Legal
Privacy Policy
How we collect, use, and protect your data — written so it can be read without a legal team.
1. Quick summary
We collect the minimum data needed to keep the service running: account identity (name, email), the content you create (questions, documents, quizzes), and the technical usage data required for service reliability.
We never sell your data, never use it for advertising, and never use your material or student data to train shared AI models.
2. Data we collect
Account data: name, email, and (for institutional plans) the institution's name and your role within it.
User content: the material you upload, the questions you create, quizzes, and student results — all of it belongs to you.
Technical data: reliability logs (containing no content) used to keep the service stable and secure.
3. How we use your data
Running the services you ask for: generating questions, storing the question bank, grading quizzes, and building analytics.
Communicating important matters about your account and the service — not marketing, unless you opt in.
Improving service quality in aggregate (e.g. common error patterns), without ever exposing the contents of your private content.
4. AI processing
When you use AI features, your material and specifications are processed to produce the output for that request.
Model providers operate under processing contracts that forbid storing or training on user input.
Student data (names and answers) is never sent with full identity to any model provider.
5. Sharing with third parties
We only share data with the infrastructure providers that run the service (hosting, databases) under confidentiality agreements.
We never sell, rent, or trade user data in any form.
6. Your rights
Access and export all of your data (CSV/JSON) at any time from within the app.
Request corrections to inaccurate data via [email protected].
Request permanent deletion of your account and data — completed within 30 business days at most, with written confirmation.
7. Retention & security
Data is kept while your account is active; after account closure, data is permanently deleted within 90 days at most unless legal obligations state otherwise.
TLS 1.3 encryption in transit and AES-256 at rest, with role-based, audited access.
8. Policy changes
Policy changes are announced at least 14 days before taking effect via email and an in-app banner, with a clear version number.
Privacy questions: [email protected].
This document is part of the AiLatih service by PT Latis Teknologi Indonesia. The latest version is always available on this page.