Join our Facebook community. Join now

Legal

Privacy Policy

Last updated on .

This privacy policy ("Policy") describes how datasamy, Inc. ("Eduaide.Ai" or "Eduaide", "we", "us" or "our") collects, protects and uses the personally identifiable information ("Personal Information") you ("User", "you" or "your") may provide through the Eduaide.Ai website (www.eduaide.ai) or in the course of purchasing any Eduaide.Ai products (collectively, "Website"). The Policy also describes the choices available to you regarding our use of your Personal Information and how you can access and update this information. This Policy does not apply to the practices of companies that we do not own or control, or to individuals that we do not employ or manage.

What We Collect and Why

Our guiding principle is to collect only what we need. Here's what that means in practice:

Identity & Access

When you sign up for Eduaide.Ai, the primary personally identifiable information (PII) we collect is your email address. We use this information to authenticate your account, secure access to the Services, and send essential communications, such as account, product, or security notices. We may also send you tips, reminders and offers about Eduaide, and from time to time optional surveys to help us improve our services. You can opt out of these non-essential emails by clicking the “Unsubscribe” link at the bottom of any such message.

If you connect Eduaide to an AI assistant (see AI Assistants You Connect), we keep a record of the connection: which assistant, the permissions you granted, when you connected and when the assistant last used it. The assistant gets access tokens that let it see or make materials in your Eduaide account, within the permissions you granted. We store those tokens as hashes. When a token is refreshed, we keep a random value that lets the assistant retry the refresh for 60 seconds. It stops working after 60 seconds, and a daily cleanup deletes it.

We will never sell your personal information to third parties, and we will not use your email domain or company name in any marketing materials without your explicit permission.

Student Data & Personally Identifiable Information

We do not require, request, or encourage users to enter any student personally identifiable information when using Eduaide.Ai. If you accidentally submit personally identifiable information in any feature within Eduaide.Ai, we delete it upon discovery. You can also contact us at https://eduaide.ai/contact or by emailing us at contact@eduaide.ai if you believe you have accidentally entered personally identifiable information and we will take the appropriate steps to remove it.

Note: Eduaide.Ai is a teacher facing only Service(s) and is neither designed nor directed toward individuals under the age of 18. It is against our Terms of Service for anyone under the age of 18 to use Eduaide.Ai and we reserve the right to terminate any account in accordance to these Terms.

Purchases & Payments

If you sign up for a paid Eduaide.Ai product, you will be asked to provide your payment information and billing address. Credit card information is submitted directly to our payment processor (paddle.com) and doesn't hit Eduaide.Ai servers. Paddle may ask you for personal and/or non-personal information, such as your name, address, email address, credit card information, or other Personal Information. Paddle has a privacy policy (https://www.paddle.com/legal/privacy) that describes their collection and use of personal information. Eduaide.Ai does not control Paddle or its collection or use of information. Any questions or concerns about Paddle's practices should be directed to Paddle. Paddle provides us with certain non-personal information relating to purchases made by visitors to the Website. The non-personal information may include details of the purchase such as the date, amount paid, and product purchased. The non-personal purchase information may be linked to the Personal Information you provide to us (typically limited to your email address, as stated above). Paddle does not supply us with any of your other Personal Information such as your name, address, or credit card information.

Product Interactions

We store on our servers the content that you create, upload, or maintain in your Eduaide.Ai product accounts. This is so you can use our products as intended, for example, creating learning materials in the Eduaide.Ai content generator. As part of this we may store the name of the content you create, your inputs, and the outputs. We keep this content as long as your account is active or you delete it from your history.

Trying Eduaide Without an Account

Some pages let you make a preview without signing in. When you do, we set a cookie with a random identifier in your browser for 30 days, and we store what you typed and the result we generated. We delete them 7 days later unless you create an account or sign in and choose to keep the result, in which case it moves into your account like any other content you create. To limit how many previews can be made, we count requests by your IP address and that browser identifier, and we store both only in hashed form, never the IP address itself. We read the country your request comes from, as reported by our hosting provider, to decide whether previews are available there; we do not store it with your inputs. If you choose to sign up from one of these pages, we set a second cookie for one day that names the page, so we can see which page an account was created from. Please do not type student names or other student information into these pages.

Website Interactions & Analytics

We collect anonymized information about what pages you visit and what you do on our website for analytics and statistical purposes such as conversion rate testing and experimenting with new product designs. This includes, for example, your browser version, which features you used within Eduaide.Ai, how long the pages took to load, and which website referred you to us. These web analytics are anonymized and not tied to you or your account in any way. Where required by law, we obtain consent before using non-essential cookies or similar technologies.

