Privacy Policy

This Privacy Policy explains how Aedific Group LLP collects, uses, and protects personal data when you use Mentara and related Aedific Group websites and services.

Last updated: August 11, 2026

1. Who We Are (Data Fiduciary)

The data fiduciary (controller) is Aedific Group LLP, registered at C 31/A Gali # 13 Shashi Garden, Patparganj, Delhi - 110092, India. GSTIN: 07ACMFA6715A1ZO (Delhi, state code 07). Contact: contact@aedificgroup.com. Mentara is our AI tutoring and learning-governance SaaS platform for individual students and teachers (B2C) and for institutions such as schools and coaching centres (B2B).

2. Personal Data We Collect and Why

We collect and process: (a) account identity data (name, email, phone where provided, login identifiers) to create and secure accounts and communicate with you; (b) institution, class, and roster data to provision and administer institutional tenants; (c) content you upload (documents, assignments, learning materials) to deliver tutoring and learning features; (d) AI chat transcripts and generated notes, quizzes, and assessments to provide Mentara’s AI features and support quality and safety; (e) usage and metering data to enforce plan limits (hard caps; no pay-as-you-go overage billing) and operate billing; and (f) payment-related identifiers and invoice records processed via our payment partner for subscriptions and invoices. Customer data is isolated per tenant.

3. Lawful Basis (Digital Personal Data Protection Act, 2023)

We process personal data in accordance with India’s Digital Personal Data Protection Act, 2023 (DPDP Act). Depending on the activity, processing is based on consent (for example, account signup, optional communications, or analytics cookies where offered) and/or other grounds recognised under the DPDP Act for providing the contracted Mentara service, securing the platform, meeting legal obligations (including tax and accounting), and preventing fraud or abuse. Where consent is required, you may withdraw it through the product settings, cookie preferences, or by contacting us, subject to any lawful need to retain certain records.

4. Children’s Data

Many Mentara end users are school students who may be under 18 years of age. Accounts for minors are created either by an institution (school or coaching centre) that provisions the student on its tenant, or under parent or guardian supervision for individual (B2C) use. Verifiable parental or institutional consent is required before we process a minor’s personal data for Mentara. We do not use children’s personal data for behavioural advertising or for tracking them across third-party sites for advertising purposes. Institutions remain responsible for obtaining any consents required from parents or guardians under applicable school and education rules.

5. Sub-Processors

We use the following sub-processors to operate Mentara: Amazon Web Services (hosting, storage, and database); Razorpay (payment processing and subscriptions); Amazon SES (transactional email); and AWS Bedrock (AI model inference). These parties process data only as needed to provide their services to us under contractual arrangements.

6. Data Location and Cross-Border Processing

Mentara application data is hosted on Amazon Web Services in the ap-south-1 (Mumbai, India) region. AI model inference is provided through AWS Bedrock. Depending on the model configuration in use, inference processing may occur on AWS infrastructure outside India. Where personal data is processed outside India, we rely on appropriate contractual and organisational measures with the relevant provider consistent with applicable Indian law.

7. Retention and Deletion

We retain personal data for as long as needed to provide Mentara, enforce plan and billing records, resolve disputes, and meet legal, tax, and accounting requirements. When you delete your account, or when an institution requests tenant erasure, we delete or anonymise personal data from active systems within a reasonable period, except where we must retain specific records (for example, invoices, GST records, or dispute materials) for a longer lawful period. To request account deletion or tenant erasure, use the in-product account or admin controls where available, or email contact@aedificgroup.com from an authorised account address.

8. Security Measures

We apply technical and organisational measures appropriate to the nature of Mentara, including encryption of data in transit (TLS), access controls and authentication for administrative access, logging and monitoring of production systems, and logical isolation of customer data by tenant. No method of transmission or storage is completely secure; if we become aware of a personal data breach affecting you, we will take steps required under applicable law, including notification where mandated.

9. Your Rights

Under the DPDP Act and related rules, you may have rights to access your personal data, correct inaccurate data, request erasure (subject to lawful retention), and seek grievance redressal. To exercise these rights, email contact@aedificgroup.com with the subject line describing your request (for example, “Access request” or “Erasure request”) and enough information for us to verify your identity and locate your data. For grievances, contact our Grievance Officer at contact@aedificgroup.com with the subject “Grievance – Privacy”. We aim to acknowledge requests within 3 business days and to respond within 15 business days, or within any longer period required by applicable law where a complex investigation is needed.

10. Cookies

Our marketing website uses cookies and similar technologies as described in our Cookies Policy. That policy explains strictly necessary and optional analytics cookies, and how you can accept, partially accept, or reject optional categories.

11. Changes to This Policy

We may update this Privacy Policy to reflect legal, product, or operational changes. The “Last updated” date at the top of this page will change when we do. Material changes will be reflected on this publicly reachable page. Where required, we may provide additional notice through the product or by email.