This page explains how ONETUZA approaches data handling, the principles that guide our decisions, and the regulatory frameworks we operate within, so schools can understand where responsibility lies and which boundaries will not be crossed.
Our Position on Academic Data
Academic data is not a growth asset. It is not a monetisation lever. It is not a behavioural signal to be exploited.
ONETUZA treats academic data as institution-owned information, processed solely to support academic visibility and school-authorised decision-making.
We do not sell data.
We do not trade data.
We do not use student data for advertising, profiling, or external targeting.
This is a long-term commitment, not a tactical choice.
Data Principles We Follow
ONETUZA is built around a small set of data principles that guide both system design and day-to-day operation.
Purpose Limitation
Data is collected and used only for clearly defined academic purposes approved by the institution. If a use case does not serve that purpose, the data is not used.
Minimal Exposure
Access to data is role-based and purpose-limited. Users and systems see only what is necessary to perform their function — nothing more.
Institutional Ownership
Academic data remains under the authority of the school. ONETUZA processes data strictly on behalf of institutions, not independently of them.
No Secondary Use
Data is not reused for unrelated objectives. There is no resale, cross-institutional aggregation, or behavioural monetisation.
Legal & Regulatory Alignment (India)
ONETUZA is designed with Indian data protection laws in mind, not retrofitted after the fact. This includes alignment with:
The Digital Personal Data Protection Act, 2023 (DPDP Act) — Governing lawful processing, consent, purpose limitation, and data principal rights.
The Information Technology Act, 2000 — Including provisions related to electronic records and data protection.
The Information Technology Rules, 2011 — Where applicable to sensitive personal data handling.
Where institutional or board-level requirements exceed statutory minimums, ONETUZA defers to institutional policy. Compliance is treated as a baseline, not an endpoint.
Data Storage & Infrastructure
ONETUZA uses cloud infrastructure hosted on Amazon Web Services (AWS).
Data is stored on servers located in India.
Infrastructure is designed for durability, controlled access, and availability.
Environments are logically separated and access is monitored.
These choices are made to support reliability while maintaining jurisdictional clarity.
Use of Language Models and Analytical Systems
ONETUZA may use language models to improve how information is presented and understood by humans. Their role is limited and clearly defined.
Language models may be used to:
Convert structured system outputs into readable explanations.
Summarise insights for teachers or school leaders.
Provide contextual wording around already-derived results.
They are not used to:
Analyse raw academic data.
Determine learning outcomes.
Generate academic signals.
Make or update academic judgments.
Core academic analysis is handled by ONETUZA’s internal systems. Language models assist with communication, not decision-making.
To preserve privacy and accountability:
Identifiable student data is masked or abstracted.
External models do not retain institutional data.
Outputs are treated as assistive, not authoritative.
What We Explicitly Do Not Do
To avoid ambiguity, ONETUZA does not:
Sell or license academic data.
Use data for advertising or targeting.
Build cross-school student profiles.
Rank students for external comparison.
Monetise behavioural or engagement patterns.
These practices are incompatible with educational responsibility.
Access, Accountability, and Auditability
Access to data is logged and role-restricted. The system is designed so that the data usage can be traced, reviewed, and questioned when required.
If a school asks how or why data was used in a particular context, ONETUZA is built to provide a clear, auditable answer.
A Long-Term Commitment
Data responsibility is not a one-time compliance exercise. ONETUZA is built to operate across academic years and long-term institutional relationships. That requires trust that compounds, not erodes.
Our commitment is simple:
Data is used only for the benefit of the institution that provides it.
Data is never treated as a commercial asset.
Legal alignment evolves as regulations change.
We believe this restraint is a competency, not a constraint.
In Closing
ONETUZA exists to make learning patterns visible — not to extract value from data.
In education, responsibility is not optional. It is foundational.
ONETUZA’s data practices are reviewed continuously through legal guidance, institutional feedback, and real-world use — not assumption.