top of page

Privacy Policy

A legal disclaimer


Last updated: May 6, 2025
 

Edvantly (“we,” “us,” or “our”) is committed to protecting your privacy and complying with global data protection and AI regulation standards. This Privacy Notice explains how we collect, use, share, and safeguard your information when you access or use our Service at edvantly.com and edvantly.onrender.com
 

Summary of Key Points

  • We collect identifiers, educational profiles, usage data, and uploaded content.

  • AI tutoring is powered by OpenAI’s models, with no emotion‑recognition or social scoring.

  • Minimum age to register is 14; parental consent is required for under‑14 users.

  • We do not sell personal data and use contractual safeguards for all third‑party processing.

  • Users have rights to access, correct, delete data, and to request human review of AI decisions.
     

Table of Contents

  1. Scope & Definitions

  2. Data We Collect

  3. How We Use Your Data

  4. Legal Bases for Processing

  5. Data Sharing & Third‑Party Processing

  6. International Data Transfers

  7. User Rights & Choices

  8. Data Retention & Deletion

  9. Authentication & Security

  10. Cookies & Tracking

  11. Children’s Privacy

  12. Automated Decision‑Making & AI Transparency

  13. Governance, Risk Management & Compliance

  14. Updates & Contact
     

1. Scope & Definitions

Service: All web and mobile offerings at edvantly.com and edvantly.onrender.com.
Personal Data: Any information relating to an identified or identifiable person.
Processing: Any operation on personal data (collection, use, disclosure, storage, deletion).
 

2. Data We Collect

  • Identifiers: name, email address, account credentials.

  • Educational Profile: age, country, academic strengths/weaknesses, learning preferences.

  • Usage Data: log in in session.

  • Uploaded Content: documents, images, and files for AI tutoring.

  • Sensitive Data: collected only with explicit consent for accessibility features.
     

3. How We Use Your Data

  • Service Delivery: account creation, authentication, and core platform functionality.

  • Personalization & AI Tutoring: powering “Einstein,” “Diva,” and “Batman” and other via OpenAI's models guided by prompts; no emotion‑recognition or social scoring.

  • Communications: service updates, security alerts, and optional promotional messages (opt‑out available).

  • Legal Compliance & Fraud Prevention.
     

4. Legal Bases for Processing

  • GDPR/nFADP: consent; contractual necessity; legitimate interests; legal compliance.

  • CCPA: notice; opt‑out rights.

  • COPPA: verifiable parental consent for users under 14.

  • PIPL: consent; contract necessity; legal obligations.

  • PDPA: consent; purpose limitation.

  • APPI: specified purpose; consent; legal compliance.
     

5. Data Sharing & Third‑Party Processing

  • OpenAI: processes AI tutoring requests under contractual and technical safeguards.

  • Service Providers: hosting, analytics, and email—bound by confidentiality obligations.

  • Legal Authorities: disclosures when required by law.

  • Business Transfers: mergers or acquisitions with advance notice.

  • We do not sell your personal data.
     

6. International Data Transfers

  • GDPR Standard Contractual Clauses ensure adequate protection for EU–U.S. transfers.

  • PIPL cross‑border rules govern transfers out of China.

  • Adequacy decisions or similar safeguards apply for other regions as required.
     

7. User Rights & Choices

All Users: access, correct, or delete personal data; withdraw consent; opt out of marketing.
EU/CH: restrict or object to processing; data portability; lodge complaints.
U.S.: CCPA rights to know, delete, or limit sale; COPPA parental controls for under‑14s.
China: rights to access, correct, delete, explain, portability, and revoke consent.
Singapore: PDPA obligations including access, correction, and portability.
Japan: rights to notice of purpose, correction, deletion, and to opt out of automated decisions.
To exercise any right, contact us at edvantly@gmail.com (30 days EU/CH; 45 days U.S.)
 

8. Data Retention & Deletion

  • We retain data only as long as necessary for service delivery, legal obligations, or dispute resolution.

  • Academic progress and test history remain until you delete them.

  • Account deletion removes active data; backups may persist briefly for auditing or legal purposes.
     

9. Authentication & Security

  • Authentication: via Google OAuth or email/password.

  • Encryption: data encrypted at rest and in transit.

  • Access Controls: role‑based access, multi‑factor authentication, regular security audits, and penetration tests.
     

10. Cookies & Tracking

  • Only essential cookies for session management.

  • No analytics or advertising cookies are used.

  • Manage residual data via browser settings or account deletion.
     

11. Children’s Privacy

  • Minimum Age: 14 years; Service is not intended for users under 14.

  • Parental Consent: required for any user under 14.

  • Unauthorized under‑age data is promptly deleted upon discovery.
     

12. Automated Decision‑Making & AI Transparency

  • AI tutors operate under defined prompts; no emotion‑recognition or social scoring.

  • All AI‑generated content is labeled “Generated by AI.”

  • You may request human review of any AI‑driven recommendation or assessment through your dashboard.
     

13. Governance, Risk Management & Compliance

  • We maintain a formal Quality Management System for data protection and AI risk management.

  • A designated compliance officer oversees alignment with GDPR, the EU AI Act, and other regulations.

  • We conduct regular risk assessments and post‑market monitoring of AI performance and incidents.
     

14. Updates & Contact

We may update this Privacy Notice to reflect changes in our practices or legal requirements. We will notify you via the Service or email; continued use implies acceptance.
Contact: edvantly@gmail.com
EU/CH users may lodge complaints with their supervisory authority.

bottom of page