Who we are
GradusMind ("we", "us"), based at 92/2 Ashok Nagar, BK Pudur, Kuniyamuthur, Coimbatore, Tamil Nadu 641008, India, runs GradusMind, a learning platform for institutes and company training teams. This policy covers our website at https://gradusmind.com and the GradusMind platform.
Our role and yours
When an institute or company ("Customer") uses GradusMind, the Customer decides why and how its learners', instructors' and administrators' data is processed. For that data the Customer is the Data Fiduciary and GradusMind is its Data Processor: we process it only on the Customer's instructions and under our agreement with them.
For data we collect for our own purposes, such as website visitors, demo requests and the billing contacts of our Customers, GradusMind is the Data Fiduciary.
If you are a learner or instructor and have a question about your data, please contact your institute or employer first. We will help them respond.
What we collect
On this website
- Demo and trial requests: your name, organisation, role, phone number, work email, approximate number of learners and, if you give one, your preferred workspace name.
- Certificate checks: the certificate ID you enter, to look up whether it is valid.
- Usage data: pages visited and anonymous, aggregated analytics. We do not use advertising trackers.
In the GradusMind platform
- Account data: name, email address, role, batch, profile photo and password (stored only as a secure hash).
- Learning data: enrolments, course progress, notes, bookmarks, points, badges and streaks.
- Assessment data: answers, code submissions, scores, rubric grades, instructor feedback and, for proctored exams, the proctoring signals your institute enables.
- Live classes and recordings: video, audio and chat from live sessions, when your institute records them.
- Messages: chat messages, reactions and files shared in GradusMind chat.
- Certificates: the name, course, score and issue date printed on certificates you earn.
- Technical data: sign-in times, active sessions, device and browser type, IP address and audit logs of administrative actions.
How we use it
- To provide the platform: run courses, live classes, assessments, certificates, chat and notifications.
- To keep accounts secure: authenticate users, detect suspicious sign-ins, lock accounts after repeated failed attempts and keep audit logs.
- To support Customers and respond to requests you send us.
- To bill Customers and meet tax and accounting obligations.
- To improve GradusMind using aggregated, de-identified usage information.
- To contact people who ask for a demo or trial about that request.
We do not sell personal data, and we do not use learners' data for advertising.
AI features
GradusMind's AI tutor, AI grading suggestions and AI mock interviews send the relevant question, answer or code submission to our AI provider, Anthropic, to generate a response. AI grades are suggestions: an instructor reviews and approves them before they count.
Anthropic's commercial terms do not allow it to train its models on the data we send. We send only what the feature needs and do not include unrelated profile information.
Who we share it with
We share personal data only with service providers that help us run GradusMind, under contracts that require them to protect it:
| Provider | Purpose | Location |
|---|---|---|
| Netlify | Website hosting and storage of demo and trial requests | United States |
| Supabase | Managed PostgreSQL database for platform data | Singapore (ap-southeast-1) |
| Cloudflare R2 | Storage for course media, recordings, resources and certificates | Cloudflare global network |
| Anthropic | AI grading suggestions, AI tutor and AI mock interviews | United States |
| LiveKit | Real-time video for live classes | Region chosen at deployment |
| Zoho Mail | Email for invitations, password resets, notifications and support | India |
Within a Customer's account, data is visible to people according to their role (for example, instructors see their own batches and admins see the whole organisation). Certificate verification shows the certificate holder's name, course and issue date to anyone who has the certificate ID.
We may also disclose data when required by law, or to protect the rights, safety and security of our users or GradusMind.
Where data is stored
GradusMind's primary database is hosted in Singapore, and some providers process data in other countries as listed above. When data leaves India we rely on contracts with these providers and follow any restrictions the Government of India notifies under the DPDP Act.
How long we keep it
- Customer data is kept for as long as the Customer's subscription is active. After it ends, the Customer can export its data for 30 days, after which we delete it within 90 days, except where the law requires us to keep it.
- Issued certificates stay verifiable for as long as the Customer keeps them active, so that employers can continue to check them.
- Demo requests are kept for up to 24 months unless you ask us to delete them sooner.
- Billing records are kept for as long as Indian tax law requires.
How we protect it
- Each Customer's data is stored in its own separate database, isolated from every other Customer's, and is reached only through that Customer's own workspace address.
- Access inside the platform is controlled by roles and more than 50 fine-grained permissions.
- Data is encrypted in transit, and our database provider encrypts it at rest.
- Passwords are stored as hashes, sessions can be reviewed and revoked, and accounts lock after repeated failed sign-ins.
- Administrative actions are recorded in audit logs.
No system is perfectly secure. If we learn of a personal data breach that affects you, we will notify the affected Customer and, where required, the Data Protection Board of India.
Your rights
Under the DPDP Act you have the right to:
- get a summary of the personal data processed about you and how it is processed;
- have inaccurate or incomplete data corrected and completed;
- have your data erased when it is no longer needed, subject to legal requirements;
- withdraw consent where processing is based on consent;
- nominate another person to exercise your rights if you die or become incapacitated; and
- have your grievances addressed.
Learners and instructors should usually make these requests to their institute or employer, which controls their account. For data GradusMind controls, write to privacy@gradusmind.com. We respond within 30 days.
Learners under 18
GradusMind is used mainly by college students and working professionals. Where a Customer enrols learners under 18, the Customer is responsible for obtaining verifiable consent from a parent or lawful guardian before creating their accounts. We do not track children's behaviour or show them targeted advertising.
Cookies
The platform uses essential cookies and local storage to keep you signed in and remember your settings. This website uses privacy-friendly analytics that do not set advertising cookies or follow you across other websites.
Changes to this policy
We will update this page when our practices change and revise the date at the top. For significant changes we will notify Customers' administrators by email before the change takes effect.
Contact and grievances
Privacy questions: privacy@gradusmind.com
Grievance Officer: Vinoth, GradusMind, 92/2 Ashok Nagar, BK Pudur, Kuniyamuthur, Coimbatore, Tamil Nadu 641008, India. Email privacy@gradusmind.com. We acknowledge grievances within 48 hours and aim to resolve them within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.