Privacy Policy
Platform: eBodhya Studio (studio.ebodhya.in) Effective Date: 15 July 2026 Version: 1.0 Document Owner: Anomaa Studio Legal & Compliance
1. Introduction
This Privacy Policy explains how Anomaa Studio collects, uses, discloses, and protects Personal Data when you use eBodhya Studio, our AI-powered educational content creation platform. It binds every visitor, Creator, Institution Account holder, and Publisher who accesses studio.ebodhya.in, and exists to meet our obligations as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and to give you clear, actionable information about your data.
2. Definitions
- "Anomaa Studio," "we," "us," "our" — has the meaning given in the Legal Entity section of this document.
- "eBodhya" / "eBodhya Platforms" — the suite of platforms operated by Anomaa Studio: eBodhya Studio, eBodhya Marketplace, eBodhya Schools, and eBodhya Workspace.
- "the Platform" — the specific eBodhya Platform to which this document applies, as identified in the Legal Entity section.
- "Account" — the registered profile a User creates to access the Platform, including any Institution Account, Creator Account, Publisher Account, or role-based sub-account issued under it.
- "User" / "you" — any individual or entity that accesses or uses the Platform, including through an Account.
- "Services" — the features, tools, software, and functionality made available through the Platform, as described in the Terms of Service.
- "Content" — any text, image, video, audio, document, dataset, question, worksheet, presentation, lesson plan, assessment, or other work made available on or through the Platform.
- "User Content" — Content that a User uploads, submits, creates, or generates through the Platform, excluding Content owned by Anomaa Studio or licensed from third parties.
- "AI-Generated Content" / "AI Output" — Content produced, in whole or in part, through the Platform's artificial intelligence features, including AI Question Generation, AI Worksheet Generation, AI Presentation Generation, and Lesson Plan generation.
- "Personal Data" — data about an individual who is identifiable by or in relation to such data, as defined in Section 2(t) of the DPDP Act.
- "Processing" — has the meaning given in Section 2(x) of the DPDP Act — a wholly or partly automated operation or set of operations performed on digital Personal Data.
- "Data Fiduciary" — Anomaa Studio, as the entity that alone or in conjunction with others determines the purpose and means of Processing Personal Data collected through the Platform, as defined in Section 2(i) of the DPDP Act.
- "Data Principal" — the individual to whom the Personal Data relates. Where the individual is a Child, "Data Principal" includes the parent or lawful guardian who provides consent on the Child's behalf, as required under Section 9 of the DPDP Act.
- "Child" — an individual who has not completed the age of eighteen (18) years, as defined in Section 2(f) of the DPDP Act.
- "Consent Manager" — a person registered with the Data Protection Board of India who enables a Data Principal to give, manage, review, or withdraw consent, where applicable to the Platform.
- "Third-Party Services" — services, tools, plugins, or integrations provided by a party other than Anomaa Studio that interoperate with the Platform.
- "Applicable Law" — the DPDP Act, 2023; the Information Technology Act, 2000 and rules made thereunder; the Copyright Act, 1957; the Consumer Protection Act, 2019; and, where a User is located outside India, applicable foreign data protection law such as the GDPR.
- "Sub-processor" — a third-party service provider that Processes Personal Data on our behalf, and on our instructions, in order to operate the Services.
- "De-identified Data" — Personal Data from which identifying elements have been removed or altered so that the individual is no longer reasonably identifiable from it.
3. Applicability
This Policy applies to every individual and entity that visits studio.ebodhya.in, creates an Account, or otherwise interacts with the Services, including: individual Creators (teachers, publishers, content creators, academic experts); users acting on behalf of an Institution Account or Publisher Account; and administrators, editors, and collaborators added under an Institution or Publisher Account. It covers Personal Data collected through the Platform's website, applications, AI features, and supporting communications (email, in-product notices, support channels).
