Privacy policy

The controller of your account's data is the owner of the service:

Owner

To be completed by the service owner.

Tax ID (NIF)

To be completed by the service owner.

Address

To be completed by the service owner.

Email

dragoadri@gmail.com

For your students' data, you or your institution decide what it is used for and we process it on your behalf.

• Your account: email, name and the encrypted password (never in plain text).
• If you sign in with Google: Google gives us your name, your email and an identifier of your Google account. We keep only the email and that identifier, never your Google password or its permissions.
• If you sign in with Microsoft: Microsoft gives us your name, your email and the identifiers of your account and of your organisation. We keep only the email and those two identifiers, never your Microsoft password or its permissions.
• The Canvas connection: your institution's permission or your personal token, encrypted and used only for your Canvas; never your Canvas password. It is deleted when you disconnect.
• What the app keeps for you: drafts, rubrics, attendance, exams and assistant conversations.
• Your plan, your payments and how many AI uses you spend each month. Payments are handled by Stripe: we never see your card.
• The day of your last activity and, where applicable, the account being blocked.
• Security logs (sign-ins, password changes), without your IP address in clear.

Before a text is sent to the AI, the app replaces the names, emails and phone numbers on your Canvas roster with pseudonyms. A nickname or signature a student writes inside their submission is not replaced. The AI also sees submission screenshots: first, the app covers the names it can read in them; a handwritten signature, a photo or very small text may stay uncovered. The AI suggests and you decide: nothing is posted to Canvas without your approval.

The AI is Claude, by Anthropic, in the United States, which does not use these texts to train its models. You can turn the AI off in a course with “No AI” and see the exact text that was sent in Settings > Privacy.

The names and emails on your Canvas roster are replaced by pseudonyms before anything leaves. The text of submissions goes pseudonymised to Anthropic, in the United States, and screenshots go with the names covered where the app can read them (some may slip through). If a student signs with a nickname inside the text, that is not replaced.

You can turn the AI off in a course with “No AI”, and your institution can ask for the data processing agreement (DPA) with the Institution plan.

Provisional text pending legal review.

If you buy a paid plan, the payment is processed by Stripe Payments Europe, Ltd. (Ireland). You type your card details on Stripe's page: we never see them. From Stripe we receive a customer identifier, the plan, the price, the subscription's status and dates, and an encrypted fingerprint of the card for the one-trial-per-card rule.

To charge you, issue the invoices and manage your subscription, Stripe processes your data on our behalf. To prevent fraud, meet its own legal obligations (for example, against money laundering) and run its payment network, Stripe is an independent controller, with its own privacy policy (stripe.com/privacy). Stripe may transfer data to the United States with the safeguards of the EU-US Data Privacy Framework and the standard contractual clauses.

On what basis: the contract (art. 6.1.b GDPR) to charge you; legal obligation (art. 6.1.c) to invoice and keep the invoices; legitimate interest (art. 6.1.f) to prevent fraud and to keep the proof that you accepted the terms of sale: the date, the version of the terms and the plan.

How long: invoices and payment data, 6 years (art. 30 of the Spanish Commercial Code) and, for tax purposes, while the tax authority can review them, in general 4 years from the end of the period to file each tax (arts. 66 and 70 of the Spanish General Tax Law). If you delete the account, we delete your customer in Stripe, but Stripe keeps the invoices for those obligations. The proof of your acceptance is deleted with your account and stays in the activity record for up to 5 years.

So that each person and each card can try a plan only once, we keep an encrypted, irreversible fingerprint (HMAC) of your normalised email and of the trial card, without the email or the card number. It is kept for 730 days, also if you delete the account, on the legitimate interest of preventing fraud.

Provisional text pending legal review.

We record each action of your account that changes something or takes data out: the time, the action, the items of yours it affects (course, assignment, exam), the IP address, the browser and the session. Never the content of submissions nor your students' data.

What for: the service's security, investigating incidents and being able to show what happened in a claim. Basis: legitimate interest (GDPR art. 6.1.f); after you leave it is kept for the defence of legal claims (art. 17.3.e).

How long: 24 months in full; then the IP and the browser are struck out and it is kept up to 5 years from its date. If there is a claim or an official request, that account's part is kept while it lasts.