Voluntary Correspondence

When you email or contact us via the Eduaide.Ai contact form, we keep that correspondence, including your email address, so that we have a history of past correspondence to reference if you reach out in the future. We also store information you may volunteer, for example, written responses to surveys. If you agree to a customer interview, we may ask for your permission to record the conversation for future reference or use. We will only do so with your express consent.

Geolocation Data

Our websites and Services do not collect, use, or process biometric or specific location data from you or your devices. The only exception to this is when you provide payment information including a billing address when purchasing a product, in which case the information is securely processed by our payment processor (see Purchases & Payments for more information).

When We Access or Disclose Your Information

To Provide and Maintain Our Products & Services

We use some third-party subprocessors to help run our applications and provide the Services to you. You can view a list of our subprocessors in the Eduaide Subprocessors section below. This includes third-party subprocessors for purposes of hosting the Services, payment processing, and for other business functions such as managing newsletter subscriptions or sending customer surveys.

AI Assistants You Connect

If you connect your Eduaide account to ChatGPT (from OpenAI), Claude (from Anthropic) or Muse (from Meta Platforms), you can ask the assistant to create a material, find materials in your library, open one, or make a differentiated version of one.

We send information to an assistant only for an account that has connected it, and only in answer to a request you make in that assistant. What we send is about the materials you asked for: their titles, formats and dates, their content or a preview of it, links to them in Eduaide, and your plan and how many credits you have left after making one. The assistant sends us what we need to answer, such as the topic, grade, standard or template for a new material, or which material to open. We use it to answer that request, and we save it to your history the same way we do when you make a material on the website, including updating your grade in Settings.

Eduaide makes materials with its own generator, through its own accounts with the subprocessors listed below. The assistant passes on your request and shows the result. Materials made this way are saved to your library like any other content you create (see Product Interactions above). Our logs record which tool was called and whether it worked, plus, for a differentiated version, the title of the original material, as they do on the website. Neither our logs nor our analytics record the topic of your request or the content of a material. Please do not include student names or other student information in your requests.

Each assistant handles the information it receives under its own privacy policy, and keeps it under that policy after you disconnect: the OpenAI Privacy Policy, the Anthropic Privacy Policy and the Meta Privacy Policy. Eduaide does not control these platforms.

You can disconnect an assistant at any time in Settings, under Connected apps. Disconnecting ends its access to your account right away. Removing Eduaide only in the assistant's own settings may leave the connection on our side until it expires, so disconnect in Eduaide too. More detail is on our connectors page.

Legal Compliance

Our policy is to not respond to government requests for user data unless we are compelled by legal process, or in limited circumstances in the event of an emergency request. However, if U.S. law enforcement authorities have the necessary warrant, criminal subpoena, or court order requiring us to disclose data, we must comply.

Business Transfers

If we are involved in a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets --- we don't plan on it but if it happens --- your Personal Information may be transferred as part of that transaction. This includes proceedings related to sale, bankruptcy, liquidation, or steps in contemplation of such activities.

To Help You Troubleshoot or Fix a Software Bug, with Your Permission.

If at any point we need to access your information or content to help you with a support case, we will ask for your consent before proceeding.

Your Rights with Respect to Your Information

At Eduaide.Ai, we strive to apply the same data rights to all customers, regardless of their location. Some of these rights include:

Identity & Access

  • Right to Know. You have the right to know what personal information is collected, used, shared or sold. We outline both the categories and specific bits of data we collect, as well as how they are used, in this privacy policy.
  • Right of Access. This includes your right to access the personal information we gather about you, and your right to obtain information about the sharing, storage, security and processing of that information.
  • Right to Correction. You have the right to request correction of your personal information.
  • Right to Erasure / "To Be Forgotten". This is your right to request, subject to certain limitations under applicable law, that your personal information be erased from our possession and, by extension, from all of our service providers. Fulfillment of some data deletion requests may prevent you from using Eduaide.Ai services because our applications may then no longer work. In such cases, a data deletion request may result in closing your account.
  • Right to Complain. You have the right to make a complaint regarding our handling of your personal information with the appropriate supervisory authority.
  • Right to Restrict Processing. This is your right to request restriction of how and why your personal information is used or processed.
  • Right to Object. You have the right, in certain situations, to object to how or why your personal information is processed.
  • Right to Portability. You have the right to receive the personal information we have about you and the right to transmit it to another party. If you want to export data from your accounts, you can do so directly by contacting us at https://eduaide.ai/contact or by emailing us at contact@eduaide.ai
  • Right to Non-Discrimination. We do not and will not charge you a different amount to use our products, offer you different discounts, or give you a lower level of customer service because you have exercised your data privacy rights. However, the exercise of certain rights may, by virtue of your exercising those rights, prevent you from using our Services.

