Skip to main content
Review Draft v0.9Cutoff: 17 Oct 2026

AI Processing, EORA and Automated Suggestions Notice

How EORA and external LLMs are routed, token limits, zero data retention, and age restrictions.

Legal Review & Compliance Status Notice

This policy draft is tailored to AI Tathastu's verified architecture and engineering practices. Under India's phased legal framework (Digital Personal Data Protection Act, 2023 and DPDP Rules, 2025), substantive obligations commence in scheduled tranches.

Any item labelled with an [Awaiting Verification] tag designates operational data (such as formal legal entity name, designated grievance officer contacts, or vendor contractual tiers) reserved for verified business confirmation. This platform makes no unverified certification claims.

Important provider restrictionAs of the cited Gemini Developer API terms effective March 2026, the developer API must not be used in an API client directed to or likely accessed by people under 18. Google also distinguishes unpaid from paid content-use practices: the unpaid tier may use inputs/outputs to improve products and warns against submitting personal information. Therefore do not route learner CVs or other personal data to an unreviewed Gemini tier; review broader product eligibility before enabling Gemini anywhere on AI Tathastu. See https://ai.google.dev/gemini-api/terms .

1. Why AI Tathastu uses AI#

AI Tathastu may use language models for opt-in CV interpretation, learner support through EORA, explanations, suggested lessons/roadmaps, skills gap interpretation or other clearly labelled features. Deterministic parsers, ordinary rules and database lookups are not equivalent to sharing data with an external model. Available models and providers may vary by feature, availability and configuration.

2. What might be sent#

Only the minimum authorized context needed for the particular operation: a prompt, part of CV text, reviewed academic/skills context or questions asked to the tutor. Do not include credentials, raw secret keys or unrelated private records in model requests. Never submit someone else's CV or confidential material without the necessary authority.

3. Provider eligibility and routing#

Possible configured vendors include Groq, Cerebras, Google Gemini, OpenRouter, Mistral and SambaNova. These names are not a representation that every provider currently processes data. Multi-provider failover must only use recipients covered by the user's notice/permission and approved age, location, privacy and security criteria. A provider becomes active only after passing the current provider register and contract review.

OpenRouter can forward the prompt to a selected upstream model provider with different retention/training practices. An approved router name alone is not a complete vendor disclosure. Groq's data settings likewise need verification for the actual account and feature. Avoid claims of universal zero retention or zero training.

4. Decision support, not proof#

Model outputs can be incorrect, biased, incomplete, outdated or unsupported. A suggested skill does not count as a verified skill. Recommendations do not guarantee jobs, research outcomes, grades or placements. Consequential academic, eligibility or employment decisions require suitable human review and an opportunity to correct underlying data.

6. Learning and coding safety#

Generated lesson text, citations, simulations, code, source summaries and advice should be checked before reliance. Executable code features must use the approved sandbox and safety protections; a chat answer is not professional advice.

7. Data retention and requests#

Our storage, provider logging and model data-use handling differ. The exact retained items and periods must be listed after a vendor and infrastructure review. For questions or opt-out requests contact Awaiting Verification: privacy contact.

Questions or privacy inquiries?

Reach out to our privacy desk or review grievance redressal procedures.