This policy applies to markro.ai and markrointelligence.com (web and PWA). Last updated July 2026. Effective from July 2026.
1Who We Are
Markro is an AI-powered educational platform for CBSE (grades 4 to 12) and TNPSC preparation: learning paths, AI chat, virtual tests, interview simulations, and adaptive practice. Because many of our users are school students, the Minor Users section (Section 4) applies with particular force.
Registered Company: Markro Intelligence Private Limited
CIN: U85499TN2026PTC192847
Registered Office: No.789/10, Angalamman Koil Street, Kuvathur, Cheyyur, Kanchipuram, 603305, Tamil Nadu, India
Incorporated: 5th May 2026
For privacy matters, see Section 13 (Grievance Officer).
2Data We Collect
We collect the following categories of personal information:
Account & profile data
| Data type | Examples | Sensitivity |
|---|---|---|
| Identity | Full name, email address | Medium |
| Profile | Grade, avatar, bio, timezone | Low |
| Account identifiers | Unique user ID at registration | Medium |
| Subscription | Plan type, billing status, gateway subscription ID | Medium |
Learning & usage data
| Data type | Examples | Sensitivity |
|---|---|---|
| AI interactions | Chat, voice, document uploads | High |
| Tests & assessments | Answers, scores, AI feedback | High |
| Gamification | XP, streaks, leaderboard rank | Low |
| Notebook | Practice notes you create | Medium |
Technical data
- Device type, browser, operating system
- IP address and approximate location
- Session data and error logs (via our error monitoring provider)
- Request IDs for debugging
3How We Use Your Data
- Providing the service: learning paths, AI responses, tests, simulations
- AI personalisation: difficulty, recommendations, pace
- Account management: authentication, subscriptions, support
- Safety and security: abuse, fraud, platform integrity
- Error monitoring: anonymised bug reports
- Legal compliance: DPDP Act 2023 and other Indian laws
We do not sell your data or use it for advertising profiling.
AI training data
We do not use your chat, voice, uploads, or test answers to train underlying AI models (adults or minors). Aggregated, anonymised analytics may improve product features without identifying you.
Legal basis (DPDP Act 2023)
| Purpose | Legal basis | DPDP reference |
|---|---|---|
| Core service delivery | Consent | Sec 4(1)(a), Sec 6 |
| AI personalisation | Consent | Sec 4(1)(a), Sec 6 |
| Account & payments | Consent | Sec 4(1)(a), Sec 6 |
| Safety & security | Consent | Sec 4(1)(a), Sec 6 |
| Legal disclosure duties | Legitimate use | Sec 7(d) |
| Court / judicial orders | Legitimate use | Sec 7(e) |
Consent is collected during onboarding (Section 6). You may withdraw via the Grievance Officer (Section 13).
4Minor Users (Under 18)DPDP Sec 9
Parental consentDPDP Sec 9(1)
Verifiable parent/guardian consent is required before processing a minor's data:
- Student email verified via OTP
- Parent/guardian verified via secure email link
- Explicit consent confirmed in the consent flow
Parents or guardians may:
- Review the child’s data
- Request correction or deletion
- Withdraw consent (contact Grievance Officer)
RestrictionsDPDP Sec 9(2) to (3)
- No behavioural tracking or targeted ads at children
- No processing likely to harm a child’s well-being
- Leaderboards use display names only, not full names
Accounts without consent within 14 days are paused; data deleted if consent is not provided.
5Service Providers
We use vetted data processors to host Markro and deliver features. We do not publish our internal technical stack in this public policy. Below are categories of sharing, not vendor names.
A current list of material sub-processors is available on request from privacy@markro.ai.
| Category | Purpose | Data involved |
|---|---|---|
| Hosting & storage | Run the app; store account & learning data | Profile, progress, tests, uploads, consent records |
| Authentication | Sign-in and sessions | Email, name, IDs, session tokens |
| AI tutoring & language | Chat, voice, Tamil/English | Messages, voice, documents |
| Search & retrieval | Match study material in-app | Text for search (not used to train on your identity) |
| Interview simulation | Mock panels & delivery feedback | Voice and transcribed answers |
| Payments | Subscriptions | Payment data at partner; we keep plan status & reference IDs |
| Error monitoring | Stability | Anonymised logs, device/browser info |
6Cross-Border Data TransfersDPDP Sec 16
Primary account and learning data is kept in India. Some feature categories below may process limited data outside India:
| Category | Typical residency |
|---|---|
| Hosting, database & authentication | India (primary) |
| Payments | India |
| Indian-language AI (voice & text) | India where available |
| General AI tutoring & embeddings | May include countries outside India |
| Interview simulation analysis | May include US or other regions |
| Error monitoring | May include US or other regions |
7Cookies & Tracking
Strictly necessary technologies only: no advertising or behavioural tracking cookies.
| Type | Purpose | Duration |
|---|---|---|
| Auth tokens (sessionStorage) | Logged-in state | Session: cleared when tab closes |
| Error tracking | Anonymised stability data | Up to 30 days |
| PWA cache | Offline / faster loads | Until cleared manually |
We use Meta Pixel on markrointelligence.com for ad measurement (PageView and signup clicks). The Markro app at markro.ai also uses Meta Pixel for registration events. We do not use Google Analytics on these sites.
8Data Storage & Security
Where data is stored
Secure cloud infrastructure with primary hosting in India.
Security measures
- Token-based authentication on every request
- HTTPS everywhere
- Security headers including Content Security Policy
- API rate limiting
- Secrets in secure cloud configuration (not in code)
- MFA where enabled on your account
- Signed payment webhooks
- Errors do not expose internal system details
- Evaluation logs redact sensitive question content
Breach notificationDPDP Sec 8(6)
We will notify the Data Protection Board and affected users as required under Section 8(6) of the DPDP Act.
9Your Rights
| Right | Meaning | DPDP |
|---|---|---|
| Access | Summary of data we hold and processing | Sec 11 |
| Correction & erasure | Fix or delete unnecessary data | Sec 12 |
| Grievance | Complaint to our Grievance Officer | Sec 13 |
| Nominate | Someone to act if you cannot | Sec 14 |
| Withdraw consent | May affect features | Sec 6(4) to (6) |
| Escalate to Board | If unresolved in 30 days, to Data Protection Board when operational | Sec 19 to 28 |
We respond within 30 days.
10Payments
PCI-DSS compliant Indian payment gateway. We may change partners with notice.
- Subscription status (active, inactive, trial)
- Gateway subscription reference ID
- Usage counters for plan limits
11Data Retention
- Account data: while active + 90 days after deletion request
- AI content: subscription period; deleted within 30 days of deletion request
- Tests: 12 months after test date or until deletion, whichever is earlier
- Error logs: up to 30 days
- Payment records: 7 years (Indian law), then deleted
Personal data removed within 30 days of deletion, except statutory payment records.
12Policy Updates
Non-material changes
Clarifications: updated policy + in-app notice.
Material changes
Significant rights or processing changes require explicit consent before taking effect. Minors: fresh parental consent where required (Section 9).
13Grievance OfficerDPDP Sec 13
Grievance Officer
Name: Medepalli Tanush
Designation: CEO, Markro Intelligence Private Limited
Email: privacy@markro.ai
Response: Within 30 days
Urgent security: email ceo@markro.ai with subject SECURITY: URGENT.
Governed by laws of India. Courts in Tamil Nadu have exclusive jurisdiction.