Privacy Policy

Vahini Technologies(“we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website at vahinitech.comand our services, including the handwriting scan tool, dashboard, and subscription plans (collectively, the “Services”).

1. Data Controller

2. Information We Collect

a) Information you provide

• Account information: Name, email address, password, and role (parent, teacher, or school administrator) when you create an account
• Student information: Student name, class/grade, and age group as entered by parents or teachers
• Handwriting images: Photographs of handwritten text uploaded for analysis
• Contact form submissions: Name, email, and message content
• Payment information: Processed by Razorpay; we do not store credit/debit card numbers

b) Information collected automatically

• IP address: Used for anonymous scan rate limiting and security
• Browser type and version, operating system, and device information
• Pages visited, time spent, and referring URLs
• Cookies: Essential cookies for authentication and session management

3. How We Use Your Information

• Provide the Services: Process handwriting images, generate analysis reports, and display results
• Account management: Authenticate users, manage subscriptions, and process payments
• Improve our AI: Use anonymized, aggregated data from scans to train and improve our handwriting analysis models
• Communication: Respond to inquiries, send service updates, and subscription-related notifications
• Security: Detect fraud, prevent abuse, and enforce rate limits
• Legal compliance: Meet obligations under applicable Indian law

4. Children's Data

Our Services are designed for use by parents and teachers on behalf of children. We do not knowingly collect personal information directly from children under 13. Student data (name, class, and handwriting images) is provided and managed by the parent or teacher who creates the account. If you believe a child has provided us personal information without parental consent, please contact us and we will promptly delete it.

5. Data Sharing

We do not sell your personal data. We may share information only in these circumstances:

• Service providers: Razorpay (payments), Google (AI analysis via Gemini API), and hosting providers who process data on our behalf under contractual obligations
• Within a school: Teachers and school administrators within the same school can view scan reports for students enrolled in their school
• Legal requirements: When required by law, court order, or government authority

6. Data Security

We take reasonable measures to protect your data, including:

• SSL/TLS encryption for all data in transit
• Secure password hashing (passwords are never stored in plain text)
• JWT-based authentication with short-lived access tokens
• Role-based access controls (parents see only their children's data)
• Regular security updates on our servers

While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide the Services. Specifically:

• Account data: Retained until you delete your account
• Scan images and reports: Retained for the duration of your subscription; deleted within 90 days of account deletion
• Anonymous scan data:Each scan (anonymous or signed-in) is stored together with request metadata — IP address, approximate location (country/city) derived from our hosting provider Cloudflare, user-agent / browser / device type, screen size, referring URL, and any marketing attribution parameters (utm_*, gclid) — so we can detect abuse, debug issues, and measure where our users come from. Non-authentication cookies set by this site are stored alongside the scan; authentication and CSRF cookies are redacted before storage. These records are retained for the life of the scan.
• Payment records: Retained as required by Indian tax and accounting laws

8. Cookies

We use essential cookies for authentication and session management, and a first-party attribution cookie (vahini_attr) that records the marketing source of your first visit (utm_source,utm_medium, utm_campaign, utm_term,utm_content, gclid, fbclid, and the referring URL first_referrer) for up to 90 days so we can measure which ads and referrals bring real users. We also load Google Analytics / Google Ads tags to count page views and scan conversions; you can block these with your browser’s ad-blocker or opt out via Google’s settings. We do not sell or share your data with third-party advertisers beyond Google’s own measurement services.

9. Your Rights

Under the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (as applicable), you have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (subject to legal retention requirements)
• Withdraw consent: Withdraw consent for data processing at any time by contacting us
• Grievance redressal: Lodge a complaint with us or with the relevant data protection authority

To exercise any of these rights, email us at support@vahinitech.com. We will respond within 30 days.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. We encourage you to review this page periodically. Continued use of the Services after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions or concerns, contact us at: