Your information.
Handled with purpose.

This notice covers suhimark.com, its SIH walkthrough, invitation-only sample preview, demo-booking links and contact channels. “SuhiMark”, “we” and “our” refer to the SuhiMark service. Our contact for privacy questions and complaints is support@suhimark.com.

The public website explains a product in development. Prepared examples are not a live examination record system. A live institutional pilot or service requires a separate agreement and service-specific notice identifying the responsible parties, permitted processing and applicable safeguards. The V7 architecture describes intended controls; a diagram does not establish that every control is deployed.

Browsing

Hosting and network services may process IP address, browser or device information, request time, requested URL, response status and technical diagnostics to deliver the site, maintain reliability and investigate abuse. Avoid personal information in URL parameters.

Contacting SuhiMark

We receive the name, email or phone number you use, institution details if supplied, your message and any attachments you send. These are used to answer the request, arrange a demonstration and keep relevant correspondence.

Booking a demo

The link opens Cal.com. Booking details can include your name, email, selected time, time zone and submitted answers. Meeting-provider information depends on the location selected. Do not include confidential student information in booking notes.

Prepared examples

Public review and quiz examples keep interaction state in the page. They do not send a paper to a grading model or publish a real result. Reloading or restarting clears prepared decisions.

We do not embed advertising pixels or behavioural analytics in the current site. Hosting security and operational records are separate from advertising tracking. We do not sell personal information collected through these website interactions.

The preview-access form receives an email address, institution code and invitation token. It validates the form and token and uses a keyed, time-bucketed value derived from the email to limit repeated attempts. The handler does not save the raw email or institution code as an account profile. Hosting and security records may still exist.

A successful check sets a signed, one-hour preview cookie. It unlocks a sample workspace; it does not verify institutional identity or create a staff role. An institution code is not authorization to access real student records.

Files selected in the current sample workbench use a browser-local preview rather than a production upload service. Use synthetic material only. The preview is not an approved channel for real student records, confidential exams or identity documents.

Theme preference · local storage

suhimark-theme remembers light or dark mode on your device until you clear site storage or change the preference. If storage is unavailable, the theme still works for that visit.

Preview access · essential cookie

suhimark-preview is set after successful preview access. It expires after one hour and is HttpOnly, SameSite Strict, and Secure on HTTPS. Clearing site cookies removes the local session.

External services

Cal.com, WhatsApp and the selected meeting provider may use their own cookies or account information after you open their services. Their notices explain those practices.

The WhatsApp control is a link, not an embedded chat tracker. Opening its contact panel does not load a WhatsApp script. Choosing a WhatsApp link opens the external service; you decide whether to send the prefilled message.

For a separately agreed live service, the institution usually determines the educational purpose and authorized recipients. SuhiMark processes assessment information under agreed instructions; any independent purpose needs its own lawful basis and notice. Roles must be documented for the actual arrangement.

The agreed dataset may include student IDs and rosters; scanned answers and handwriting; questions, answer keys and rubrics; literal transcriptions and evidence regions; proposed marks and feedback; reviewer discussions and corrections; approval history; checked reports; parent contacts and delivery permissions. Collect only what the agreed assessment needs.

1. Intake: connect the scan to the correct student and assessment, preserve the original and record input versions.
2. Reading and evaluation: prepare derivative views, map answers and send only permitted evidence to an approved evaluation route.
3. Expert review: authorized SuhiMark reviewers inspect assigned copies, correct decisions with reasons and approve a version.
4. Release: the institution authorizes the result version and recipients. Completion alone does not authorize parent delivery.

These are V7 service boundaries, not a claim that live integrations are available in the preview. Actual processing, providers and retention must be settled before a live pilot.

Website and enquiry information supports requested pages, replies, demonstrations, security and applicable obligations. Asking about a demo does not authorize student-data processing, unrelated marketing or model training.

Where processing relies on consent, it must be specific to the described purpose and can be withdrawn through support@suhimark.com. Withdrawal affects future consent-based processing; it does not undo earlier lawful processing or records required under another applicable obligation. If the service cannot continue without necessary information, we will explain the consequence.

A live institutional arrangement must identify a valid legal basis for each purpose. A teacher’s upload, invitation token or parent email is not a substitute for required authority, notice or consent.

Public booking and enquiries are intended for adults arranging institutional services. Children should not submit personal data or create a preview identity. If a child’s information was submitted inappropriately, contact support@suhimark.com so we can investigate and arrange appropriate removal or restriction.

Before processing children’s records, the institution and SuhiMark must establish applicable age rules, required parental or guardian authorization, verification and permitted educational use. India’s DPDP framework defines a child as a person under 18; obligations and exemptions depend on the provisions in force and processing context. An educational purpose is not an automatic exemption. See the official DPDP Act.

Parent delivery is separate. The intended service requires the institution to verify the recipient relationship and enable delivery of the approved report. Correct outdated or wrong addresses before dispatch. Revocation can stop future access; it cannot recall an already-downloaded report.

