This Privacy Policy applies to EduAI Pro Limited ("EduAI Pro", "Company", "we", "our", or "us") and governs the personal data we process when you access or use the EduAI Pro platform including our website, applications, AI tools, and related services (the "Services"). By using the Services, you agree to the practices described here.

1. OUR PRIVACY PRINCIPLE

Our guiding principle is data minimisation. In practice, that means:

We collect only the information we genuinely need to provide the Services.
We do not sell your personal data to third parties. Ever.
We do not use your email domain, institution name, or any personal information in marketing materials without your explicit permission.
We do not engage in profiling or automated decision-making that could have a legal or similarly significant effect on you.
Where we give you the option to delete content, that content is removed from our active database, not archived indefinitely.

These are not aspirations, they are operating commitments. The sections below explain how each of them is implemented.

2. ABOUT EDUAI PRO

EduAI Pro is an AI-powered platform designed to help educators with instructional planning, teaching support, and professional development. Because our platform is used by educators and institutions, and indirectly touches the educational environments of students, we apply heightened care to how we handle data.

Our Services may include AI teaching assistants, lesson planning tools, professional development programmes, educator resource libraries, institutional dashboards, and analytics. Each of these is described further in our Terms of Service.

3. INFORMATION WE COLLECT

We collect information in three ways: directly from you, automatically when you use the platform, and through your use of AI tools. Here is what each of those means in practice.

3.1 Information You Provide Directly

When you create an account or interact with the platform, you may provide:

Name and email address: used to authenticate your account and send essential communications.
Login credentials: stored securely and never visible to our team in plain text.
Professional role and institution affiliation: used to tailor the platform to your context.
Profile information: you choose to add.
Payment and billing information: for paid subscriptions see Section 3.4 for how this is handled.

You may also provide information when using AI tools, uploading educational content, or contacting customer support.

3.2 Platform Usage Information

When you use the platform, we automatically collect technical data to maintain security and improve functionality. This includes device type and browser information, IP address, platform usage activity, feature usage statistics, performance diagnostics, and course completion and training progress.

Analytics data is used for platform improvement and is not linked to you personally in any way that affects your account or experience. Where required by law, we obtain your consent before using non-essential cookies or similar tracking technologies.

3.3 AI Interaction Data

When you use our AI-powered features, the platform processes the prompts and inputs you enter, the contextual information used to generate outputs, and the content generated in response to your requests.

This data is processed to generate responses, maintain system reliability, and detect misuse. EduAI Pro does not intentionally use personally identifiable prompts to train publicly available AI models without your consent. Section 7 covers our specific AI providers and how they handle this data.

3.4 Payment and Billing Information

If you subscribe to a paid plan, your payment information is handled through our payment processors (Paystack and Stripe). Your card details are submitted directly to the payment processor — they do not pass through or get stored on EduAI Pro's servers.

Our payment processors provide us with limited non-personal transaction metadata (date, amount, product). They do not supply us with your card number, full billing address, or any other payment detail beyond what is needed for our records. Any questions about how they handle your payment data should be directed to them directly.

3.5 Voluntary Correspondence

When you contact us by email or through our support channels, we retain that correspondence — including your email address — to maintain a history of past interactions and provide better support. If you agree to participate in a customer interview, we will ask for your explicit consent before recording the conversation.

4. INFORMATION FROM INSTITUTIONS

If you access EduAI Pro through a school, university, or organisation, your institution may provide us with information including educator names, email addresses, role assignments, and training participation data. This is used to set up and manage your institutional account.

Institutions may access aggregated analytics about training participation. They do not have access to your individual content, AI interactions, or personal communications with EduAI Pro and they cannot access personal user data beyond what is authorised by applicable data protection law.

5. HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes only. We do not use your data for purposes beyond what is described here without notifying you first.

Service Operation

To create and manage your account, authenticate your identity, and provide access to platform features. This is the core purpose for which your data is collected and is necessary to fulfil our contract with you.

AI Tool Functionality

To process your prompts and generate instructional content in response. Your inputs are used only to produce the outputs you request and to maintain system reliability. They are not retained indefinitely or used to build user profiles.

