Privacy Policy

This Privacy Policy explains how Merethion (OPC) Private Limited (One Person Company), CIN U62011HR2026OPC149002, registered office Unit No. 309-A, 3rd Floor, Tower-A SAS Tower, Sec-38, Gurgaon, Sadar Bazar, Gurgaon – 122001, Haryana, India (“Merethion”, “we”, “us”) collects, uses, shares and protects personal data on merethion.com and the Akriva™ platform at akriva.ai (the “Services”). Akriva™ is a brand of Merethion. We are the Data Fiduciary for the personal data described here, and we process it under Indian law, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Information Technology Act, 2000. We keep this in plain language.

1. Whose data we process

• Institute users — owners and faculty who create and run institute accounts.
• Students — students enrolled by their institute, and students who sign up with us directly for the free test series or a Student plan. Many students are under 18.
• Parents and guardians — contact details provided for sharing reports, and parents or guardians who buy a Student plan or consent for a child.
• Visitors — people who browse our websites or write to us.

2. What we collect

• Account data — name, email address, role, institute name and details.
• Student data — name, roll number, class or batch, date of birth or access PIN, and test responses, timing, marks and analytics.
• Parent contact data — a parent’s phone number, if the institute adds it, for sharing reports.
• Payment data — plan, transaction references and invoices. Card, UPI and banking credentials are handled by our payment gateway partner, IDFC FIRST Bank; we never see or store them.
• Technical data — device and browser information, IP address, and the cookies needed for sign-in, security and test integrity (for example, tab-switch detection during a test).
• Agreement records — which policies you agreed to, and when.
• Communications — messages you send us.

3. Why we use it

• To provide the Services: generate papers, conduct tests, and produce analysis and reports for students, parents and teachers.
• To run accounts, billing and support, and to keep records the law requires (for example, tax records).
• To secure the Services, protect test integrity and prevent abuse.
• To improve the Services, using aggregated or de-identified information.
• To send service messages. Marketing messages are sent only with consent, and you can opt out at any time.

We do not sell personal data, we do not show advertising, and we do not use student data for advertising. Student performance data is visible only to the student, their institute, and the parents with whom a report is shared.

4. AI and your data

Akriva uses AI systems to draft and check exam questions. They work from syllabus and question content only. Student personal data is never sent to any AI provider, and we never use Customer Data or student data to train AI models. Questions and material an institute writes or uploads are private to that institute.

5. Where data is stored

Student data and account data are stored in India, in the Mumbai region of our database and hosting providers, and are protected in transit with encryption. Question content sent to AI providers (section 4) contains no personal data and may be processed outside India.

6. Who we share data with

Only with service providers who help us run the Services, under contracts that protect the data: cloud hosting (Vercel), database and sign-in (Supabase), payment processing (IDFC FIRST Bank), email delivery, and AI providers for question content only. We also share data with professional advisers, or with authorities where the law requires it.

7. Children

• When an institute enrols a student, the institute is responsible for obtaining verifiable consent from the student’s parent or guardian before giving us the student’s data.
• When a student under 18 signs up with us directly, we ask for confirmation that a parent or guardian agrees, and a paid Student plan must be bought by a parent or guardian.
• We collect only the student data needed to run tests and produce reports, and we never track children for advertising.

8. How long we keep data

• We keep data while the account or plan is active.
• When a plan ends, you can export your papers and results for 30 days; after that the data is deleted or irreversibly anonymised.
• When you ask us to delete your data, we do so within 30 days.
• Records the law requires us to keep, such as invoices, are kept for the period the law sets.
• Institutes can archive or delete student records from their dashboard at any time.

9. Security

We protect data with measures suited to its nature, including encryption in transit, access controls, role-based permissions and separation between institutes. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.

10. Cookies

We use cookies that are needed for sign-in, sessions and security, and for basic usage measurement. You can control cookies in your browser, but the Services may not work without the essential ones.

11. Your rights

Under the DPDP Act you may ask for a summary of the personal data we hold about you, ask us to correct, complete or erase it, withdraw consent where we rely on it, and nominate someone to act for you in case of death or incapacity. For students, these rights are usually exercised through the institute or a parent or guardian. Write to us at hello@akriva.ai; we acknowledge within 24 hours and respond within 15 days.

12. Grievance Officer

Shristi Mishra, Director, Merethion (OPC) Private Limited — hello@akriva.ai, phone , at the registered office above. We acknowledge every grievance within 24 hours with a reference number and resolve it within 15 days. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.

13. Changes to this policy

We may update this policy. We will tell account holders of a material change by email or in the Services before it takes effect, and the “Last updated” date will change.