1. Controller
The controller responsible for processing personal data in connection with TeachIt is the operator named in the Impressum. Contact: webmaster@teachit.study.
2. What we collect
- Account data: name (optional), email address, password hash (for credential accounts), role, and timestamps such as when you accepted the Terms and Privacy Policy.
- Authentication data: session tokens and, if you use SSO, identifiers and profile fields provided by Google or Microsoft.
- Service content: collections, slides, materials, presentation sessions, and related metadata you create or upload.
- Technical data: basic server logs (for example IP address, timestamps, and request paths) needed for security and operation.
- Optional API keys: if you store LLM API keys or integration credentials (for example OpenAI, Gamma.app, or Mathpix) in your profile, they are encrypted and used only to call those providers on your behalf.
3. Purposes and legal bases
- Providing accounts, authentication, and core features — Art. 6(1)(b) GDPR (contract / pre-contractual steps). Accepting the Terms and this Privacy Policy is required before registration.
- Security, abuse prevention, and service integrity — Art. 6(1)(f) GDPR (legitimate interests).
- Legal obligations (for example responding to lawful requests) — Art. 6(1)(c) GDPR.
- Optional features that rely on your consent (where we ask for it) — Art. 6(1)(a) GDPR.
4. Cookies and similar technologies
We use essential cookies for authentication and session management. Details are described on the Cookie Consent page.
5. Recipients and processors
Data may be processed by hosting, database, and infrastructure providers acting on our instructions. If you enable SSO or AI features, relevant data is shared with those providers as needed to provide the feature. We do not sell your personal data.
6. International transfers
If providers process data outside the EEA/UK, we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses, where required.
7. Retention
We keep account and service data while your account is active and as needed to operate the service. After deletion or inactivity, we delete or anonymize personal data within a reasonable period unless a longer retention is required by law or for dispute resolution.
8. Your rights
Under the GDPR you may have rights to access, rectification, erasure, restriction, portability, and objection, and to withdraw consent where processing is consent-based. You may lodge a complaint with a supervisory authority. To exercise rights, contact webmaster@teachit.study.
9. Children
TeachIt is intended for use in educational and professional contexts by adults or under appropriate institutional supervision. We do not knowingly collect personal data from children under 16 without verified parental or institutional authorization where required.
10. Changes
We may update this Privacy Policy. The “Last updated” date will change when we do. Material changes may require renewed acceptance where required by law.