Privacy Policy

1. Who we are

AMH Technologies Pvt. Ltd. operates the Reportify holistic student-assessment platform for schools in India. If you have any question about this policy or your personal data, contact us using the details in “Grievance redressal and contact” below.

2. How this policy works — our two roles

Reportify involves two distinct data relationships, and the law treats them differently:

• Website and enquiries — we are the Data Fiduciary. When you browse the Website, request a demo, contact us, or subscribe to updates, AMH decides how your data is used and is the “Data Fiduciary” for that data.
• School platform data — the School is the Data Fiduciary; we are the Data Processor. When a school subscribes to Reportify, the school decides what student, teacher and administrative data is processed and for what purpose. In that relationship the school is the Data Fiduciary and AMH acts as a Data Processor, processing data only on the school’s documented instructions under our agreement with that school. For those deployments, the school’s own agreement, notices and consent processes govern, and this policy is supplementary to them.

3. Information we collect

• Website usage: pages viewed, approximate location derived from your IP address, device and browser type, and diagnostic data needed to operate and secure the site.
• Information you submit: when you request a demo, contact us, or subscribe — typically your name, email, phone number, school or organisation name, and the content of your message.
• Platform data (school deployments): when a school uses Reportify, we process, on the school’s instructions, data such as student name and identifiers, class/section and session, academic marks and results (test-wise and consolidated), co-curricular participation and achievements, attendance, teacher remarks, co-scholastic grades, and related contact details provided by the school.

4. Children’s data

Reportify is used by schools to assess students, most of whom are under the age of 18. Under DPDP, anyone under 18 is a “child”, and processing their personal data carries specific obligations that we take seriously.

• Verifiable parental consent. For school deployments, the school is responsible for obtaining verifiable consent from a parent or lawful guardian before a child’s personal data is provided to us. We process that data only on the school’s instructions and only to deliver the assessment services the school has enabled.
• No advertising or profiling of children. We do not use children’s data for advertising, we do not serve targeted advertising to children, and we do not sell children’s data.
• No behavioural tracking of students. We do not run third-party advertising or behavioural-analytics trackers inside the logged-in Reportify student, teacher or school portals. Any analytics we perform there is limited to what is necessary to provide the assessment features the school has enabled.
• Exercising a child’s rights. A parent or guardian can exercise a child’s rights through the school (the Data Fiduciary), or by contacting us at the address below and we will coordinate with the school.

The public Website is intended for school staff, parents and administrators. We do not knowingly collect the personal data of children directly through the Website.

5. How we use information

Website and enquiries. To provide and improve our services, respond to your enquiries, send service-related communications, understand site traffic in aggregate, maintain security, and comply with legal obligations.

Platform data. Solely to provide the assessment services to the subscribing school under our agreement — for example, to generate report cards, scores, skill breakdowns and analytics for authorised school users and for the relevant student and parent. We do not use school platform data for our own marketing or for building profiles of students.

Legal basis. We rely on your consent (and, for children, on the verifiable parental consent obtained by the school), on the performance of our contract with you or your school, and on compliance with legal obligations.

6. Cookies and similar technologies

On the marketing Website, we may use cookies and similar technologies for essential site functionality, to remember preferences, and to understand traffic patterns in aggregate. You can control cookies through your browser settings.

We do not use advertising cookies or third-party advertising or behavioural-tracking technologies inside the logged-in Reportify portals. Website analytics and product functionality are kept separate.

7. Sharing and disclosure

• No sale of personal data. We do not sell your personal information.
• Service providers. We may share data with service providers who help us operate (for example, hosting and email delivery), under contracts that limit their use of the data and require appropriate confidentiality and security.
• Within a school deployment. Platform data is made available only to authorised users of that school and to the relevant student and parent. It is not shared with other schools or with third parties for their own purposes.
• Legal disclosures. We may disclose data where required by law, or to establish, exercise or defend legal rights, or to protect the rights and safety of any person.

8. Where your data is stored

Platform (school) data is hosted on servers located in India. Where we use a service provider located outside India for limited purposes, any such transfer is carried out only in accordance with DPDP and any conditions prescribed by the Central Government.

9. Data retention

• Website and enquiry data. Retained only as long as needed for the purposes described in this policy, after which it is deleted or anonymised, unless a longer period is required or permitted by law.
• Student report cards. A student’s holistic report card is treated as the student’s own record and is retained to provide the student with continued lifetime access to it, consistent with our agreement with the school.
• Other school data. Operational and administrative school data (other than report cards) is retained for the duration of the school’s subscription and, on termination, is made available to the school for export and then deleted from our active systems within 30 days, save where a longer period is required by law.
• Erasure. We erase personal data when the purpose for which it was collected is no longer served or when consent is withdrawn, subject to any legal retention requirement.

10. Security

We maintain reasonable technical and organisational safeguards designed to protect personal data, including encryption of data in transit, role-based access controls, and access logging. In the event of a personal data breach, we will notify the Data Protection Board of India and affected individuals in accordance with the timelines prescribed under the DPDP Rules, 2025.

11. Your rights and choices

Subject to applicable law, you have the right to:

• access your personal data and obtain a summary of the data we process;
• request correction, completion or updating of inaccurate or incomplete data;
• request erasure of your personal data;
• withdraw your consent at any time — withdrawing consent is as easy as giving it (note that withdrawal does not affect processing already carried out);
• nominate another individual to exercise your rights in the event of your death or incapacity; and
• grievance redressal in respect of our handling of your data.

To exercise any of these rights, contact us using the details below. For data held within a school’s Reportify deployment, please raise your request with your school, which is the Data Fiduciary; you may also contact us and we will coordinate with the school. If you are not satisfied with our response, you have the right to complain to the Data Protection Board of India.

12. Grievance redressal and contact

For any questions, requests or complaints about your personal data or this policy:

AMH Technologies Pvt. Ltd.
Email: support@reportify.in
Registered office: HD-90, WeWork Forum, DLF Cybercity, Gurgaon, Haryana 122002, India

We will acknowledge and respond to requests within the timelines required under DPDP.

13. Changes to this policy

We may update this policy from time to time. When we do, we will change the “Last updated” date above and, where the change is material, take reasonable steps to bring it to your attention.

For school deployments, any change to how we process platform data is governed by our agreement with the school, and not by your continued use of the Website. Continued use of the Website after an update to this policy indicates your acceptance of the revised policy in respect of Website and enquiry data only.