4. Legal Entity
eBodhya™ is a trademark owned and used by Anomaa Studio, a sole proprietorship business based in Bengaluru, Karnataka, India ("Anomaa Studio," "eBodhya," "we," "us," or "our"). Anomaa Studio owns and operates the entire eBodhya suite of platforms, comprising:
- eBodhya Studio — studio.ebodhya.in
- eBodhya Marketplace — marketplace.ebodhya.in
- eBodhya Schools — schools.ebodhya.in
- eBodhya Workspace — workspace.ebodhya.in
(together, the "eBodhya Platforms").
Every account, subscription, order, listing, or agreement created or entered into through any eBodhya Platform is an agreement with Anomaa Studio directly. No eBodhya Platform is owned, operated by, or offered on behalf of any third party, franchisee, reseller, school district, or unrelated entity, unless we state so expressly and in writing. eBodhya™ and the eBodhya logo are trademarks of Anomaa Studio; no license to use them is granted except as expressly permitted in writing.
In this document, "the Platform" means eBodhya Studio (studio.ebodhya.in) specifically, and "eBodhya" or the "eBodhya Platforms" means the wider suite of products described above. Where this document imposes obligations on "Anomaa Studio," those obligations are undertaken by Anomaa Studio in its capacity as operator of the Platform.
5. Personal Data We Collect
We collect the following categories of Personal Data:
- Account and profile data — name, email address, phone number, password (hashed), role (Creator, Institution, Publisher), organization name, billing address, tax/identity details for Publisher verification, and Creator Profile information you choose to publish (bio, photo, credentials).
- Uploaded source material — PDFs, images, and video you upload for AI processing or as supporting material for Content you create (Document Processing).
- AI prompts and outputs — the instructions you give our AI Assistants and the AI Output they generate, together with associated metadata (timestamps, model used, generation parameters).
- User Content — Questions, Worksheets, Presentations, Lesson Plans, Question Banks, Learning Packages, and other Content you author, whether generated with AI assistance or written manually.
- Collaboration data — activity within shared workspaces, comments, edit history, and co-author attribution.
- Usage and device analytics — pages visited, features used, session duration, browser/device type, IP address, and crash/error logs.
- Payment data — processed by our payment gateway sub-processor; we retain limited billing metadata (plan, invoice history, last four digits of a payment instrument where passed to us) but do not store full card numbers.
6. Purpose and Legal Basis for Processing
We Process the categories above for the following purposes, each grounded in a legal basis recognized under the DPDP Act:
| Purpose | Legal Basis |
|---|---|
| Creating and administering your Account, authenticating logins | Performance of a contract with you (Terms of Service) |
| Running AI Question/Worksheet/Presentation/Lesson Plan Generation on your uploaded material and prompts | Performance of a contract with you, and your explicit act of submitting the material/prompt |
| Enabling Collaboration, Version History, and Marketplace Publishing | Performance of a contract with you |
| Billing and Subscription management | Performance of a contract with you; compliance with tax and accounting law |
| Product analytics and service improvement | Legitimate use consistent with the purpose for which you provided the data, subject to your consent choices described below |
| Security monitoring, fraud and abuse prevention | Legitimate use necessary to protect the Platform and other Users |
| Marketing communications | Consent, which you may withdraw at any time |
| Legal compliance, grievance redressal, and enforcement of our policies | Compliance with Applicable Law |
7. How We Use Your Content and AI Prompts
When you upload source material or submit an AI prompt, we Process it transiently to generate the output you requested (for example, turning an uploaded chapter PDF into a Question Bank). We do not use your uploaded content, prompts, or AI Output to train third-party foundation models without your explicit, separate opt-in consent. Unless you opt out in your Account settings, we may use your content and prompts, in de-identified form, to improve Anomaa Studio's own ranking, quality, and content-recommendation systems for the Platform — this internal use never involves sharing your identifiable Content with third parties or feeding it into a third-party model's general training corpus. You can withdraw this consent at any time; doing so does not affect AI features you have already used.
8. Sub-Processors
We engage sub-processors, at the following categories, to operate the Services: cloud hosting and storage providers (for Platform infrastructure and your uploaded files); AI model providers (to run AI Question/Worksheet/Presentation/Lesson Plan Generation and other AI Assistants); a payment gateway (to process Subscription billing); and analytics providers (to measure product usage). Each sub-processor is bound by contract to Process Personal Data only on our instructions and to apply security measures consistent with our Security Statement.
