Privacy
Last updated 10 October 2026
- Who we are
- Our two roles
- What we collect and why
- Children's data
- How AI is used
- Who else sees it
- Where it is kept
- How long we keep it
- How we keep it safe
- Your rights
- Grievance officer
- Cookies and storage
- Changes to this page
- Contact
Who we are
WISCA (Worksheet Intelligence & Scoring Console for Assessment) is operated by Cusiosense Learning India Private Limited, a company recognised by DPIIT. Our CIN is U58200UP2025PTC238093. Our registered office is UTC, Tower-A, 21/3, sector 135, Noida, India.
In this page, "we" and "us" mean that company, and "WISCA" means the web platform and this website.
Our two roles
The law cares about who decides what happens to personal data. Here that depends on whose data it is.
For a school's pupils, we are the processor
When a school puts its pupils into WISCA, the school decides why and how their information is used. We keep it, process it and show it to the right people on the school's behalf, and we do nothing else with it. In the words of India's Digital Personal Data Protection Act, 2023, the school is the data fiduciary and we are its data processor. If you are a pupil or a parent, your first contact for anything about pupil records is your school.
For people who contact us, and for staff sign-in, we are the controller
When a person asks us for a demo on this website, or chats with us here, we decide what to do with what they tell us, so we are responsible for it. The same goes for the sign-in details of teachers and other staff: we decide how sign-in works and what it records. Here we answer to you directly.
What we collect and why
| Whose | What | Why |
|---|---|---|
| Pupils (through the school) | Name, class, whether a parent's consent is recorded (granted or withdrawn, and when), a print setting such as larger print, answer sheets as scanned images, marks, readings of answers, results, and when the pupil left the school. | To set and print papers, mark them, and show the school and the pupil how the class is doing. For nothing else. |
| Parents (through the school) | A name, a sign-in, and the link to their child. | To show a parent their child's shared results and the school's notices. |
| Teachers and school staff | Name, role, classes taught, a sign-in name and a password. The password is kept only in scrambled form, so nobody at WISCA can read it. If two-step sign-in is on, its secret and recovery codes. | To let the right person in and nobody else. We do not ask for a phone number or a personal email address for sign-in. |
| Everyone who signs in | A record of who changed a mark or a setting, when and why (the audit trail), and a short-lived session so you stay signed in. | So every mark has a history and a stolen sign-in can be shut down at once. |
| People who ask us for a demo (form or chat) | Name, role, school, city, email address and, in the chat, a phone number if you give one. What you asked or wrote. A reference of six characters. The version and time of the consent you gave. The page you were on, the website that sent you, any campaign tag in the address, the kind of device (phone, tablet or computer), and a scrambled form of your internet address. | To reply to your request and to keep the form and chat from being misused. The scrambled address is used only to limit abuse and to notice a repeat visit, and is never shown. Anything you type in the chat has email addresses and long numbers masked before it is kept. |
| Visitors to this website | Our host keeps ordinary request records (time, the address asked for, the result). | To run the site, find faults and keep it safe. |
We use what people tell us on the form and in the chat only to reply to them. The request is emailed to our team at info@alfanumrik.com, so a copy is also in that mailbox. We keep it for up to 24 months after our last contact with you, and sooner if you ask us to delete it.
We do not sell personal data, and WISCA has no advertising.
Children's data
Most of the people WISCA knows about are children. The law treats anyone under 18 as a child, and so do we. This is what that means in practice:
- Pupils reach WISCA through their school. We do not collect pupil information from a child directly on this website, and the home page, form and chat are meant for the adults who work in or with schools. If a child has written to us there, tell us and we will delete it.
- The school records whether each pupil's parent has given or withdrawn consent. A scanned page for a pupil with no consent on record is not kept as an image. If a parent withdraws consent, WISCA stops making new digital records for that pupil, and the school can ask for the pupil's records to be erased.
- Nobody sees a pupil's marks until the teacher shares them. A pupil sees their own results and a parent sees their child's. A school administrator sees counts only, with no pupil named or ranked.
- We do not show advertising to anyone and we do not build profiles of pupils for any purpose other than helping their own teachers.
How AI is used
WISCA has two optional features that use outside AI services. Each one is off for every school until the school's administrator reads the notice in the settings and switches it on. Either can be switched off again.
The assistant
A teacher types a sentence such as "a test for 7-A on chapters 3 and 4", and the assistant makes the paper and checks it. The service that answers (Anthropic) is sent the teacher's own sentence and counts, such as how many papers are marked, a class average, chapter titles and labels that WISCA owns. It is never sent a pupil's name, answer, mark or identifier. Before a sentence is sent, WISCA refuses it if it contains the name of a pupil on the roster, an email address or a phone number. That check cannot catch everything, so please do not type names into the assistant.
Each assistant run keeps what it did as steps (the identifiers of papers and counts, never a pupil) for 90 days, and the teacher can see them. The assistant asks the teacher before anything a pupil or a parent will see.
