Privacy Policy
Last updated: 18 July 2026
This Privacy Policy describes how Merethion (OPC) Private Limited ("Merethion", "we", "us") collects, uses, shares and protects personal data when you use our websites (merethion.com) and the Akriva platform (akriva.ai) — together, the "Services". We process personal data in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000.
1. Whose data we process
- Institute users — owners and faculty of coaching institutes who create and operate Akriva accounts.
- Students — learners whose institutes enrol them for tests on Akriva. Many students are minors; their data is submitted to us by their institute, which is responsible for obtaining verifiable consent from a parent or lawful guardian as required by the DPDP Act.
- Parents/guardians — limited contact details provided by institutes for sharing performance reports.
- Visitors — people who browse our websites or contact us.
2. What we collect
| Category | Examples |
|---|---|
| Account data | Name, email address, role, institute name and details |
| Student data | Name, roll number, batch, test responses, scores and performance analytics |
| Parent contact data | Phone number (for example, for WhatsApp report sharing initiated by the institute) |
| Usage data | Log data, device/browser information, pages and features used |
| Payment data | Plan, transaction references and invoices. Card/UPI/banking credentials are collected and processed by our payment partner (Razorpay); we never see or store them |
| Communications | Support requests and correspondence |
3. Why we process it
- To provide the Services: generating papers, conducting tests, computing analytics and producing reports;
- To operate accounts, billing and support;
- To secure the Services, prevent abuse and comply with law;
- To improve the Services, using aggregated or de-identified information wherever possible;
- To send service communications; marketing communications are sent only with consent and can be opted out of at any time.
We do not sell personal data. We do not use student personal data for advertising.
4. AI processing
Akriva uses third-party artificial-intelligence providers to draft and verify question content. Prompts sent to these providers contain syllabus, chapter and question material — not student rosters or parent contact details. Student performance analytics are computed within our own infrastructure.
5. Who we share data with
We share personal data only with processors who help us run the Services, under contractual safeguards:
- Cloud hosting and infrastructure providers;
- Database and authentication providers;
- Payment processing (Razorpay) for subscription billing;
- AI model providers, as described in Section 4;
- Professional advisers, or authorities where disclosure is required by law.
Some providers may process data on servers located outside India; where they do, we take reasonable steps to ensure an adequate standard of protection consistent with applicable law.
6. Children's data
- Students use Akriva only through their institute — we do not offer accounts directly to children.
- The institute, as the entity enrolling students, is responsible for obtaining verifiable parental/guardian consent before submitting a minor's data.
- We collect the minimum student data needed to run tests and produce reports, and we do not track children for behavioural advertising.
7. Retention
- Account and Customer data are retained for as long as the account is active.
- After account closure, data is retained for a limited wind-down period (to allow export), after which it is deleted or irreversibly anonymised, except where longer retention is required by law (for example, tax and accounting records).
- Institutes may request deletion of specific student records at any time.
8. Security
We use reasonable technical and organisational measures appropriate to the nature of the data — including encryption in transit, access controls, role-based permissions and isolation between institutes. No system is perfectly secure; we notify affected users and authorities of breaches as required by law.
9. Cookies
The Services use cookies and similar technologies that are necessary for sign-in, session management and security, and basic analytics to understand product usage. You can control cookies through your browser settings; the Services may not function correctly without essential cookies.
10. Your rights
Subject to applicable law (including the DPDP Act), you may:
- request access to, and a summary of, the personal data we process about you;
- request correction or completion of inaccurate data;
- request erasure of data that is no longer necessary;
- withdraw consent, where processing is based on consent;
- nominate a person to exercise your rights in case of death or incapacity;
- raise a grievance with us, and if unresolved, approach the Data Protection Board of India.
For students, these rights are ordinarily exercised through the institute and the parent/guardian. To exercise any right, contact us as set out below.
11. Grievance Officer
We acknowledge grievances within 48 hours and aim to resolve them within 15 days.
12. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be notified through the Services or by email. The "Last updated" date above reflects the current version.
13. Contact
Privacy questions: grievance@merethion.com · General: contact@merethion.com