9. Cross-Border Data Transfers
Some sub-processors, including certain cloud hosting and AI model providers, may Process Personal Data on servers located outside India. Where this occurs, we take reasonable steps to ensure the sub-processor applies protections consistent with this Policy and Applicable Law, including contractual safeguards. The DPDP Act does not currently prohibit such transfers except to countries the Central Government may restrict by notification; we will comply with any such restriction if and when notified.
10. Data Principal Rights
As a Data Principal, you have the right to: (a) access a summary of the Personal Data we hold about you and the Processing activities carried out; (b) request correction or completion of inaccurate or incomplete Personal Data; (c) request erasure of Personal Data that is no longer necessary for the purpose it was collected, subject to Section 13 and our Data Deletion Policy; (d) withdraw consent previously given, without affecting the lawfulness of Processing before withdrawal; (e) nominate another individual to exercise your rights in the event of death or incapacity; and (f) file a grievance with our Grievance Officer, and escalate to the Data Protection Board of India if unresolved. Exercise these rights by contacting privacy@ebodhya.in; see Section 23 for full contact details. We will verify your identity before acting on a request.
11. Institution Account Consent
If you hold or administer an Institution Account or Publisher Account, you warrant that you have the authority to submit, upload, or process any third-party Personal Data (including that of employees, students, or contributors) contained in material you upload to the Platform, and that you have obtained any consent required under Applicable Law to do so before uploading it. Anomaa Studio Processes such data solely as instructed by the Institution or Publisher Account holder for the purposes described in this Policy.
12. Privacy
This document is Anomaa Studio's complete Privacy Policy for the Platform; the sections above set out our full privacy practices. Other Studio documents cross-reference this Policy rather than repeating it.
13. AI
Our AI features (AI Question Generation, AI Worksheet Generation, AI Presentation Generation, Lesson Plans, and AI Assistants generally) Process the data described in Sections 5–7 to produce AI Output. Human review is expected before you rely on or publish AI Output. Full detail on responsible use of AI, model limitations, and prohibited uses is in the AI Usage Policy and the AI Content Generation Policy.
14. Data Processing
Personal Data handled in connection with the Services is Processed in accordance with this Policy and the DPDP Act, 2023. Where we act on behalf of an Institution or Publisher Account as described in Section 11, that Account holder remains responsible for the underlying lawfulness of the data it submits.
15. Cookies
We use cookies and similar technologies for essential session management, functional preferences, and analytics. We do not use third-party advertising cookies on the Platform. Full detail on categories, consent, and retention is in the Cookie Policy.
16. Third-Party Services
The categories of third-party processors relevant to this Policy are cloud hosting, AI model providers, our payment gateway, and analytics providers, as described in Section 8. We do not sell Personal Data to any third party.
17. Security
We apply encryption in transit and at rest, access controls, and incident response procedures described fully in our Security Statement. No system is completely secure, and we encourage you to use a strong, unique password and enable any available account security features.
18. Retention
We retain Personal Data only as long as necessary for the purposes in Section 6, subject to legal, tax, and dispute-resolution requirements. A category-by-category schedule is set out in our Data Retention Policy.
19. Deletion
You may request deletion of your Account, specific Content, or a specific AI generation at any time through Account settings or by contacting privacy@ebodhya.in. The process, backup purge timelines, and exceptions (for example, billing records we must retain) are described in our Data Deletion Policy.
20. Intellectual Property
Platform software, AI models, and the eBodhya™ brand are Anomaa Studio's Intellectual Property. You retain ownership of your User Content, subject to the license you grant us to operate the Services. Full detail is in the Intellectual Property Policy and Copyright Policy.
21. User Responsibilities
You must: provide accurate Account information and keep it current; safeguard your login credentials; promptly notify us of any suspected unauthorized access; and, where you hold an Institution or Publisher Account, ensure that any third-party Personal Data you upload was lawfully obtained and that required consents are in place, as described in Section 11.