Many of these rights can be exercised by either signing in and updating your account information or by contacting us at https://eduaide.ai/contact.

If you connected an AI assistant, you can disconnect it at any time in Settings, under Connected apps. Disconnecting deletes the assistant's access tokens and the connection record right away. Deleting your account removes all of your connections. Materials made through an assistant stay in your library until you delete them.

In some cases, we also need to take reasonable steps to verify your identity before responding to a request, which may include, at a minimum, depending on the sensitivity of the information you are requesting and the type of request you are making, verifying your name and email address. If we are unable to verify you, we may be unable to respond to your requests. If you have questions about exercising these rights or need assistance, contact us using our contact form at https://eduaide.ai/contact, by email at contact@eduaide.ai or mail at datasamy, Inc., 2261 Market Street, #10168, San Francisco, CA 94114 USA.

Depending on applicable law, you may have the right to appeal our decision to deny your request, if applicable. We will provide information about how to exercise that right in our response denying the request. You also have the right to lodge a complaint with a supervisory authority. If you are in the EU or UK, you can contact your data protection authority to file a complaint or learn more about local privacy laws.

How We Secure Your Data

All data is encrypted via SSL/TLS when transmitted between our database, servers, and your browser. In addition, we go to great lengths to secure your data at rest. This includes access controls on all systems and data limiting access. Data in our database is encrypted at rest with LUKS (Linux Unified Key Setup). With regard to products, most information is not encrypted while it lives in our database (since it needs to be ready to be sent to you when you need it).

What Happens When You Delete Content in Your Eduaide.Ai Accounts

In our applications, we give you the option to delete content and other data. Anything you delete in your product accounts while they are active are deleted from our database servers. Non-identifying references of the content may be held in logs for a period of time.

Data Retention

We keep your information for the time necessary for the purposes for which it is processed. Retention periods vary by data category and legal requirements. In general:

  • Account and profile data is retained while your account is active, and then deleted from our database after account deletion, subject to legal requirements and limited backup retention windows.
  • Content you create in the product is retained until you delete it or your account is deleted, subject to limited backup and recovery cycles.
  • Support and contact records are retained for as long as needed to respond to requests and maintain support history.
  • Billing and transaction records are retained as required by financial, tax, and accounting laws.
  • Connected third-party integration credentials are retained only while connected and deleted when disconnected or when the account is deleted.
  • AI assistant connections: access tokens expire after one hour and refresh tokens 60 days after their last use, and disconnecting deletes both right away. The connection record is kept until you disconnect or delete your account, or until 60 days after its last use once it has no tokens left. An unfinished connection request expires after 30 minutes. A daily cleanup deletes expired tokens, requests and connection records.
  • Security, abuse-prevention, and operational logs are retained for limited periods appropriate to security and reliability purposes.

We may retain and use information as necessary to comply with legal obligations, resolve disputes, and enforce agreements.

Location of Site and Data

Our products and other web properties are operated in the United States. If you are located in the European Union, UK, or elsewhere outside of the United States, be aware that any information you provide to us will be transferred to and stored in the United States.

Links to Other Websites

Our websites and Services may contain links to other websites or services that are not owned or controlled by us. We are not responsible for the privacy practices of these other sites. We encourage you to be aware when you leave our websites and to read the privacy statements of each and every website that collects personally identifiable information.

Profiling and Automated Decision-Making

Our websites and Services do not engage in profiling or automated decision-making that could have a legal or similarly significant effect on you.

Supplemental EU/UK/Switzerland Privacy Statement

If you are in the European Union (EU), European Economic Area (EEA), United Kingdom (UK), or Switzerland, and applicable data protection law applies to our processing of your personal data, this supplemental statement applies to you. For purposes of the EU GDPR, UK GDPR, and the Swiss Federal Act on Data Protection (FADP), as applicable, datasamy, Inc., 2261 Market Street, #10168, San Francisco, CA 94114 USA is the controller of your personal information.

For general product or support questions, contact contact@eduaide.ai.

International Transfers

When we transfer personal data outside the EU/EEA, UK, or Switzerland, we use recognized transfer mechanisms under applicable law. Depending on the transfer, this may include adequacy decisions/regulations and contractual safeguards such as the European Commission's Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum where required, and Swiss-recognized transfer safeguards where applicable. We use Article 49 derogations only in limited situations where no other transfer mechanism is available.

