Privacy Policy
Last Updated: November 17, 2025
At Gyaata, accessible from https://gyaata.tech, your privacy is one of our top priorities. This Privacy Policy document outlines the types of information we collect, how we use it, and the measures we take to protect your data. We are committed to ensuring that your personal information is secure and used responsibly.
We comply with the Digital Personal Data Protection (DPDP) Act, 2023, along with GDPR and CCPA, and all other applicable privacy laws from all jurisdictions. Your trust is important to us, and we are dedicated to maintaining the highest standards of data protection.
Who We Are
Understanding Gyaata and our mission
Our website address is: https://gyaata.tech
Gyaata is an educational technology platform designed to help students preparing for competitive exams like UPSC, NEET, SSC, IBPS, and others. We provide AI-powered learning tools including document analysis, flashcard generation, spaced repetition systems, and personalized study recommendations.
Our primary goal is to enhance learning retention and help students master their study materials efficiently. We take your privacy seriously and are committed to protecting your personal information while delivering the best possible learning experience.
What Personal Data We Collect and Why
Information we gather to provide our services
Account Information
When you create an account on Gyaata, we collect your name, email address, and authentication credentials (if you sign up with email/password). If you sign in with Google OAuth, we receive your basic profile information including name and email address from Google.
Why we collect it: To create and manage your account, provide personalized learning experiences, and communicate important updates about our services.
Study Materials and Documents
You may upload PDFs, textbooks, notes, and other study materials to our platform. These documents are processed by our AI systems to generate summaries, flashcards, and questions. You warrant that you possess all necessary rights, licenses, and consents to upload these Study Materials. You retain full ownership of your uploads. Gyaata acts solely as a processor and does not claim ownership of your content.
Why we collect it: To provide our core services including document analysis, AI chat functionality, summary generation, and personalized study recommendations. Your uploaded materials are stored securely and are only accessible to you.
Learning Data and Progress
We track your learning activities including flashcard reviews, quiz performance, study streaks, topics studied, and time spent on various features. This helps us provide personalized recommendations and analytics.
Why we collect it: To implement spaced repetition algorithms, track your progress, identify weak areas, and provide meaningful analytics that help you improve your learning outcomes.
Usage Information
We automatically collect certain information when you use Gyaata, including your IP address, browser type, device information, pages visited, features used, and timestamps of your activities.
Why we collect it: To analyze platform usage, improve our services, troubleshoot technical issues, and ensure security of our platform.
Cookies and Tracking Technologies
How we use cookies to enhance your experience
Like most websites, Gyaata uses cookies to enhance user experience and maintain session information. Cookies are small text files stored on your device that help us recognize you and remember your preferences.
Essential Cookies
These cookies are necessary for the platform to function properly. They enable core features such as user authentication, security, and session management. These cookies last for the duration of your session or up to 30 days if you select "Remember Me."
Analytics Cookies
We use analytics cookies to understand how users interact with our platform. This helps us identify areas for improvement and optimize user experience. These cookies collect aggregated, anonymized data about page views, feature usage, and user flows.
Preference Cookies
These cookies remember your settings and preferences, such as display options, notification preferences, and study goals. They help provide a personalized experience tailored to your needs.
You can control cookies through your browser settings. However, disabling certain cookies may limit your ability to use some features of Gyaata.
Data Storage and Security
How we protect your information
We implement industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. This includes:
- Encryption of data in transit using HTTPS/TLS protocols
- Encryption of sensitive data at rest in our databases
- Secure authentication mechanisms including OAuth 2.0
- Regular security audits and vulnerability assessments
- Access controls limiting employee access to personal data
- Secure cloud infrastructure with AWS (Amazon Web Services)
Your uploaded study materials and personal documents are stored securely and are only accessible to you through your authenticated account. We do not share your documents with third parties or use them for any purpose other than providing our services to you.
How Long We Retain Your Data
Our data retention policies
We retain your personal information for as long as your account is active or as needed to provide you with our services. Specific retention periods include:
- Account Information: Retained for the duration of your account plus 90 days after account deletion
- Study Materials: Retained until you delete them or close your account
- Learning Progress Data: Retained for the duration of your account to provide continuous learning analytics
- Usage Logs: Retained for up to 12 months for security and troubleshooting purposes
You can request deletion of your data at any time by contacting us or using the account deletion feature in your settings. Upon deletion, we will remove your data within 30 days, except where we are required to retain it for legal, tax, or regulatory purposes.
Your Rights Over Your Data
What you can do with your information
You have the following rights regarding your personal data:
- Access: You can request a copy of all personal data we hold about you
- Correction: You can update or correct your personal information through your account settings
- Deletion: You can request deletion of your account and associated data at any time
- Export: You can request an export of your data in a portable format
- Objection: You can object to certain processing of your data
- Restriction: You can request restriction of processing your data in certain circumstances
To exercise any of these rights, please contact us at gyaata.ai@gmail.com. We will respond to your request within 30 days.
Third-Party Services
External services we work with
Gyaata uses certain third-party services to provide and improve our platform:
Authentication Services
We use Google OAuth for authentication. When you sign in with Google, Google's privacy policy applies to the information they collect. We only receive your basic profile information (name and email) necessary to create your account.
Cloud Infrastructure
We use Amazon Web Services (AWS) to host our platform and store data. AWS complies with international security standards and maintains SOC 2 Type II certification. Your data is stored in secure AWS data centers with encryption at rest and in transit.
We carefully select third-party service providers who maintain high standards of data protection and privacy. We do not sell your personal information to third parties under any circumstances.
Children's Privacy
Protection for young users
Protecting children's privacy is especially important to us. Gyaata is designed for students preparing for competitive exams and does not knowingly collect personal information from children under the age of 18 without parental consent.
If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at gyaata.ai@gmail.com. We will take immediate steps to remove such information from our records.
We encourage parents and guardians to monitor their children's online activities and help enforce this Privacy Policy by instructing their children never to provide personal information without their permission.
Changes to This Privacy Policy
How we communicate updates
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by:
- Posting the updated Privacy Policy on this page with a new "Last Updated" date
- Sending you an email notification at the email address associated with your account
- Displaying a prominent notice on our platform when you log in
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of Gyaata after any changes indicates your acceptance of the updated Privacy Policy.
Contact Us
Questions about our Privacy Policy?
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please don't hesitate to contact us:
We take all privacy concerns seriously and will respond to your inquiry within 2-3 business days. For urgent matters related to data security or privacy violations, please mark your email as "URGENT" in the subject line.
Your Consent
By using Gyaata, you hereby consent to our Privacy Policy and agree to its terms and conditions. If you do not agree with this policy, please do not use our platform. Your continued use of Gyaata AI following the posting of changes to this policy will be deemed your acceptance of those changes.