Part A - General Privacy PolicyThis Part A applies to all visitors to edisonos.com and to all business users - tutors, tutoring companies, community-based organizations (CBOs), and school & district administrators who create an account or purchase an EdisonOS subscription.
Section A1 – About Us and Legal Entity
EdisonOS is an assessment software operated by Kalvi Software, Inc., a C-Corporation registered in Delaware, USA (the “Company,” “we,” “us,” or “our”).
Platform development and engineering support are provided by TeachEdison Solutions Pvt Ltd, a private limited company incorporated in India. It acts as an authorized sub-processor under a Data Processing Agreement with Kalvi Software, Inc. and is not the data controller for any user data.
Data Controller: Kalvi Software, Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, United States
Privacy Contact: privacy@edisonos.com
Section A2 – Data We Collect from Business Users
A2.1 Account and Identity Data
When you register for an EdisonOS account or book a demo, we collect:
- Full name and job title
- Business email address
- Orgnanization name and type (tutoring company, CBO, schools)
- Phone number (optional, if provided)
- Password (hashed; never stored in plaintext)
A2.1 Account and Identity Data
When you register for an EdisonOS account or book a demo, we collect:
- Full name and job title
- Business email address
- Orgnanization name and type (tutoring company, CBO, schools)
- Phone number (optional, if provided)
- Password (hashed; never stored in plaintext)
A2.2 Billing and Payment Data
EdisonOS uses Stripe, Inc. as its payment processor. When you enter payment details:
- Your card number, CVV, and expiry date are transmitted directly to Stripe and are never stored on EdisonOS servers.
- We store only a Stripe customer token, the last four digits of your card, card brand, and billing address for invoice and subscription management.
- All payment processing is governed by Stripe’s Privacy Policy (stripe.com/privacy) and Stripe’s Terms of Service.
A2.3 Usage and Engagement Data
When you use the EdisonOS platform, we automatically collect:
- Log data: IP address, browser type, operating system, referring URL, pages visited, session duration
- Feature usage patterns (e.g., which tools are used, tests assigned, reports generated)
A2.4 Communications Data
- Support: messages you send to help@edisonos.com or through the in-app help center
- Marketing: email address for product updates and newsletters, if you opt in
- Feedback and survey responses, if voluntarily provided
This data is used to operate the platform, diagnose issues, and improve functionality.
A2.5 Cookies and Tracking Technologies
EdisonOS uses the following types of cookies:
- Essential cookies: Required for authentication, session management, and platform security. Cannot be disabled.
- Analytics cookies: Used to understand how users navigate the platform (e.g., page views, feature usage). Anonymised where possible.
- Preference cookies: Store your settings and preferences across sessions.
We do not use advertising cookies or sell data to ad networks. You can manage non-essential cookies through your browser settings. Note that disabling essential cookies will prevent you from logging in.
Section A3 – How We Use Business User Data
- To authenticate your account, manage your subscription, assign tests, generate reports, and deliver all platform features – Providing the service
- To charge your subscription, issue invoices, manage billing cycles, and handle refunds - via Stripe – Processing payments
- To respond to support requests, diagnose technical issues, and resolve billing queries – Customer support
- To analyze aggregated, anonymized usage patterns to improve platform features and user experience – Product improvement
- To send transactional emails (account confirmation, password reset, billing receipts) and, where you have opted in, product updates and newsletters – Communications
- To detect, investigate, and prevent unauthorized access, abuse, or fraudulent activity – Security and fraud prevention
- To meet our obligations under applicable law, including tax law, financial regulations, and court orders – Legal compliance
Section A4 – Payment Processing and Stripe
EdisonOS integrates Stripe to process all subscription payments. By purchasing an EdisonOS subscription, you acknowledge that:
- Payment data (card details) is processed directly by Stripe, Inc., and is subject to Stripe’s Privacy Policy and PCI-DSS compliance standards.
- Stripe may collect additional data about your device and transaction as part of its fraud-prevention services.
- EdisonOS does not have access to your full card details at any point.
- Stripe’s use of your personal data is described at stripe.com/in/privacy
Your Stripe data is not used for any advertising or marketing purpose by EdisonOS.
