Terms & Conditions

By accessing or using the SPYRAL NEP Workbench platform ("Platform") operated by SPYRAL ("we", "us", or "Company"), you confirm that:

• You have read, understood, and agree to be bound by these Terms & Conditions.
• You have the legal capacity to enter into a binding agreement (or, in the case of a minor, your parent or guardian has agreed on your behalf).
• If you are accepting on behalf of a school or institution, you have the authority to bind that organisation to these terms.

If you do not agree with any part of these terms, you must not use the Platform.

SPYRAL NEP Workbench is an AI-powered adaptive learning platform aligned with India's National Education Policy (NEP 2020). The Platform provides:

• Personalised learning tools for students (Grades 1–12), including simulations, AI challenges, practice zones, and competency tracking.
• Teacher tools including lesson notes builder, question generator, and simulator builder.
• Institutional analytics and Student Performance Index (SPI) reporting for school administrators.
• Parent dashboards for progress visibility.
• SPYRAL Architecture — a keyword-first AI governance framework for institutions integrating AI.

Registration

Access to the Platform requires a registered account. Schools and institutions register through an onboarding agreement. Individual user accounts (Student, Teacher, Parent, Admin) are created by the institution's administrator.

Account Security

• You are responsible for maintaining the confidentiality of your credentials.
• You must notify us immediately at support@tryspyral.com of any unauthorised use of your account.
• We are not liable for any loss arising from unauthorised access due to your failure to protect your credentials.

Account Termination

We reserve the right to suspend or terminate accounts that violate these terms, engage in prohibited conduct, or upon request from the school administrator.

We collect the minimum data necessary to deliver the Platform's features. The table below describes the data categories:

We use collected data solely for the following purposes:

• Delivering the service: Personalising learning paths, generating SPI reports, and providing AI-driven recommendations.
• Platform improvement: Analysing aggregated, anonymised usage patterns to enhance features and fix issues.
• Communication: Sending account-related notifications, progress reports, and service updates.
• Safety and compliance: Detecting abuse, fraud, or violations of these terms.
• Research (anonymised): Contributing anonymised, aggregated data to NEP 2020 efficacy research — individual students are never identifiable.

Student data is treated with the highest level of protection. We comply with India's Digital Personal Data Protection (DPDP) Act, 2023 and applicable state-level regulations.

Consent for Minors

For students under the age of 18, the school institution acts as the data fiduciary on behalf of parents/guardians. By enrolling students on the Platform, the school confirms it has obtained appropriate parental/guardian consent.

Data Minimisation

Student academic data is collected only to the extent necessary for generating learning insights and SPI reports. We do not build commercial profiles of students.

Access Controls

• Student data is accessible only to the student themselves, their assigned teachers, parents linked to their account, and the school administrator.
• SPYRAL staff access student data only when required for technical support, and only with institutional knowledge.

Data Portability

Schools and parents may request a complete export of a student's data in machine-readable format by emailing support@tryspyral.com.

We do not sell or rent personal data. We may share data in the following limited circumstances:

• Service providers: Cloud infrastructure (hosting, database), email delivery, and analytics providers — bound by strict data processing agreements.
• Legal requirements: If required by Indian law, court order, or government directive, we will disclose the minimum data necessary and notify the affected institution where permitted.
• Institutional sharing: Aggregated, anonymised reports may be shared with the institution's management or the Ministry of Education for NEP 2020 compliance reporting.
• Business transfer: In the event of a merger or acquisition, data will transfer subject to the same protections, and users will be notified in advance.

We retain personal data only for as long as necessary:

• Active accounts: Data is retained for the duration of the school's subscription plus 12 months thereafter.
• Student academic records: Retained for 3 years after the student's last active session (to support alumni reports/transcripts), then deleted or anonymised.
• Deletion requests: Processed within 30 days of a verified request from the school admin, parent, or adult user.
• Backups: Encrypted backups are purged within 90 days of the data deletion request.

Under the DPDP Act 2023, you (or a parent/guardian on behalf of a minor) have the following rights:

• Right to access: Request a summary of personal data we hold about you.
• Right to correction: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data, subject to legal retention obligations.
• Right to grievance redressal: Raise a complaint about our data processing practices.
• Right to nominate: Nominate another person to exercise these rights on your behalf in case of incapacitation.

To exercise any of these rights, contact our Data Protection Officer at privacy@tryspyral.com. We will respond within 30 days.

We implement industry-standard technical and organisational measures to protect your data:

• All data in transit is encrypted using TLS 1.2+.
• Data at rest is encrypted using AES-256.
• Authentication uses bcrypt-hashed passwords and JWT tokens with short expiry.
• Access to production systems is restricted by role and audited.
• We conduct regular security reviews and vulnerability assessments.

In the event of a data breach that poses a risk to users, we will notify the affected institution and relevant authorities within 72 hours of becoming aware of the incident.

All content, software, designs, algorithms, and materials on the Platform — including the SPYRAL keyword-first architecture, SPI engine, and AI models — are the intellectual property of SPYRAL and are protected under Indian copyright and IP law.

• You may use the Platform for its intended educational purpose only.
• You may not copy, reproduce, reverse-engineer, or create derivative works from any part of the Platform without written consent.
• User-generated content (e.g., student submissions, teacher-created notes) remains the property of the user/institution. By submitting content, you grant us a limited licence to process and display it within the Platform.

You agree not to use the Platform to:

• Impersonate another user, institution, or SPYRAL staff.
• Upload or transmit malware, viruses, or any malicious code.
• Scrape, harvest, or systematically extract data from the Platform.
• Attempt to bypass authentication, access controls, or security mechanisms.
• Use AI features to generate content that is harmful, discriminatory, or violates applicable law.
• Share your login credentials with unauthorised users.
• Use the Platform for any commercial purpose not authorised by SPYRAL.

Violations may result in immediate account suspension and legal action.

To the maximum extent permitted by applicable law:

• SPYRAL provides the Platform on an "as-is" and "as-available" basis without warranties of uninterrupted availability or fitness for a particular purpose.
• We are not liable for indirect, incidental, or consequential damages arising from use or inability to use the Platform.
• Our total aggregate liability to you for any claim shall not exceed the fees paid by your institution in the preceding 12 months.

Nothing in these terms limits liability for death, personal injury, or fraud caused by our negligence.

We may update these Terms & Conditions from time to time. When we do:

• We will update the "Last updated" date at the top of this page.
• For material changes, we will send an email notification to the school admin's registered address at least 14 days before the changes take effect.
• Continued use of the Platform after the effective date constitutes acceptance of the updated terms.

These Terms & Conditions are governed by and construed in accordance with the laws of India, including but not limited to:

• The Digital Personal Data Protection (DPDP) Act, 2023
• The Information Technology Act, 2000 (and amendments)
• The Indian Contract Act, 1872

Any disputes arising from these terms shall be subject to the exclusive jurisdiction of the courts of Bengaluru, Karnataka, India.

If you have any questions, concerns, or requests regarding these Terms & Conditions or your data, please reach out:

• General & Support: support@tryspyral.com
• Data Protection Officer: privacy@tryspyral.com
• Legal / Institutional: legal@tryspyral.com