This Privacy Policy describes how GradeLab Infotech LLP ("we," "us," or "our") collects, uses, shares, and secures the personal data you provide. It also describes your choices regarding use, access, and changes to your personal data. Data collected through our service will be limited solely to the purpose of providing the service for which you (the Client) have engaged GradeLab. We refer to our platform and website collectively as the "Site."
This Privacy Policy applies to GradeLab Infotech LLP and all services operated under the GradeLab brand. This policy describes how GradeLab collects, uses, shares, and secures the personal data you provide. When third-party companies provide related services to support our platform, such as cloud hosting, authentication, or document processing, we ensure that these third-party companies meet our security standards and those of applicable legislation through comprehensive Data Processing Agreements.
When you create an account with us, or when a student has their work processed by GradeLab, we process personal data (such as name, email address, role, and institution) so that we can correctly administer your account and provide you with the best service experience.
All personal data we process is directly linked to a specific purpose, such as:
Your Control: At any time, you can access, update, rectify or erase any personal data by logging into your account and clicking "Account Settings" or "Privacy Controls," or by contacting Customer Support at info@gradelab.io.
We endeavor to keep your personal data safe and secure at all times. Personal data is processed in various locations depending on the specific service and your institution's preferences.
Infrastructure Overview
Security Safeguards
Document Processing: When a document is submitted to GradeLab, it is processed using our proprietary grading and assessment technology, supported by AI-powered optical character recognition (OCR) for handwritten and scanned content. GradeLab does not maintain a repository of student papers for comparison purposes. Each institution determines data retention policies through their administrator settings, and we can remove student data from our systems at the request of a school administrator or student (as permitted by institutional policy).
GradeLab serves a global community of educators and students, whose views on data privacy may differ significantly. Our platform and services, as well as our privacy policies, are regularly audited and inspected by both employees and external consultants to ensure that we meet, and exceed where possible, privacy expectations and requirements. GradeLab conducts periodic compliance reviews through our Sprinto continuous compliance platform to verify that this Privacy Policy is accurate, comprehensive, prominently displayed, lawful, complete, implemented, and accessible. Any employee who violates this Privacy Policy will be subjected to disciplinary action.
Where necessary, for data transfers outside the EEA, we utilize the Model Contractual Clauses (Standard Contractual Clauses). In each case, we put in place appropriate technical and organizational measures to protect personal data. All our third-party service providers have executed comprehensive Data Processing Agreements with Standard Contractual Clauses where applicable.
Due to the ever-changing nature of legislation around data privacy, we reserve the right to make lawful changes as needed and recommend that you periodically check this Privacy Policy to see if there have been any new developments or changes. As an India-based company serving global customers, we comply with the Digital Personal Data Protection Act (DPDPA) in India, GDPR for European users, and other applicable international data protection regulations.
Because we provide education services, we are vocal advocates for safeguarding student data and privacy and want to make sure that parents, educators, and schools know this. We are committed to protecting the privacy rights of students and educators and maintain GDPR compliance through continuous monitoring and regular audits.
When an institution's administrator or instructor creates an account with us, we ask for their personal data such as name, email, institution name, and role, so that we can correctly administer their account and provide them with the best service.
The type of information we request is connected to a specific purpose, namely to:
When you submit documents for grading or assessment, we may use AI-powered services for optical character recognition (OCR), handwriting recognition, and document analysis. These AI services process your documents temporarily and in real-time. Documents are held only for the duration necessary for processing and are automatically deleted within 24 hours from AI processing systems. We do not use student documents to train AI models without explicit consent.
At any time, customers may access, correct, change completely or anonymize the personal data that you have provided us by logging in to your account, clicking "Account Settings" or "Privacy Controls," and using the data export function to download your data in machine-readable format (JSON/CSV). If you would like for us to make changes for you, please email info@gradelab.io. We respond to requests within 30 calendar days.
We may disclose your personal data in order to comply with a subpoena, court order, or similar legal process or government request when we are required by law to do so. If GradeLab is involved in a merger, acquisition, or sale of all or a portion of its assets, you will be notified via email and/or a prominent notice on our website. We will only disclose your personal data to a third party with your prior consent or as required by law.
GradeLab and its partners may use cookies or similar technologies to analyze trends, administer the Site, track users' movements around the Site, and gather demographic information about the user base as a whole. We do not use cookies for profiling or targeted advertising. You can control whether or not cookies are allowed through your browser.
As is true of most websites, we gather certain information automatically and store it in log files. This information may include internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and/or clickstream data. Log data is retained for 12-24 months for security and compliance purposes.
GradeLab uses RB2B tracking technologies on our website to enhance user experience, understand visitor behavior, and improve our services. When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors (including RB2B) to track your activities and interactions on our website, associate these activities with other personal information, link your website visits with your email address or other identifiers, and provide analytics and insights. You may opt out of receiving this advertising by visiting https://app.retention.com/optout. For GDPR opt-out, visit https://www.rb2b.com/rb2b-gdpr-opt-out.
GradeLab works with trusted third-party service providers to deliver our services, including Cloud Infrastructure Providers, Authentication Services, AI Processing Partners, Communication Platforms, and Analytics Services. All third-party service providers are bound by Data Processing Agreements that include Standard Contractual Clauses where applicable. We do not sell, trade, or rent your personal data to third parties for marketing purposes.
Security is fundamental to our operations. We employ multiple layers of protection including encryption of all data in transit and at rest, strict role-based access controls and multi-factor authentication, Web Application Firewalls and DDoS protection, continuous security monitoring and threat detection, regular security awareness training for all staff, established incident response procedures, and regular security audits. While we implement comprehensive security measures, no system is completely immune to threats. We encourage users to maintain strong passwords and report any suspicious activity immediately.
We are committed to maintaining the accuracy, completeness, and reliability of the personal data we process. We implement regular data validation and cleansing processes, user verification procedures for account creation, automated checks for data consistency, and manual review processes for sensitive data. We collect only the data necessary for our legitimate business purposes. You have the right to receive your data in a structured, commonly used format, and to transmit that data to another controller where technically feasible.
This Privacy Policy may be updated periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date, notify users via email where applicable, and post prominent notices on our website. Your continued use of our services after changes become effective constitutes acceptance of the updated policy.
As an organization serving users in the European Economic Area (EEA), we are committed to full compliance with the General Data Protection Regulation (GDPR). Under GDPR, you have the following rights: Right to Information, Right of Access, Right to Rectification, Right to Erasure, Right to Restriction, Right to Data Portability, Right to Object, and Rights Related to Automated Decision-Making. We process your data based on Contract, Legitimate Interest, Legal Obligation, and Consent. Our Data Protection Officer can be contacted at privacy@gradelab.io. For data transfers outside the EEA, we implement appropriate safeguards including Standard Contractual Clauses.
For privacy-related inquiries or to exercise your rights, please contact:
Privacy Team
Email: privacy@gradelab.io
Address: C-1201, Casa Vyoma, Bh Alphaone Mall, Vastrapur, Jodhpur Char Rasta, Ahmedabad, Gujarat, IN 380015
Response Time: We aim to respond to all privacy inquiries within 30 calendar days.
This Privacy Policy is provided in English. In case of any discrepancies between different language versions, the English version shall prevail.