22. Prohibited Activities
You must not: upload another individual's Personal Data without a lawful basis and, where required, their consent; attempt to access another User's Account, Content, or Personal Data without authorization; circumvent, disable, or interfere with privacy or security controls on the Platform; or use scraping, harvesting, or automated tools to collect Personal Data of other Users.
23. Limitation of Liability
To the maximum extent permitted by Applicable Law, Anomaa Studio's aggregate liability arising out of or relating to this Policy will not exceed the amount you paid us for the Services in the twelve (12) months preceding the event giving rise to the claim. Nothing in this Policy limits liability for fraud, willful misconduct, or any liability that cannot be excluded or limited under Applicable Law.
24. Disclaimer
The Platform and its privacy and security controls are provided "as is" and "as available." While we take reasonable measures described in this Policy and the Security Statement, we cannot guarantee that unauthorized third parties will never defeat those measures.
25. Termination
Upon termination or closure of your Account, we will handle your Personal Data as described in our Data Retention Policy and Data Deletion Policy. Sections of this Policy that by their nature should survive termination (including Sections 10, 17–19, and 23) will continue to apply.
26. Governing Law and Dispute Resolution
This Privacy Policy and any dispute, claim, or controversy arising out of or relating to it, the Platform, or the Services (a "Dispute") is governed by the laws of India, without regard to its conflict-of-laws principles.
The parties will first attempt in good faith to resolve any Dispute through informal negotiation for thirty (30) days after one party gives the other written notice of the Dispute. If the Dispute is not resolved within that period, it will be referred to and finally resolved by arbitration in Bengaluru, Karnataka, under the Arbitration and Conciliation Act, 1996, before a sole arbitrator appointed by Anomaa Studio. The arbitration will be conducted in English, and the seat and venue of arbitration will be Bengaluru, Karnataka. The award of the arbitrator will be final and binding on the parties.
Nothing in this clause prevents either party from seeking urgent injunctive or equitable relief before a competent court at any time. Subject to the arbitration agreement above, the courts at Bengaluru, Karnataka shall have exclusive jurisdiction over any Dispute not subject to arbitration and over any proceeding to enforce an arbitral award.
27. Jurisdiction
Without prejudice to the arbitration agreement above, the Platform is directed at Users in India, and Anomaa Studio makes no representation that the Platform or its Content is appropriate or lawfully available in other locations. Users who access the Platform from outside India do so on their own initiative and are responsible for compliance with local law.
28. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in the Services, Applicable Law, or our practices. We will post the revised version on the Platform with an updated "Effective Date" and, for material changes, will provide reasonable advance notice through the Platform, by email, or by an in-product notice, as appropriate to the change and the audience of the Platform. Continued use of the Platform after the revised Privacy Policy takes effect constitutes acceptance of the changes. Where Applicable Law requires your express consent to a change (for example, a material change to how we Process Personal Data of a Child), we will seek that consent before the change takes effect.
29. Contact Information
If you have questions about this Privacy Policy, or wish to exercise any right described in it, contact Anomaa Studio through the channel that matches your query:
| Purpose | Contact |
|---|---|
| General support | support@ebodhya.in |
| Privacy and data protection queries, and Data Principal rights requests under the DPDP Act, 2023 | privacy@ebodhya.in |
| Grievances under the Information Technology Act, 2000 and rules made thereunder, and grievance redressal under the DPDP Act, 2023 | grievance@ebodhya.in |
| Security vulnerability reports and responsible disclosure | security@ebodhya.in |
| Sales, billing, and refunds | sales@ebodhya.in |
Registered office: Anomaa Studio, Bengaluru, Karnataka, India.
Grievance Officer
In accordance with Section 5 of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the grievance redressal requirements of the DPDP Act, 2023, Anomaa Studio has designated a Grievance Officer for the eBodhya Platforms, reachable at grievance@ebodhya.in. The Grievance Officer will acknowledge a grievance within twenty-four (24) hours of receipt and will endeavor to redress it within fifteen (15) days, or such other period as Applicable Law prescribes.
If you are not satisfied with our response, you may escalate a Personal Data grievance to the Data Protection Board of India, or pursue any other remedy available to you under Applicable Law.