Data Controller

Edirae is the data controller responsible for your personal information. For any privacy question, or to exercise your rights, contact us at privacy@edirae.com.

1. Information We Collect

We collect only what is necessary to provide and improve the service.

1.1 Information You Provide

• Name
• Email address
• Account credentials
• Learning preferences and goals
• Content you submit (answers, notes, capstones, messages to the mentor)

1.2 Information Generated Through Use

• Learning progress
• Checkpoint and capstone outcomes
• Capability readiness signals
• Usage metadata (e.g. feature interactions, timestamps)

This data exists to support learning — not surveillance.

1.3 Automatically Collected Information

• Device and browser type
• IP address
• Session data
• Error and performance logs

Used strictly for security, reliability, and improvement.

2. How We Use Your Information

We use your information to:

• Provide personalized learning guidance
• Generate learning tracks and content
• Evaluate learning checkpoints and capstones
• Deliver mentor interventions and daily guidance
• Support teams with high-level capability insights
• Improve system performance and reliability
• Communicate with you about your account

We do not use your data to train public AI models.

3. Legal Bases for Processing

Where the GDPR or similar laws apply, we process your personal data on one or more of the following legal bases:

• Performance of a contract — to provide the Edirae service you sign up for.
• Consent — where you have given consent (for example, certain communications); you may withdraw consent at any time.
• Legitimate interests — to secure, maintain, and improve the platform, where those interests are not overridden by your rights.
• Legal obligation — where processing is necessary to comply with the law.

4. AI & Data Processing

Edirae uses AI models to generate learning materials and feedback.

Important clarifications:

• Your data is processed only to deliver Edirae's functionality
• We do not sell your data
• We do not use personal learning data for advertising
• AI providers receive only the minimum data required per request
• Where possible, we use anonymization and contextual isolation

5. Service Providers & Subprocessors

We share data with a limited set of trusted providers who process it on our behalf, solely to operate Edirae. Each receives only the data necessary for its function.

For a fuller description of our security practices, see our Security page.

6. Teams & Organizational Use

If you are part of a team:

• Team leads may see high-level capability readiness and signals

They do not see:

• Private mentor conversations
• Personal notes
• Raw scores or detailed evaluations

Visibility is designed for support, not monitoring.

7. Cookies & Tracking

Edirae uses:

• Essential cookies (authentication, security)
• Limited analytics cookies (performance and usage trends)

We do not use third-party ad trackers.

You can manage cookies through your browser settings.

8. Data Retention

We retain data only as long as necessary to:

• Provide the service
• Meet legal obligations
• Maintain learning continuity

You may request deletion of your account and associated data at any time, subject to legal requirements. Upon a verified request, personal data is removed within 30 days, except where retention is required by law.

9. Data Security

We take security seriously and implement:

• Encryption in transit and at rest
• Access controls
• Monitoring and logging
• Secure infrastructure practices

No system is perfectly secure, but we work continuously to protect your data. For more detail, see our Security page.

10. Your Rights (GDPR & Global)

Depending on your location, you may have the right to:

• Access your data
• Correct inaccurate data
• Request deletion
• Restrict or object to processing
• Export your data

To exercise these rights, contact us at: privacy@edirae.com

11. International Data Transfers

Edirae may process data on servers located outside your country. When we transfer personal data internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs) to ensure your data remains protected.

12. Children's Privacy

Edirae is not intended for children under 13. We do not knowingly collect data from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time.

If changes are material, we will notify you through the platform or via email. Continued use of Edirae means acceptance of the updated policy.

14. Contact Us

If you have questions or concerns about privacy, contact:

• Email: privacy@edirae.com
• Website: https://edirae.com