Content

Privacy Policy

This Privacy Policy explains how BodhiVerse Pvt Ltd (”Company”, “we”, “us”, or “our”) collects, uses, processes, stores, discloses, and protects personal information when individuals access or use our product, platform, application, website, or related service. This Privacy Policy is issued in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023.

By accessing or using any of the company product or service, users indicate their acceptance of the terms stated in this Privacy Policy.

Context and Terminology

BodhiVerse Pvt Ltd (”Company”, “we”, “us”, or “our”) builds digital products designed to support secure, authenticated, technology enabled workflows for educational institutions, enterprises, and other organisational users. These may include examination systems, attendance systems, content delivery systems, learning tools, or any other digital solutions offered now or in the future.

“Products” refers to all digital tools, platforms, software applications, systems, features, and modules developed, owned, or operated by BodhiVerse Pvt Ltd, whether web based, mobile based, device based, cloud hosted, or delivered through any other digital medium, including current and future offerings.

“Services” refers to all functionalities, processes, workflows, features, and support activities provided through BodhiVerse Products, including access, use, authentication, content management, assessment or attendance management, security features, analytics, integrations, and any related operational activity.

The term “User (Data Principal)” refers to any individual who accesses or uses our product or service. Depending on the product in use, users may include students, instructors, administrators, employees, or any individual authorised to use the platform.

This Privacy Policy applies to all modes of access including websites, mobile applications, browser based portals, API integrations, SDKs, and any other interface provided by the company.

Personal Information We Collect

We collect only such personal information as is necessary for providing, securing, and improving its digital services.

When a user creates an account on any BodhiVerse product, the system may collect personal information such as

Name,
email address,
phone number,
institute,
department subject(s)
IP address,
telephone number,
log data,
any information that you choose to share with us, by means of email, website form or survey

When an organisation, instructor, or administrator creates content, workflows, or processes within any BodhiVerse product, the system stores metadata and relevant information such as

course details,
assessment content,
attendance templates,
analytics configurations,
and
any supporting material required to operate the service.

When users interact with features that require identity verification or integrity checks (such as secure assessments, attendance verification, or device authentication), the system may collect device and environment information such as OS version, device model, IMEI, MAC address, IP address, WiFi access point scan lists, GPS location when necessary for a product specific feature, and selfie images where identity confirmation is required. Caller identification is never accessed.

When a user submits responses, content, attendance, or any form of data through our products, the system stores those submissions, timestamps, and results as required for product functionality.

Certain BodhiVerse products may use controlled network environments, including a secure VPN tunnel, solely to maintain a controlled network environment and prevent notifications or external interference. No personal or sensitive information is collected through the VPN, and no traffic from other applications is intercepted, redirected, or manipulated.

How We Use Personal Information

Personal information collected across our products is used exclusively to operate, deliver, authenticate, and secure the respective services. Use cases include

academic administration,
secure examination management,
attendance verification,
identity authentication,
prevention of impersonation or misconduct and maintain technical security,
summarisation of assessment performance,
communication of critical system updates,
maintenance or improvement of our product functionality,
to analyze your use of our products,
to fulfill any contractual agreements, including protecting our rights, our property and security,
and to fulfill requirements to comply with applicable laws and incident reporting.

We do not use personal information for advertising, profiling, or unrelated commercial purposes.

Legal Grounds for Processing

We process personal information on specific legal grounds.

Fulfillment of Contract: Processing is necessary for the fulfillment of contractual obligations in accordance with agreements between educational institutions and the company.
Legitimate Interest: Certain processing activities are supported by legitimate interests such as operating, maintaining, improving, and securing BodhiVerse platforms, responding to user requests, and ensuring integrity and security across all our services. Users have the right to object to processing that is based on legitimate interest. Upon receiving an objection, the company will explain the basis on which its legitimate interests have been balanced with the rights of the individual.
Compliance with Law: Third, processing may be required to comply with applicable laws, regulatory mandates, or lawful orders. Consent: Certain data categories, including GPS location or identity verification images, may be collected with user consent where applicable. Users may withdraw consent unless processing is essential for the functioning or integrity of a specific service.

We do not sell personal information to any third party.
We share personal information only in the following situations:

Third party service providers: Personal information may be shared only with third party service providers that support hosting, communication, infrastructure, analytics, or email delivery services, and such service providers operate under confidentiality agreements and are permitted to use the information only for providing contracted services to the company. These service providers act solely on our instructions and have no independent right to process or use personal information.
Legal obligations: Information may also be disclosed when required under Indian law, in response to lawful requests from government authorities, courts, or regulatory bodies, or when necessary to protect the rights, property, or safety of the company, its employees, users, or the public.
De-identified or aggregated data: The company may also use/share de-identified or aggregated information that cannot be used to identify any individual, for research, analytical, or operational purposes.

Legal Requests and Protection from Harm

We reserve the right to access, retain, or disclose personal information where required to comply with legal obligations, investigate potential misuse, enforce contractual terms, prevent fraud, or protect individuals from harm. Any such disclosure will be conducted strictly in accordance with applicable law. To the extent permitted by law, we will notify affected users before disclosing personal information in response to a legal request, unless prohibited from doing so.

Cookies and Similar Technologies

Certain BodhiVerse websites or web components may use cookies, beacons, or similar technologies to enhance user experience, maintain secure sessions, and support diagnostics or analytics. Users may adjust browser settings to manage cookies. Additional details, where applicable, are available in the Cookie Policy.

User Rights

In accordance with applicable Indian law, users may request access to their personal information, seek correction of inaccurate or incomplete data, withdraw consent for processing where consent is the legal basis, object to processing based on legitimate interest, or request deletion of their personal information subject to legal or contractual retention requirements.

Users may also exercise their rights through a nominated individual as notified under the Digital Personal Data Protection Act, 2023.

Requests may be submitted to admin@bodhiverse.co.in, and we will respond within a reasonable time as required by law.

Data Retention

Personal information is retained only for as long as necessary to fulfill academic, legal, administrative, or security related obligations. Once information is no longer required, it is securely deleted or irreversibly anonymised. Anonymised records may be retained for analytical, research, or academic integrity purposes.

Change of Control

If the company undergoes a merger, acquisition, restructuring, or other change of control, personal information may be transferred to the succeeding entity for continued provision of services. Users will be informed if their information will be used in a manner inconsistent with this Privacy Policy and will be provided appropriate choices in such situations.

Changes to This Privacy Policy

The company reserves the right to modify or update this Privacy Policy at its discretion. Any significant changes will be communicated through product interfaces, by email, or through any other appropriate method. If any modification requires renewed user consent, such consent will be obtained before the revised policy takes effect. If users do not agree with the revised policy, they may discontinue use of our products or exercise their rights as applicable.

Contact Information

For questions, concerns, or requests regarding this Privacy Policy or the handling of personal information, users may contact: Email: admin@bodhiverse.co.in We take all privacy related concerns seriously and will address them within a reasonable time as required under Indian law.