India Legal Document

Privacy Policy

Effective Date: February 19, 2026 | Last Updated: February 19, 2026

India-focused privacy framework · Notes images and PDF handling policy · AI and OCR transparency · Student data confidentiality safeguards

This Privacy Policy describes how WhiteBoardAI collects, uses, stores, and discloses personal information when you use our website, browser application, and related learning services.

This policy is intended to align with applicable Indian laws, including the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and applicable rules and notifications.

1. Scope and Applicability

WhiteBoardAI provides AI-assisted learning and exam preparation features, including topic learning, Socrative mode, Notes, and Subject Workspace. For personal data covered by this policy, WhiteBoardAI acts as a Data Fiduciary or equivalent controller role under applicable law.

2. Information We Collect

We collect information in the following categories:

  • Account information: name, email address, login details, role, and profile preferences.
  • Service and learning inputs: prompts, chat messages, selected subjects, session history, and generated outputs.
  • Upload content: notes images, screenshots, handwritten notes, PDF files, extracted text, and related metadata.
  • Billing and transaction information: subscription status, plan, and payment transaction details shared by our payment processors.
  • Technical and usage data: device type, browser type, IP address, pages visited, session telemetry, and error logs.
  • Information from third parties: single sign-on providers, institutions, and user referrals where applicable.

Please do not upload unnecessary sensitive personal data (for example, government ID numbers, account passwords, or health records) unless explicitly required for a product workflow.

3. How We Use Information

  • Deliver core product functionality and account management.
  • Process Notes and Workspace uploads for OCR and study features.
  • Generate AI responses, summaries, quizzes, and guided learning.
  • Manage subscriptions, billing, and service communications.
  • Detect abuse, unauthorized access, and policy violations.
  • Comply with legal obligations and respond to lawful requests.
  • Improve product quality, reliability, and safety analytics.

We may use aggregated or de-identified datasets for service development, reporting, and performance analysis.

4. Cookies and Tracking Technologies

We use cookies and similar technologies for authentication, security, preference storage, and usage analytics. You may control cookies through browser settings. Disabling essential cookies may affect functionality.

Our services may not respond to browser do-not-track signals in all environments.

5. AI and OCR Processing

Our services process user content using internal systems and approved third-party AI and OCR service providers. This may include transmission, temporary storage, parsing, classification, and generation of outputs.

AI-generated content may be inaccurate, incomplete, or outdated. You are responsible for reviewing outputs before relying on them for exams, assignments, or professional decisions.

6. Notes and Workspace Files

Notes images, screenshots, handwritten uploads, and Workspace PDFs are treated as private to your account by default. We do not intentionally publish or expose your private study files to other users.

We do not share your uploaded notes or subject PDFs with other users unless you explicitly initiate sharing functionality, or where disclosure is required for legal compliance, safety, or core service operations.

You must upload only content you own or are authorized to use. You are solely responsible for ensuring that uploaded PDFs, screenshots, and notes comply with copyright, institutional policy, and applicable law.

7. Retention and Deletion

We retain personal data for as long as necessary for service delivery, compliance, dispute handling, fraud prevention, and security. You may request deletion, subject to legal and operational retention duties.

8. Disclosure of Information

We do not sell personal information for monetary consideration.

We may disclose data to:

  • Cloud, hosting, analytics, and infrastructure providers.
  • AI and OCR subprocessors required to provide requested features.
  • Payment processors and billing service providers.
  • Affiliates, advisors, auditors, and legal consultants.
  • Regulators, law enforcement, or courts when legally required.
  • A successor entity in a merger, acquisition, restructuring, or sale.

Where vendors process personal data for us, we require contractual safeguards appropriate to the nature of the processing.

9. Data Security

We use reasonable technical and organizational controls including encryption in transit, access controls, monitoring, and audit logging. No internet transmission or storage environment is fully risk-free.

10. Children's Information

WhiteBoardAI is designed for students, including minors. Where required by law, we rely on parent or legal guardian consent and/or institution authorization for processing children's data. If you believe a minor shared data without proper authorization, contact us for review.

11. Privacy Rights (India)

Subject to applicable law, you may request to:

  • Access and obtain a summary of personal data processed.
  • Correct, update, or erase inaccurate or outdated information.
  • Withdraw consent where consent is the legal basis.
  • Raise grievances and seek redressal.
  • Nominate another person to exercise rights where permitted.

12. Cross-Border Transfers

Data may be stored or processed in jurisdictions outside India where necessary for service operations. We apply transfer safeguards and act in line with applicable Indian legal requirements.

13. Third-Party Services and Links

Our services may include links or integrations with third-party services. Their privacy practices are governed by their own policies, not this Privacy Policy.

14. Policy Changes

We may update this policy from time to time. Material changes will be communicated through the platform or by other appropriate means.

15. Contact and Grievance Redressal

For privacy requests, grievances, or data protection concerns, contact:

For faster handling, use the subject line: Grievance - Privacy.

We aim to acknowledge valid grievance requests promptly and resolve them within reasonable timelines under applicable law.

Additional details such as registered office address and designated Grievance Officer may be published in this section as required.

General contact: support@whiteboardai.com