Professional Development

To track your course progress, record completion, and issue CPD certifications where applicable.

Platform Security

To detect fraud, abuse, and unauthorised access. Security monitoring is conducted on aggregated and anonymised data wherever possible. Section 14 explains specifically when human access to your data may occur.

Product Improvement

To analyse anonymised usage patterns and improve platform reliability. This analytics data is not tied to individual user accounts in ways that affect your experience or rights.

Customer Support

To respond to your enquiries and resolve technical issues. Where support requires access to your content or account data, we will ask for your consent before accessing it, unless the access is necessary to fulfil a request you have already made.

Communications

To send important service updates, account notifications, and authentication emails. We may also send optional surveys to help us improve our Services. You can opt out of non-essential emails at any time by clicking the Unsubscribe link in any such message.

6. THIRD-PARTY SUBPROCESSORS

EduAI Pro relies on trusted third-party providers to operate the platform. These subprocessors access only the data they need to perform their specific function. All are required to implement appropriate technical and organisational safeguards to protect user data.

This list is reviewed and updated as our platform evolves. If we add a subprocessor that materially affects how your data is handled, we will notify you before the change takes effect.

7. AI PROVIDER TRANSPARENCY

Because AI data handling is a significant concern for educators and institutions, we want to be as specific as possible about how our AI providers operate.

7.1 Google AI (Gemini)

EduAI Pro currently uses Google AI (Gemini) as its primary AI model provider. When you interact with our AI features, your prompts are processed by Gemini's infrastructure. Google may retain request data for abuse and misuse monitoring for a limited period, after which it is deleted. EduAI Pro has configured our use of Google AI to disable model training using your data. We do not share personally identifiable information with Google AI beyond what is contained in the prompts you submit.

We encourage you to review Google's API Privacy Policy to understand how they handle API usage data. EduAI Pro does not control Google's practices; questions about their data handling should be directed to Google directly.

7.2 Future AI Providers

If EduAI Pro adopts additional AI model providers in future, we will update this section and notify users. We apply the same data minimisation and model training opt-out requirements to any new AI provider we onboard.

8. STUDENT DATA

EduAI Pro is designed for educators and institutional users. It is not designed for, directed at, or intended for use by anyone under the age of 18. Using EduAI Pro as a minor is a violation of our Terms of Service.

We do not require, request, or encourage users to enter student personally identifiable information when using EduAI Pro. If you accidentally submit student personal data through any feature on our platform, contact us immediately at contact@eduaipro.ng and we will take appropriate steps to remove it.

Educators must not upload sensitive student personal data to the platform unless:

They are authorised to do so by their institution, and
Such upload is explicitly permitted by applicable student data protection laws.

If in doubt about whether a particular use case involves student data, the safer approach is not to upload it.

9. COOKIES AND TRACKING TECHNOLOGIES

EduAI Pro uses cookies and similar technologies for three purposes: maintaining secure sessions, remembering your preferences, and analysing platform performance.

Session cookies keep you authenticated between pages without requiring you to log in repeatedly.
Preference cookies remember your platform settings between sessions.
Analytics data helps us understand which features are working well and which need improvement. This data is anonymised and not linked to your individual account.

Where required by law, we obtain consent before using non-essential cookies. You can control cookie settings through your browser. Disabling certain cookies may affect some platform features but will not prevent access to core Services.

10. HOW WE SHARE YOUR INFORMATION

EduAI Pro does not sell personal data. We do not share your information for advertising purposes. Information is disclosed only in the specific circumstances described below.

Service Providers and Subprocessors

Trusted third-party providers who support our platform infrastructure, as listed in Section 6. These providers access only the data necessary to perform their specific function.

Institutional Administrators

Where your account is managed by a school or organisation, that institution's administrators may access aggregated participation analytics. They cannot access your individual AI interactions, personal content, or communications with EduAI Pro.

Legal Compliance and Government Requests

Our policy is not to respond to government or law enforcement requests for user data unless we are compelled by legal process. If a law enforcement authority presents a valid warrant, criminal subpoena, or court order requiring us to disclose data, we must comply. We will notify affected users of such requests wherever we are legally permitted to do so.

