Privacy Policy

1. Data Controller Identification

For the purposes of this policy and as required by the Brazilian General Data Protection Law (LGPD, Law No. 13.709/2018), the controller of personal data processed on the platform is:

• Legal name: EDUSTRA TECNOLOGIA LTDA
• Trade name: Edustra
• Brazilian tax ID (CNPJ): 65.511.761/0001-53
• Address: R. da Bahia, 1148, Suite 1208, Centro, Belo Horizonte/MG, Brazil

1.1 Data Protection Officer (DPO)

In compliance with article 41 of LGPD, Edustra maintains a Data Protection Officer responsible for personal data processing matters. To exercise your rights, ask privacy questions, or report incidents, contact us at: dpo@edustra.com.

1.2 Role of the Contracting School

When a school contracts the platform, the school acts as controller of its students' data and Edustra acts as processor, handling data according to the school's instructions and within the limits of this policy.

2. Introduction

Edustra ("we", "our", or "company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our mobile app, web platform, and related services (collectively, the "Service").

3. Information We Collect

3.1 Personal Information

We collect information that you or the contracting school provide directly to us:

• Full name and email address
• Class and educational profile information
• Study history and preferences
• Essays and exercise answers submitted on the platform

3.2 Usage Information

We automatically collect:

• Data about your interaction with the app and web platform
• Study progress, scores, and study time
• Navigation patterns and feature usage
• Device technical information

3.3 Data of Minors

Data from students under 18 years old is collected and processed with the consent of the contracting school and parents or legal guardians, in accordance with LGPD. We apply data minimization, collecting only what is strictly necessary to provide the educational service.

4. How We Use Your Information

We use your information to:

• Personalize your learning experience
• Provide study recommendations and adapted content
• Track student progress and performance
• Generate performance reports for the contracting school
• Correct essays and provide feedback through AI
• Operate the AI-powered study assistant
• Improve our services and develop new features
• Provide customer support

5. Information Sharing

We do not sell your personal information. We may share your information only in the following situations:

• Contracting School: Student progress and performance data are shared with the school that contracted the service, as configured by the school itself
• Service Providers: With third parties who help us operate our services (hosting, AI processing), under confidentiality agreements
• Legal Compliance: When required by law or to protect rights
• Consent: When you expressly authorize us

6. Artificial Intelligence and Data

Edustra uses artificial intelligence for essay correction, study assistance, and educational content generation. Data sent to AI (essay texts, questions, exercise images) is processed exclusively to provide the contracted service. We do not use student data to train third-party AI models. The contracting school defines the limits and scope of AI operations.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption of data in transit and at rest, role-based access controls, regular infrastructure monitoring, and secure servers.

8. Your Rights under LGPD

In accordance with the General Data Protection Law (LGPD), you have the right to:

• Access your personal information
• Correct incomplete, inaccurate, or outdated data
• Request deletion of your data
• Revoke your consent at any time
• Request data portability to another provider
• Obtain information about shared data use and purposes

To exercise your rights, please contact us using the email address provided at the end of this policy.

9. Data Retention

We keep your personal information only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law. After the end of the contract with the school, student data will be deleted or anonymized within 90 days, unless there is a legal obligation otherwise.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify the contracting school of significant changes through the platform or by email. Your continued use of our services after such changes constitutes acceptance of the revised policy.

11. Contact