Data Processing Agreement (DPA)
Standard contractual clauses governing the processing of educational and student personal data between Educational Institutions (Data Controllers) and Infinity Learning (Data Processor).
Effective: 09 Nov 2026 · Digital Personal Data Protection Act 2023 (DPDP) & Global Privacy Standards
1. Scope & Purpose
This Data Processing Agreement ("DPA") supplements the Terms of Service between the Educational Institution ("School", "Customer", or "Data Controller") and Infinity Learning ("Platform", "We", or "Data Processor").
This DPA applies to all processing of student, teacher, and parent personal data carried out by Infinity Learning on behalf of the School in connection with the delivery of school ERP, timetable management, attendance, LMS, and assessment features.
2. Roles & Responsibilities
- The School as Data Controller: The School determines the lawful basis for processing, enrolls authorized students, teachers, and batches, and maintains primary guardianship over educational records in compliance with applicable education board standards.
- Infinity Learning as Data Processor: Infinity Learning processes data solely upon the documented instructions of the School and for the sole purpose of operating the Platform.
- Prohibition on Secondary Commercial Use: Infinity Learning shall NEVER monetize, sell, license, or exploit school data for commercial advertising, marketing, or behavioral tracking.
3. Prevention of Unauthorized AI Model Training
Strict AI Model Training Shield
Infinity Learning guarantees that student homework submissions, doubt queries, teacher examination questions, assessment papers, and personally identifiable records are NEVER used to train, fine-tune, or benchmark public foundation models or external third-party artificial intelligence systems without explicit, unbundled written consent from the School.
4. Technical & Organizational Security Measures
Infinity Learning implements industry-standard safeguards to protect data against unauthorized disclosure or loss:
- Encryption: Enforced TLS 1.3 across all HTTP web traffic and database connection sockets; cryptographic Argon2id password hashing.
- Role-Based Access Controls (RBAC): Strict tenancy isolation ensuring schools, teachers, and students access only data pertinent to their specific cohorts.
- PII Masking: Aadhaar numbers, PAN cards, banking UPI IDs, and identity documents are masked in administrative views with controlled eye-toggle reveals.
- Audit Trails: Real-time audit logging of all sensitive administrative modifications, approvals, and credential updates.
5. Data Retention, Portability & Return
Upon termination of services or written request by the School, Infinity Learning shall:
- Export all academic marks, student records, fee ledgers, and attendance archives in standardized, machine-readable formats (CSV/SQL/PDF).
- Permanently and securely shred operational database records from active clusters within 60 days of contract termination, retaining only those archives required by statutory record-keeping laws.
6. Inquiries & Executing a Custom DPA
Educational institutions and school boards requiring a countersigned enterprise DPA customized to their state education regulatory guidelines may contact our compliance team:
Data Protection Officer / Legal: info@infintylearning.net
Website: infintylearning.net