited, device and browser type, referrer, and any details you submit through our contact or demo forms (name, role, school, email, phone, message).
- From schools: school name, address, board affiliation, class and division roster, teacher and admin contact details.
- From students (minors' data): name, class, division, unique student ID, gameplay events, XP, AI-verdict scores. We do not collect biometrics, financial data or precise location from students.
- From teachers and admins: name, work email, role, activity within the admin dashboard.
- Automatically: log data (IP, timestamp, endpoint), analytics events (via Google Analytics 4 on marketing pages).
3. How we use it
- To operate Bhaskara — matching students to their class, saving scores, computing AI verdicts, showing leaderboards.
- To provide the school admin dashboard and reports.
- To respond to enquiries and schedule demos.
- To measure marketing effectiveness (aggregate, no student PII on marketing pages).
- To meet legal and security obligations.
4. Protections for minors' data
- Student accounts are provisioned by the school as Data Fiduciary. We rely on the school's parental consent processes under DPDP.
- No behavioural advertising, tracking or profiling of students for marketing purposes.
- Student data is used solely for educational delivery, in-app analytics and safe leaderboards scoped to the student's school.
- We do not sell student data. Ever.
5. Where your data is stored
Bhaskara application data is hosted on Swaraj Cloud, an India-resident cloud provider. Backups are encrypted at rest. In-transit data uses TLS 1.2+.
6. Retention
We retain student and school data for as long as the school's contract with us is active. On termination, data is exported to the school on request and then deleted from active systems within 30 days, and from backups within 90 days.
7. Your rights (as a Data Principal)
Under DPDP, you can request access, correction, and erasure of your personal data. For students, these requests are made through the school (as Data Fiduciary) or through the child's parent/guardian. Submit requests to info@sonadot.com.
8. Third parties
- Google Analytics 4 — aggregate marketing analytics on www.sonadot.com (no student data).
- Web3Forms — routing of website contact-form submissions to our inbox.
- Swaraj Cloud — infrastructure hosting.
9. Data breach
In the event of a data breach affecting personal data, we will notify affected Data Principals and the Data Protection Board of India in accordance with the DPDP Act's timelines.
10. Grievance officer
Grievance Officer: Data Protection Lead, SonaDot Technologies Pvt Ltd
Email: info@sonadot.com
Phone: +91 97675 49682
11. Changes to this policy
We may update this policy from time to time. Material changes will be notified to school administrators via email.