Legal Basis of Processing

We process personal data under one or more legal bases depending on the purpose of processing:

  • Contract (Article 6(1)(b)): to provide and operate the core Services you request where processing is necessary to perform our contract with you, including account authentication, content generation, and document exports.
  • Legal obligation (Article 6(1)(c)): where processing is necessary to comply with a legal obligation to which we are subject, such as tax, accounting, and lawful disclosure obligations.
  • Legitimate interests (Article 6(1)(f)): to secure the Services, prevent abuse/fraud, maintain reliability, and improve product performance and analytics, provided those interests are not overridden by your fundamental rights and freedoms. You have the right to object to processing based on legitimate interests.
  • Consent (Article 6(1)(a)): where required for optional communications or specific processing activities. You may withdraw consent at any time.

State Specific Requirements

Data protection laws are constantly evolving, and we strive to stay in compliance with all applicable regulations. If you have any questions, concerns, or requests related to how we manage your personal information, reach out to us at contact@eduaide.ai.

Third-Party Services

OpenAI API

For most of our products, we use OpenAI and the OpenAI API. We encourage you read the OpenAI Privacy Policy to understand how OpenAI handles data collection related to API usage. One item to note is that the OpenAI request data will be retained by OpenAI for abuse and misuse monitoring purposes for a maximum of 30 days, after which it will be deleted. Eduaide.Ai has opted out of sharing data with OpenAI used to train models and we do not share any of your personal information with OpenAI. Eduaide.Ai does not control OpenAI or its collection or use of information. Any questions or concerns about OpenAI's practices should be directed to OpenAI.

Anthropic API

For certain products, we use Anthropic and the Anthropic API. We encourage you read the Anthropic Privacy Policy to understand how Anthropic handles data collection related to API usage. One item to note is that the Anthropic request data will be retained by Anthropic for abuse and misuse monitoring purposes for a maximum of 30 days, after which it will be deleted. Eduaide.Ai has opted out of sharing data with Anthropic used to train models and we do not share any of your personal information with Anthropic. Eduaide.Ai does not control Anthropic or its collection or use of information. Any questions or concerns about Anthropic's practices should be directed to Anthropic.

Eduaide Subprocessors

We use third party subprocessors, such as cloud computing providers and analytics to provide our services. The following is a list of subprocessors we use.

Changes & Questions

We reserve the right to modify this privacy policy relating to the Website at any time, effective upon posting of an updated version of this Policy on the Website. When we do we will revise the updated date at the top of this page. Continued use of the Website after any such changes shall constitute your acknowledgment of the updated Policy, to the extent permitted by applicable law.

Information Security Policy Overview

We Appreciate Your Concern

Keeping your data safe and secure is a great responsibility and one of our top priorities. We work hard to protect our users from the latest threats. Your input and feedback on our security practices is always appreciated.

Reporting Security Problems

Report security vulnerabilities by contacting us via email at contact@eduaide.ai. We'll review your report and get back to you as soon as we can, usually within 72 hours.

Response Plan

The following provides an overview of Eduaide.Ai's security incident response plan. For additional questions on this policy, contact us at contact@eduaide.ai. Eduaide follows the NIST Computer Security Incident Handling Guide as part of Special Publication 800-61 Revision 2. This outlines the major steps that are performed in the handling of an incident, note that the actual steps may vary based on the type of incident and the nature of the individual incident.

  1. Eduaide's development and IT team oversee the detection and analysis of security incidents. Their responsibilities include examining potential precursors to foresee future incidents and identifying signs that an incident has occurred or is currently happening. When such indicators are detected, the team initiates an investigation, which involves collecting evidence, establishing timelines, and assessing the impact on those affected. The findings are then reported to the relevant internal personnel and external organizations.
  2. After the initial detection and documentation phase, our team will promptly take action to contain and ultimately eliminate the incident and causes. This may involve revoking access privileges and removing affected systems.
  3. After the incident has been eradicated, the recovery process begins. This involves returning the affected systems to an operational state, confirming they are functioning normally, and implementing additional monitoring to detect any future related activity.
    4. In the event that customers data is impacted by an incident, we will notify the affected individuals, organizations, and relevant regulatory bodies within 72 hours of the incident.
  4. A post-incident activity is then performed by the Eduaide team, involving the creation of a follow-up report and the holding of a lessons-learned meeting to evaluate the effectiveness of our policies and to determine corrective actions that can prevent similar incidents in the future.

Contacting Us

If you have any questions about this Policy, contact us by email at contact@eduaide.ai or at https://eduaide.ai/contact.

Adapted from the Basecamp open-source policies / CC BY 4.0

Where Good Ideas Become Great Lessons

Start with an objective, a topic, or a source. Leave with classroom-ready materials you can teach from.

Try Eduaide Free
Talk to Us About School Licensing