Privacy Policy

Introduction

Welcome to Laravel ("we," "our," or "us"). We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered education platform, including our website, applications, and related services (collectively, the "Platform").

By accessing or using our Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Platform.

Information We Collect

We collect several types of information to provide, maintain, and improve our Platform. The categories of information we collect include:

Personal Information You Provide

When you register for an account, use our services, or communicate with us, you may provide the following information:

• Account Information: Name, email address, password, role (teacher/student), and profile details.
• Organization Information: School or institution name, class information, and organizational roles.
• Educational Content: Syllabi, course materials, questions, assignments, worksheets, and other educational content you create, upload, or interact with.
• Student Work: Quiz responses, practice session answers, written submissions, and assessment results.
• Communication Data: Messages sent through AI tutor chat, class discussions, and any correspondence with our support team.
• Payment Information: If applicable, billing details and transaction records processed through our payment gateways.

Information Collected Automatically

When you access or use the Platform, we automatically collect certain information:

• Usage Data: Pages visited, features used, time spent on the Platform, quiz completion rates, learning progress, and performance analytics.
• Device Information: Browser type and version, operating system, device type, screen resolution, and language preferences.
• Log Data: IP addresses, access times, referring URLs, and system activity logs.
• Cookies and Similar Technologies: Information collected through cookies, web beacons, and similar tracking technologies (see Cookies & Tracking section).

Information from Third Parties

We may receive information about you from third parties, including:

• Authentication Providers: If you log in using third-party services (e.g., Google, Microsoft), we receive your basic profile information from those services.
• Institutional Administrators: Schools or organizations may provide student and teacher information during bulk registration or account setup.

How We Use Your Information

We use the information we collect for the following purposes:

AI & Data Usage

Our Platform uses artificial intelligence and machine learning technologies to enhance the educational experience. We want to be transparent about how your data interacts with our AI systems:

How AI Processes Your Data

• Content Generation: When you use AI-powered features (e.g., question generation, syllabus import), your uploaded content is processed by AI models to produce structured outputs. This content is associated with your account.
• AI Tutor Interactions: Conversations with the AI tutor are processed in real-time to provide contextual educational assistance. These interactions may be stored to improve response quality over time.
• Answer Evaluation: Student-submitted answers are processed by AI models for automated scoring and feedback. The evaluation results are stored as part of the student's learning record.
• Adaptive Learning: Performance data from quizzes, practice sessions, and assessments is analyzed to personalize difficulty levels and learning recommendations.

AI Data Safeguards

• Your personal educational content is not used to train general-purpose AI models without your explicit consent.
• AI-generated content and evaluations are provided as educational aids and should not be treated as definitive academic assessments without teacher review.
• We employ data minimization practices, processing only the data necessary for the requested AI function.
• Third-party AI service providers we use are contractually bound to data protection obligations.

Data Sharing & Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

Within Your Organization

Teachers can view student performance data, quiz results, and learning analytics for students enrolled in their classes. School administrators may have access to aggregate and individual performance data for their institution.

Service Providers

We share information with trusted third-party service providers who assist us in operating the Platform, including:

• Cloud hosting and infrastructure providers
• AI and machine learning service providers
• Payment processing services
• Email and notification delivery services
• Analytics and monitoring tools

These providers are contractually obligated to use your information only for the purposes of providing services to us and in accordance with this Privacy Policy.

Legal Requirements

We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Platform of any change in ownership or uses of your personal information.

Data Storage & Security

We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect it:

• Encryption: Data is encrypted in transit using TLS/SSL protocols and at rest using industry-standard encryption algorithms.
• Access Controls: We implement role-based access controls, ensuring that only authorized personnel can access personal data on a need-to-know basis.
• Regular Audits: We conduct regular security assessments and vulnerability testing to identify and address potential threats.
• Secure Infrastructure: Our Platform is hosted on secure cloud infrastructure with firewalls, intrusion detection systems, and regular security patches.
• Password Protection: User passwords are hashed using industry-standard cryptographic algorithms and are never stored in plain text.
• Incident Response: We maintain an incident response plan to quickly address any security breaches. In the event of a breach affecting your data, we will notify you in accordance with applicable laws.

Children's Privacy

Our Platform is designed for educational use and may be used by students of various ages. We are committed to protecting the privacy of children and comply with applicable child protection laws:

• Parental/Guardian Consent: For students under the age of 13 (or the applicable age of consent in your jurisdiction), we require verifiable parental or guardian consent before collecting personal information, or such consent may be provided by the student's school or educational institution acting in loco parentis.
• School-Authorized Accounts: When schools create student accounts, the school is responsible for obtaining any necessary parental consents and informing parents about the school's use of the Platform.
• Limited Data Collection: We collect only the minimum information necessary to provide educational services to student users.
• No Behavioral Advertising: We do not use personal information collected from students for targeted or behavioral advertising purposes.
• Parental Access: Parents and guardians have the right to review, correct, or delete their child's personal information. Contact us at the details provided in the Contact Us section to exercise these rights.

Your Rights

Depending on your location and applicable data protection laws, you may have the following rights regarding your personal information:

To exercise any of these rights, please contact us using the information in the Contact Us section. We will respond to your request within the timeframe required by applicable law (typically 30 days). We may need to verify your identity before processing your request.

Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our Platform. Here's what you need to know:

Types of Cookies We Use

Managing Cookies

Most web browsers allow you to control cookies through their settings. You can set your browser to refuse all cookies or to indicate when a cookie is being sent. However, some features of the Platform may not function properly if you disable cookies.

Third-Party Services

Our Platform integrates with or uses the following categories of third-party services:

• AI Service Providers: We use third-party AI APIs (such as Google Gemini, OpenAI, and Mistral) to power our AI features including content generation, tutoring, and answer evaluation. Data sent to these providers is limited to what is necessary for the requested function.
• Cloud Infrastructure: We use cloud hosting services to store and process your data securely.
• Payment Processors: Payment transactions are processed by third-party payment gateways. We do not store complete credit card or payment account numbers on our servers.
• Analytics Services: We use analytics tools (such as Google Analytics) to understand Platform usage patterns and improve our services.
• Communication Services: We use third-party services for email delivery and real-time notifications.

Each third-party service provider has its own privacy policy governing how they handle your information. We encourage you to review their respective privacy policies.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law:

• Active Accounts: We retain your data for as long as your account is active and for a reasonable period thereafter.
• Educational Records: Student learning records, assessment results, and performance data may be retained for the duration specified by applicable educational regulations or institutional requirements.
• Deleted Accounts: When you delete your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes.
• Communication Records: AI tutor chat logs and support communications may be retained for up to 2 years for service improvement and quality assurance purposes.
• Backup Data: Backup copies of data may persist in our backup systems for up to 30 days after deletion from primary systems.

International Data Transfers

Your information may be transferred to and processed in countries other than the country where you reside. These countries may have data protection laws that are different from the laws of your country.

When we transfer your personal information internationally, we take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy and applicable law, including:

• Implementing contractual safeguards with our service providers
• Ensuring adequate security measures are in place
• Complying with applicable data transfer regulations

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes:

• We will update the "Last Updated" date at the top of this policy.
• For significant changes, we will provide notice through the Platform (e.g., an in-app notification or banner) or via email to registered users.
• We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Your continued use of the Platform after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will make every effort to respond to your inquiry within 30 days.