Fraud prevention: with that same log, without collecting anything else, the service looks for signs of unusual use (many accounts from the same IP address, one account used from several countries in a short time, AI use, grading or downloads far above normal, failed sign-in attempts, sign-ups with throwaway emails or late-night sign-ins from a new network) to prevent an account from being shared, resold or used fraudulently. The administrator sees each account's activity (which action, on which course or assignment, how many, when and from which IP and country), never the content of submissions, comments or messages. A sign is a warning that a person reviews; none blocks the account on its own. Basis: legitimate interest in preventing fraud (art. 6.1.f GDPR). Retention: as above.

Integrity: each row is chained to the one before and each day is anchored with a signature the service's owner receives by email; that way a change is detected. Only the service's administrator sees it, and gets the security alerts by email, without your students' data.

Your rights: your record comes in the download of your data from Your account and you can check it yourself. You can object (art. 21), although compelling legitimate grounds usually prevail for a security log, and ask for its erasure with the exception of art. 17.3.e.

Provisional text pending legal review.

On the public pages (the home page, the prices, the help, the legal pages, sign in and create account) we count visits without cookies and without storing anything in your browser to measure them (the website does store in your browser the language and the theme you choose). Of each visit we keep the day, the time you arrive and leave in steps of 10 minutes, the website you come from (only its domain), the campaign if the link carries one (utm), the kind of device, the family of the browser and of the system, the country if our network provider gives it, and the screens you see and the sign-up buttons you press, in order and without times. Never your IP address or your browser's full text.

To join the screens of one visit we use a key made from your IP and your browser mixed with a secret value of the day. That value is deleted when the day ends: from then on nobody, not even us, can tell which visits were yours or follow you from one day to the next, except the visit in which you create your account or sign in, which stays tied to your account for 90 days. Robots are only counted.

If your browser sends the Global Privacy Control (GPC) or Do Not Track (DNT) signal, the pages send nothing and your visit is only added to a count. Why: to know how teachers find us and to improve the pages. Basis: legitimate interest (GDPR art. 6.1.f). How long: visits, 90 days; daily totals, 25 months.

Provisional text pending legal review.

We only use our own technical cookies, needed for the service: __Host-sid keeps you signed in; __Host-signup protects the link that confirms your email; __Host-gstate, __Host-mstate and __Host-gfill protect signing in with Google or Microsoft for a few minutes, and __Host-profesia-admin, the admin panel's session (admins only). We use no advertising, analytics or third-party cookies.

Your browser also keeps in its local storage your language, the light or dark theme and interface preferences, such as the notices you already closed. It stays in your browser.

Cloudflare, which protects the website, may set technical security cookies (such as __cf_bm) to tell people from bots.

All of this is strictly necessary for the service you ask for, so the law does not require us to ask your permission (art. 22.2 of the Spanish LSSI) and we show no cookie banner. Visit measurement works without cookies, as explained above.

Provisional text pending legal review.

If you create your account during a measured visit, your account keeps the website you came from, the campaign and the first screen you saw, to know which channels bring teachers. Never the visit's key. It is deleted with your account.

Provisional text pending legal review.

When you open your Panel with Canvas connected, we keep, for each course where you are a teacher or an assistant: its name, its code, the term and its dates, its state in Canvas, your role and how many students it has (only the figure), with the first and the last time we saw it. Also the name of “Your school” if you set it. Never who your students are nor anything they hand in.

What for: support, knowing which schools and courses use the service, and looking after it. Basis: legitimate interest (GDPR art. 6.1.f). It is updated at most once an hour, a course not seen again is deleted after 2 years, and everything is deleted at once with your account. It is in the download of your data.

The service's administrator sees, for each account, the email, the plan, the payments and the AI uses; how it signs in (password or Google, the latest sign-ins, the open sessions, its networks and browsers); its school and its Canvas, and the courses it teaches with how many students they have. It is for support and to look after the service. The admin panel does not show your students' data nor the contents of your courses. Each time it opens your data, and each of its actions, is recorded.

To provide the service you sign up for (contract), to protect accounts (legitimate interest) and to invoice (legal obligation).

While you have the account. Deleting it deletes everything at once. We make a backup every day, on the same server and encrypted where sensitive: those of the last 14 days and one a month for 6 months are kept, so a deleted account stays in the backups until they expire; if one had to be restored, your account is deleted again. Security records are kept for 12 months and invoices for 6 years, as explained in «Payments with Stripe».

You can download your data («Export my data»), correct it and delete it («Delete account») from Your account.

To exercise any other right (access, rectification, erasure, portability, objection and restriction, arts. 15 to 22 GDPR), write to the email address above. If we do not deal with it properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).

The AI provider may process the texts, already pseudonymised, outside the European Union, with the safeguards of the standard contractual clauses. The list is under “Processors”.