Section A5 – Subscription, Cancellation, and Refund Policy
A5.1 Subscription terms
EdisonOS subscriptions are billed monthly or annually as selected at checkout. Subscriptions renew automatically at the end of each billing period unless cancelled. EdisonOS integrates Stripe to process all subscription payments. By purchasing an EdisonOS subscription, you acknowledge that:
A5.2 Cancellation
You may cancel your subscription at any time by contacting help@edisonos.com or through your account settings. Cancellation takes effect at the end of the current billing period. You will retain access to the platform until that date.EdisonOS integrates Stripe to process all subscription payments. By purchasing an EdisonOS subscription, you acknowledge that:
A5.3 Refunds
Annual subscriptions: Refund requests submitted within 14 days of the initial purchase will be honoured in full. Requests after 14 days are handled on a case-by-case basis.
To request a refund, email help@edisonos.com with your account email and reason.
A5.4 Data after cancellation
Upon cancellation, your account data and student data are retained for 60 days to allow export, after which they are securely deleted. See Part B, Section 8 for student data retention details.
Section A6 – Data Sharing and Third Parties
We do not sell your personal data. We share business user data only in the following circumstances:
- Stripe (payment processing) - as described in Section A4
- Cloud infrastructure providers (AWS, Railway, Vercel) - to host and operate the platform; all are contractually bound to process data only on our instructions
- Support tools (Sentry, SendGrid) - to monitor platform health and deliver transactional emails
- TeachEdison Solutions Pvt Ltd - our affiliated engineering team in India, operating under a DPA with equivalent protections
- Legal authorities - when required by law, court order, or to protect the safety of users or the public
- Business transfer - in the event of a merger, acquisition, or sale of assets, with advance notice to affected users
All third-party sub-processors are bound by contracts that prohibit them from using your data for any purpose other than providing services to EdisonOS.
Section A7 – Data Retention
| Data Type | Retention Period | Deletion Method |
|---|---|---|
| Business user account data | Duration of active subscription; deleted 60 days after account closure on request | Secure deletion from all systems |
| Payment & billing records | 7 years (legal / tax requirement) | Retained by Stripe; internal records purged after legal hold period |
| Usage logs & analytics | Rolling 12 months; aggregated and anonymised thereafter | Automated deletion / anonymisation |
| Support correspondence | 3 years from last interaction | Secure deletion |
| Marketing opt-in records | Until opt-out + 12 months | Secure deletion on request |
You may request deletion of your account data at any time by emailing privacy@edisonos.com. Requests will be fulfilled within 30 calendar days, subject to legal retention requirements.
Section A8 – Your Privacy Rights
A8.1 Rights for all users
Regardless of where you are located, you have the right to:
- Access a copy of the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your account data (subject to legal retention obligations)
- Opt out of marketing communications at any time using the unsubscribe link in any email
A8.2 CCPA (California residents)
California residents may request disclosure of personal information collected, sold, or disclosed for a business purpose. We do not sell personal information. To exercise your rights under CCPA, email privacy@edisonos.com.
Section A9 – International Data Transfers
Kalvi Software, Inc. is based in the United States. Our platform infrastructure (Railway, Vercel, AWS, Sentry) is operated in the US. If you are accessing EdisonOS from outside the United States, your data will be transferred to and processed in the United States.
Data processed by TeachEdison Solutions Pvt Ltd, in India is subject to a Data Processing Agreement with Kalvi Software, Inc. that provides equivalent protections and ensures compliance with US federal and applicable state privacy laws.
Section A10 – Security
EdisonOS implements industry-standard technical and organizational security measures to protect business user data, including:
- Encryption in transit (TLS 1.2+) and at rest (AES-256)
- HTTPS enforced across all web properties
- Role-based access control (RBAC) limiting internal access to authorized personnel
- Multi-factor authentication available for all accounts
- PCI-DSS compliant payment processing via Stripe
- Regular security reviews and penetration testing
No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact security@edisonos.com immediately.
Section A11 – Contact
For any privacy-related questions, data access or deletion requests, or to exercise your rights:
- Email: privacy@edisonos.com
- Security incidents: security@edisonos.com
- Mailing address: 131 Continental Dr, Suite 305, Newark, DE 19713, United States
- General support: help@edisonos.com
We acknowledge all inquiries within 48 hours and provide a substantive response within 7 business days.
Section A12 – Governing Law (Part A)
This Part A is governed by the laws of the State of Delaware, without regard to conflict of law principles. Any disputes arising under this Part A shall be subject to the exclusive jurisdiction of the state and federal courts located in New Castle County, Delaware, and both parties consent to personal jurisdiction in such courts.