Submit a data-subject request

If you are a tutor, student, parent, or staff member of an Institute that uses Pathshala OS, your Institute is the data controller for your account. The fastest path is usually to ask your Institute admin directly — they can export, correct, or delete your data inside the portal.

If your Institute is unresponsive or you would prefer to contact Pathshala directly (for example, you are the Institute owner, or you are a visitor with no Institute), continue with the form below.

Depending on the law applicable to you, your rights include:

• Access — a copy of the personal information we hold about you (GDPR Art. 15, DPDP §11, CCPA §1798.100).
• Correction — fix inaccurate or incomplete information (GDPR Art. 16, DPDP §12, CCPA §1798.106).
• Deletion — “right to erasure” (GDPR Art. 17, CCPA §1798.105, DPDP §12(3)).
• Portability / export — receive a structured, machine-readable copy (GDPR Art. 20).
• Restriction or objection — limit or object to processing (GDPR Art. 18 & 21).
• Opt out of “sale” or sharing — Pathshala does not sell personal data; this option exists so we record your preference clearly (CCPA / CPRA).
• Withdraw consent — where processing was based on consent (GDPR Art. 7(3), DPDP §6(4)).
• DPDP grievance — escalation to our Grievance Officer at dpo@pathshala.co if a previous request was not resolved.
• COPPA / FERPA parental request — for parents and legal guardians of minors.

To protect against impersonation, we will verify your identity before responding. Verification is proportionate to the sensitivity of the request:

• For institute-account requests we typically respond to email from the address on file and may require confirmation from your Institute admin.
• For Institute owner requests we send a confirmation email to the owner address on file.
• For a parent acting on behalf of a minor we may ask for documentation showing the relationship (e.g., enrolment confirmation).

We will never ask for a full government-ID image unless legally required for a particularly sensitive request, and will delete any ID image you send us after verification.

• Acknowledgement — within 5 business days.
• Resolution — within 30 days under GDPR / DPDP / DPDP grievance, extendable by a further 60 days where reasonably necessary; within 45 days under CCPA / CPRA, extendable to 90; within 45 days under COPPA.
• Deletion — production deletion begins no sooner than 72 hours after verification; offline backups roll over for up to 30 days thereafter. See Privacy §5.

Submissions are confidential, rate-limited, and CAPTCHA-gated. You will receive an acknowledgement to the email you provide.