Children’s Privacy Policy (COPPA / DPDP Addendum)

Welcome to Resostu. Because our platform and portal handle services for students and minors under the age of 18, we enforce strict child privacy protections across our infrastructure.

This policy forms an addendum to our main Privacy Policy and explicitly complies with:

• India: Digital Personal Data Protection (DPDP) Act (Protection for users under 18).
• United States: Children’s Online Privacy Protection Act (COPPA) (Protection for users under 13).
• European Union / United Kingdom: General Data Protection Regulation (GDPR / UK GDPR) age-appropriate design standards.

Resostu is officially configured and tagged as a Child-Directed Service (TFAT / TFCD) across our platform and third-party advertising partners.

• No Targeted Advertising: We do not allow third-party networks (including Google AdSense) to serve personalized, interest-based, or behavioral advertisements to minors on resostu.com. Only contextual ads (based strictly on page text) are displayed.
• No Behavioral Profiling: We do not build demographic or behavioral ad profiles on students.
• No Tracking Pixels or Cookies: We disable remarketing signals, Google Signals, and cross-site tracking pixels across our student dashboards.

We adhere strictly to the principle of Data Minimization. We do not condition a student’s participation in any educational activity, note access, or tool on disclosing more personal data than is strictly necessary to provide the service.

Information We May Collect (Necessary Operational Use Only):

1. Account Basics: Name, email address, or user ID supplied during registration for portal access.
2. Academic Information: Grade level, enrolled subjects, or tuition details required to show appropriate study materials.
3. Technical Security Data: Basic, non-persistent server logs used strictly to ensure platform security, uptime, and abuse prevention.

Resostu does not sell, rent, trade, or share any student personal information with third parties for commercial or promotional purposes.

Data is strictly processed by essential backend infrastructure service providers (e.g., database hosting) under strict confidentiality agreements requiring equal levels of child data security.

Under global child privacy framework standards, parents and legal guardians retain full oversight over their children's data.

Parents/Guardians have the right to:

1. Review Data: Request a copy of the personal information stored about their child.
2. Revoke Consent: Instruct us to stop collecting or processing further data from their child.
3. Request Deletion: Demand the immediate and complete purge/deletion of their child’s account and associated data records.

To exercise any of these rights, please contact our privacy compliance team directly at:

• Email: support@resostu.com
• Subject Line: Parental Privacy Request - [Child's Name/Username]

We implement industry-standard encryption, strict administrative access limits, and regular security reviews to prevent unauthorized access to minor data. Student records are retained only for as long as the account remains active for educational purposes and are deleted upon account closure or parental request.