Handwriting reading
If a school switches it on, WISCA cuts out the small area where a pupil wrote an answer and sends only that picture to the reader the school has chosen. This happens only for a pupil whose parent's consent is recorded. The picture can contain whatever the pupil wrote. Two readers are possible:
- Google Cloud Vision receives the picture of each area and returns the text it reads. It is not sent the question or the marking guide.
- A Claude model (Anthropic) receives the picture and also the question and the marking guide.
A reading is only a suggestion. A teacher reviews it, and nothing becomes a mark until the teacher confirms it. The stored copy of a picture made for reading is deleted once it has been sent and answered, and any copy still waiting after 48 hours is deleted anyway.
How long each AI service keeps what it receives is set by our agreement with that service. Google Cloud Vision does not offer a processing location in India. A school should switch these features on only after it has approved that arrangement.
Where it is kept
WISCA is hosted on Cloudflare's network. Our database has an Asia-Pacific location, and the application runs from Singapore, next to the database. Cloudflare can pin a database only to some regions, and Asia-Pacific is a best-effort location, not a guarantee. We do not promise that data stays in India.
The outside AI services listed above are used only when a school switches them on, and they process what they receive wherever they operate.
How long we keep it
We keep things for as short a time as the work allows, and a schedule deletes them. A school's contract can set a different length for the first three rows. These are the lengths until it does.
| What | How long |
|---|---|
| A pupil's records | 365 days after the school marks the pupil as having left (a contract can set 30 to 1,825 days). The school is told 30 days before the erasure runs, and its administrator can place a hold, one year at a time, if it needs to keep the records longer. |
| Scanned images of pages | 365 days after scanning. The page, its marks and its reading stay. |
| Printed papers | 365 days after printing. A paper can be printed again from its record. |
| Uploads that never became pages | 30 days. |
| Pictures made for handwriting reading | Deleted once sent and answered; at most 48 hours otherwise. |
| Assistant run records | 90 days. |
| The audit trail | Three years. |
| A sign-in session | Ends after 2 hours without use, and at most 12 hours after sign-in. |
| A demo request, and the chat that came with it | Up to 24 months after our last contact, or sooner if you ask. |
| Backups | Encrypted, and removed on a schedule. A record that has been erased therefore leaves our backups when the backups that held it expire. |
Erasure on request
A school administrator can ask for a pupil's records to be erased, for example when the pupil leaves or when a parent withdraws consent. The erasure runs after seven days, which gives time to change one's mind, and it can be cancelled until then. It deletes everything WISCA holds about the pupil, including the stored files. The pupil's sign-in stays as an empty shell with the name "Erased student", because other records, such as the history of a mark, point to people who acted. When a school leaves WISCA, all of the school's data can be erased in the same way.
How we keep it safe
- Each school's data stays its own. The database checks which school every request belongs to. Automated tests try, for every role, to read another school's records, and a release fails if they can.
- People see what their job needs. A teacher sees their own classes, a parent sees their own child, and an administrator sees counts only.
- Every change leaves a record. The audit trail is sealed as it is written and checked against copies kept in locked storage, so it cannot be edited afterwards.
- Sign-in is guarded. Passwords are kept only in scrambled form. After repeated wrong passwords the account is locked for a time. The cookie that keeps you signed in cannot be read by the page's scripts. Two-step sign-in with an authenticator app is available to every account, and is required for WISCA's own support staff.
- Everything travels encrypted. The site is served over HTTPS only, and the browser is told never to use anything else.
- Files are private. Papers and scans are stored privately and are handed out only after the system has checked who is asking.
- Backups are encrypted and are restored in rehearsals, so we know they work.
No system is perfectly safe. If something goes wrong with personal data, we will tell the school and, where the law requires it, the people affected.
Your rights
You may ask us to:
- tell you what personal data we hold about you and how we use it (access);
- correct what is wrong or out of date (correction);
- erase it (erasure);
- take back a consent you gave, as easily as you gave it (withdraw consent);
- deal with a complaint (grievance, below).
To use any of these, write to info@alfanumrik.com and say who you are and what you would like. We may need to check that you are the person you say you are. We will answer as soon as we can and tell you what we have done.
If your information is in a school's WISCA records, the school decides about it and we act for the school. Please ask the school first. If you write to us instead, we will pass your request to the school and help it answer. Withdrawing consent for a demo request stops us from using your details to reply to you, and we will delete them.
If you are not satisfied with our answer, you may take a complaint to the Data Protection Board of India, as the Digital Personal Data Protection Act, 2023 provides.
Grievance officer
Complaints and questions about personal data go to info@alfanumrik.com. We will publish the name and the postal address of our grievance officer on this page when the officer is appointed.
Changes to this page
When we change this page we will change the date at the top. If a change affects how we use information we already hold, we will tell schools before it takes effect.
Contact
Write to info@alfanumrik.com, or to Cusiosense Learning India Private Limited, UTC, Tower-A, 21/3, sector 135, Noida, India.
This page is a plain-language policy written for WISCA. It has not been reviewed by a lawyer yet.