Business Transfers

If EduAI Pro is involved in a merger, acquisition, restructuring, or sale of assets, we don't anticipate this, but if it happens, your personal information may be transferred as part of that transaction. We will notify users before any such transfer takes effect and explain your options.

Links to Other Websites

Our platform may link to third-party websites or services that EduAI Pro does not operate. This Privacy Policy does not cover those sites. We encourage you to review the privacy policy of any third-party site you visit.

11. DATA RETENTION

We keep your data only for as long as necessary to provide the Services and meet our legal obligations. The table below sets out our retention approach by data category.

When you delete content within your EduAI Pro account, it is removed from our active database. Non-identifying references may persist briefly in operational logs before being purged. When you close your account entirely, personal data is removed subject to the retention windows above and any legal obligations requiring us to hold certain records.

12. DATA SECURITY

Keeping your data secure is one of our most serious responsibilities. We implement the following technical and organisational safeguards:

All data in transit between your browser and our servers is encrypted using TLS/SSL.
Data at rest in our database is encrypted using LUKS (Linux Unified Key Setup).
Access to user data is restricted to authorised personnel on a strict need-to-know basis.
We maintain monitoring and threat detection systems to identify and respond to security events.
Our infrastructure is hosted on secure cloud providers with independent security certifications.

No internet-based service can guarantee absolute security. There are edge cases where data may pass through our internal network without encryption, though we minimise these wherever technically possible. We continually review and improve our security practices.

13. SECURITY INCIDENT RESPONSE

EduAI Pro follows a structured incident response process aligned with the NIST Computer Security Incident Handling Guide (SP 800-61 Rev. 2). If a security incident affects personal data, our response proceeds through the following steps:

Detection and Analysis: Our security team monitors continuously for signs of incidents. On detection, we initiate an investigation — collecting evidence, establishing timelines, and assessing who is affected.
Containment and Eradication: We act promptly to contain the incident and remove its cause, including revoking access or isolating affected systems where necessary.
Recovery: Affected systems are returned to normal operation and monitored closely for any follow-on activity.
Notification: If your data is affected, we will notify you, your institution (where applicable), and relevant regulatory authorities within 72 hours of confirming the incident — not merely where required by law, but as a standing company commitment.
Post-Incident Review: We conduct a lessons-learned review after each incident to improve our processes and prevent recurrence.

14. WHEN OUR TEAM ACCESSES YOUR DATA

We want to be honest about when EduAI Pro employees may access your account data. Access is restricted to authorised personnel and occurs only in these four situations:

To help with a support request you have made. Where support requires access to your content, we will ask for your consent before proceeding.
Where required by applicable law or compelled by legal process, as described in Section 10.
To protect EduAI Pro from abuse, fraud, or security threats.
On rare occasions when a technical error stops an automated process partway through and human intervention is needed to complete it.

We do not browse your content for any other purpose. Internal access is logged and reviewed as part of our security practice.

15. INTERNATIONAL DATA TRANSFERS

EduAI Pro is operated primarily from Nigeria, and our platform infrastructure may involve servers in other jurisdictions. If you access our Services from the European Union, European Economic Area, or United Kingdom, your data may be transferred to and processed on servers outside your country of residence.

Where international transfers occur, we implement appropriate safeguards consistent with applicable data protection laws. For transfers from the EU, EEA, or UK, we rely on recognised transfer mechanisms including adequacy decisions and, where required, the European Commission's Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum.

16. YOUR PRIVACY RIGHTS

We apply the same data rights to all users, regardless of their location. Depending on applicable law, you have the following rights:

Right to Know: You have the right to know what personal information we hold, how we use it, and who we share it with. This Privacy Policy is our fulfilment of that right.
Right of Access: You have the right to access the personal information we hold about you and to receive details about how it is stored, shared, and processed.
Right to Correction: You have the right to request correction of inaccurate or incomplete personal information.
Right to Erasure: You have the right to request deletion of your personal data. Please be aware that fulfilling some deletion requests may require us to close your account, where your data is integral to providing the Services.
Right to Restrict Processing: You have the right to request that we limit how and why your personal information is used.
Right to Object: You have the right to object to certain types of processing, including processing based on our legitimate interests.
Right to Portability: You have the right to receive your personal data in a structured, machine-readable format. Contact us to request a data export.
Right to Non-Discrimination: We will not charge you more, offer reduced service, or treat you differently because you have exercised any data privacy right. Note that exercising certain rights, such as deletion, may by their nature prevent you from using the Services.
Right to Appeal: If we deny a privacy request, we will explain why and provide information on how to appeal that decision.

