1. Introduction

At Aquilae, we place the utmost importance on protecting your personal data. This privacy policy explains how we collect, use, store, and protect your information when you use our AI-assisted Socratic learning platform.

2. Data Collected

When using the Aquilae platform, we collect the following data:

• Identity information (first name, last name, institutional email address)
• Login data (credentials, hashed passwords, authentication logs)
• Educational data (courses and documents uploaded by your teacher, classes and programs associated with your account)
• AI tutor conversations (questions, answers, discussion context)
• Usage and progress data (platform interactions, exercise scores, session duration)
• Technical data (browser, device, IP address, session identifiers)

3. Use of Data

Your data is processed for the following purposes:

• Provide access to the platform and its learning features
• Allow the AI tutor to answer your questions based on the educational content from your institution
• Track your progress and adapt the learning experience
• Ensure platform security and prevent misuse
• Improve the quality of the service and the AI tutor (aggregated and anonymized statistics)
• Comply with our legal and contractual obligations

4. Data Sharing

We never sell your personal data. Your data may only be shared in the following cases:

• With your educational institution (teaching team, administration), as part of your training
• With our technical subprocessors (hosting and AI inference services), under contractual clauses compliant with the GDPR
• Upon legal request from a competent authority

5. Data Security

Your data is hosted on secure servers within the European Union, on GDPR-compliant infrastructure. Data is encrypted in transit (TLS) and at rest. Backups are performed daily. Educational documents are stored in a secure space with institution-level access control. We implement appropriate technical and organizational measures to protect your data against unauthorized access, modification, disclosure, or destruction.

6. Data Retention

Your data is retained for the duration of your enrollment on the platform. After account closure, your personal data is deleted within 30 days, unless legal retention obligations apply. Anonymized data for statistical purposes may be retained beyond this period.

7. Your Rights (GDPR)

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access to your personal data
• Right to rectification of inaccurate or incomplete data
• Right to erasure (“right to be forgotten”)
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw your consent at any time

You may exercise these rights at any time by contacting us at the address provided below. We commit to responding to your request within 30 days. You also have the right to lodge a complaint with the relevant data protection authority.

8. Cookies

Aquilae only uses cookies essential to the platform's operation (authentication, session preferences). We do not use advertising cookies or third-party tracking cookies. Session cookies are automatically deleted when you close your browser.

9. Protection of Minors

Aquilae is intended for post-secondary education students. We do not knowingly collect personal data from minors under the age of 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately so we can take the necessary steps.

10. Contact

For any questions regarding the protection of your personal data or to exercise your rights, you can contact us by email at: constance@aquilaeeducation.fr. Our Data Protection Officer (DPO) is available to respond to your requests.