AI proposals can be wrong. In AI, clear copies complete after automated evaluation and checks; uncertain copies require SuhiMark expert resolution before handover. AI+ includes expert review of every question in every copy. Institutional publication remains separate in both modes. Unclear writing must remain unresolved until evidence is available; it must not be invented or converted into a zero.

The public walkthrough does not train models or call a live grading model. For a live service, the approved provider, permitted payload, location, retention and provider-training conditions must be documented before use. We do not promise zero provider retention or India-only processing without verifying the specific service and account.

Correction and training are different purposes. The proposed learning process admits only permissioned, source-linked, quality-checked examples. It separates reader and grader training, freezes independent test groups, and tests candidates before promotion. A software, rubric or prompt fix may be more appropriate. A reviewer correction does not automatically enter a training dataset.

Future learning agreements must specify lawful authority, permitted uses, dataset and model lineage, retention and withdrawal effects. Removing an example is not guaranteed erasure of its influence from already-trained weights. Existing exam decisions remain tied to their approved versions.

Information may be available to authorized personnel handling your enquiry and providers needed for the requested service. Access must match the purpose. Disclosure may also be necessary for a valid lawful request, legal obligations or investigation of misuse, subject to applicable safeguards.

Vercel · hosting

Delivers the public site and server routes; infrastructure can process request and diagnostic information. Vercel privacy notice ↗

Cal.com · optional booking

Receives information submitted to its scheduling page. The selected meeting service has its own practices. Cal.com privacy policy ↗

WhatsApp · optional contact

Sending a message shares your WhatsApp account details and message with the SuhiMark contact account. Use it for general enquiries, not student records. WhatsApp privacy policy ↗

Email and institutional providers

Email providers process correspondence. A live service agreement must identify approved storage, OCR, AI, delivery and support providers. A model named in a diagram does not establish that student data has been sent to it.

The website is internationally accessible. Hosting, scheduling, email and messaging providers can process information outside your country. The public site is not an India-only data-residency service.

A live deployment needs a documented location and transfer assessment before student information reaches a provider. Where regional restrictions apply, ineligible external routes must stay unavailable. Contracts, onward transfers and safeguards must be checked for the actual deployment.

Law depends on the people, purpose, service and jurisdiction. India’s DPDP Act and 2025 Rules have phased commencement; this notice does not imply every provision was operative on its update date. See the notified Rules and commencement provisions.

Where EU or UK data-protection law applies, relevant lawful-basis, rights, processor and transfer requirements must be addressed. US children’s and education-record rules, including COPPA or FERPA where applicable, need their own assessment. Worldwide access is not worldwide compliance certification. See the EDPB transfer guide and FTC education-service guidance.

Retention depends on purpose and binding obligations. Theme preferences stay until cleared; preview cookies expire after one hour; prepared review state lasts for the page session. Security counters use short attempt windows, but a counter’s expiry is not proof that its database row or hosting logs have been erased.

Enquiry and booking correspondence may remain while the request, follow-up or a legitimate recordkeeping need continues. There is no single verified deletion period covering all external-provider records. Ask what we hold or request deletion through support@suhimark.com; we will explain information that must be retained and why.

Before live processing, the institutional agreement must set retention and deletion rules for originals, derivatives, transcriptions, discussions, decisions, reports, delivery records, backups and separately permitted learning artifacts. Deletion must account for derived copies and provider systems. Backups and legal holds may require a different timetable, not a promise of instant erasure.

The current website uses HTTPS, signed preview sessions, server-side token validation, request-size and origin checks, and database-backed preview-attempt limits. These reduce particular risks; they do not make the system immune to misuse.

The institutional design adds tenant-scoped permissions, private storage, controlled document workers, versioned decisions, bounded retries and audit records. Complete production integration, access review and security verification are prerequisites for live use, not certifications conferred by this page.

Report suspected exposure, a wrong-recipient report, unauthorized access or a security issue to support@suhimark.com, with the affected page, time and a minimal description. Do not send passwords, tokens or unredacted student records. We will investigate and handle applicable notification and remediation duties under relevant law and the service agreement.

Contact support@suhimark.com to ask about information associated with you, request correction or deletion, withdraw consent where relevant, raise a concern or request this notice in a more accessible form. Applicable law may also provide access, portability, restriction, objection, nomination or regulatory-complaint rights, depending on jurisdiction and processing.

1. Use the subject Privacy request and describe your relationship: visitor, institution representative, student or parent.
2. Provide enough context to locate the record, such as a booking email or institution reference. Do not attach identity documents initially.
3. Proportionate verification and coordination with the institution may be needed before disclosure or changes to institutional records.
4. We will explain the outcome or a lawful restriction and use the applicable statutory timeframe. Follow up if unresolved; available regulatory or judicial remedies are not waived.

A privacy request differs from an academic appeal. For a mark or feedback dispute, start with the institution so the published version, evidence and authorized reviewer can be identified.

Updates will show a revised date and version. Material changes requiring a new notice or consent must be addressed before the new purpose begins. Continued browsing does not authorize training or a new student-data use.

Questions: support@suhimark.com. Related document: Website & preview terms.