Many of these rights can be exercised directly through your account settings. For requests requiring our involvement, contact us at contact@eduaipro.ng. We may need to verify your identity before processing a request, typically by confirming your name and the email address associated with your account.

17. CHILDREN'S PRIVACY

EduAI Pro is a teacher-facing Service. It is not designed for, or directed at, individuals under 18. Using EduAI Pro as a minor is a violation of our Terms of Service, and we reserve the right to terminate any account in accordance with those Terms.

We do not knowingly collect personal data from children under the age of 13. If we discover that a child has submitted personal information to our platform, we will remove it promptly and take appropriate action. If you believe a child has submitted data to EduAI Pro, please contact us immediately at contact@eduaipro.ng.

18. SUPPLEMENTAL STATEMENT FOR EU, EEA, AND UK USERS

If you are accessing EduAI Pro from the European Union, European Economic Area, United Kingdom, or Switzerland, this supplemental section applies to you in addition to the rest of this policy.

18.1 Data Controller

For the purposes of the GDPR and UK GDPR, EduAI Pro Limited is the data controller of your personal information.

18.2 EU and UK Data Protection Representative

EduAI Pro has appointed a representative for EU/EEA and UK data protection matters. For privacy enquiries intended for our representative, please direct correspondence accordingly:

EU / EEA / Switzerland representative: [EU Representative Name, Address, and Contact Email]
UK representative: [UK Representative Name, Address, and Contact Email]

For general product or support questions, contact support@eduaipro.ng.

18.3 Legal Bases for Processing

We process your personal data under one or more of the following legal bases, depending on the purpose.

18.4 International Transfers from the EU/UK

When we transfer personal data outside the EU/EEA or UK, we use recognised transfer mechanisms. Depending on the transfer, this may include adequacy decisions and contractual safeguards such as the European Commission's Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum. We use Article 49 derogations only in limited situations where no other mechanism is available.

18.5 Right to Lodge a Complaint

If you are in the EU or UK, you have the right to lodge a complaint with your local data protection authority. We would appreciate the opportunity to address any concern directly first please contact us at contact@eduaipro.ng but you are always free to contact your supervisory authority directly.

19. NIGERIA DATA PROTECTION ACT (NDPA) 2023

EduAI Pro is incorporated in Nigeria and operates in compliance with the Nigeria Data Protection Act (NDPA) 2023 as our primary governing data protection law. As a data controller under the NDPA, we maintain records of our data processing activities and implement appropriate technical and organisational measures to protect personal data in our care.

Where our users are located in jurisdictions with their own data protection laws, we apply the higher standard where requirements differ. Our compliance with the NDPA operates alongside, not instead of, our obligations under other applicable international privacy frameworks.

20. PROFILING AND AUTOMATED DECISION-MAKING

EduAI Pro does not engage in profiling or automated decision-making that could have a legal or similarly significant effect on you. Our AI tools are designed to assist educators in generating instructional content. They produce suggestions for your professional review. All substantive decisions about how AI-generated content is used remain entirely with you, as the qualified educator.

21. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy as our platform evolves or as legal requirements change. When we do, we will revise the effective date at the top of this page. For significant changes, particularly those that affect how we use your data or your privacy rights, we will notify you directly by email and through a notice on the platform, giving you time to review the changes before they take effect.

Continued use of the Services after an update constitutes your acceptance of the revised policy. If you do not agree with a change, you may close your account before it takes effect.

22. CONTACT INFORMATION

We genuinely welcome privacy questions, data access requests, and feedback. Please use the contact route that matches your purpose:

General privacy enquiries & data rights requests: contact@eduaipro.ng
Support issues: support@eduaipro.ng

Thank you for trusting EduAI Pro. We take that trust seriously, and this policy is our commitment to you in writing.