1. Who We Are

EduPilot (“EduPilot”, “the Platform”, “we”, “us”) is a service provided by Aiventor Sp. z o.o.

Registered office: al. Solidarności 117-615, 00-140 Warszawa, Poland
NIP: 7252347037
REGON: 529689160
KRS: 0001128173
Share capital:2500 PLN (fully paid up)
Registered with: Sąd Rejonowy dla m.st. Warszawy w Warszawie, Wydział Gospodarczy KRS

For any privacy-related inquiries, contact us at: admin@aiventor.eu

Polish language version Polska wersja niniejszej Polityki Prywatności jest dostępna na żądanie pod adresem admin@aiventor.eu. W przypadku rozbieżności między wersją polską a angielską, wersja polska ma pierwszeństwo. (A Polish version of this Privacy Policy is available upon request. In case of discrepancy, the Polish version prevails.)

2. What Data We Collect

When you use EduPilot, we may collect:

Data Category	Examples	Purpose
Account data	Name, email address, organization	Account creation and authentication
Usage data	Features used, pages visited, timestamps	Service improvement and analytics
Content data	Courses, lessons, and materials you create	Providing the service
Technical data	IP address, browser type, device info	Security and troubleshooting
Purchase data	Orders, invoices, Wallet balance and transactions	Marketplace purchases, accounting, tax compliance
Creator payout data	Identity and address, bank account (IBAN), tax identification number, trader status	Creator payouts, invoicing, and legally required tax reporting

We do not collect sensitive personal data (health, religion, ethnicity, biometrics) unless explicitly provided by you in your educational content.

3. How We Use Your Data

We use your data to:

Provide and maintain EduPilot services
Authenticate your account and ensure security
Improve our product based on aggregated usage patterns
Communicate service updates and respond to inquiries
Comply with legal obligations

4. AI and Your Data

We do NOT use your data, your content, or your students’ data to train AI models.

EduPilot uses third-party AI services (such as large language models) to generate educational content. When processing your requests:

Your input is sent to AI providers solely to generate the requested output
AI providers are contractually prohibited from using your data for model training
Generated content belongs to you
We do not store AI interaction logs beyond what is necessary to provide the service

Purpose	Legal Basis
Providing the service	Performance of contract (Art. 6(1)(b))
Security and fraud prevention	Legitimate interest (Art. 6(1)(f))
Analytics and improvement	Legitimate interest (Art. 6(1)(f))
Legal compliance	Legal obligation (Art. 6(1)©)
Marketing communications	Consent (Art. 6(1)(a))
Marketplace purchases and Creator payouts	Performance of contract (Art. 6(1)(b))
Tax and platform reporting (incl. DAC7 where applicable)	Legal obligation (Art. 6(1)©)

We share your data only with:

Cloud infrastructure providers (hosting, storage) — as data sub-processors
AI service providers — for content generation only, under strict contractual terms
Analytics tools — aggregated, anonymized data only
Law enforcement — only when legally required

We do not sell your data to third parties.

7. Data Retention

Account data: Retained while your account is active + 30 days after deletion request
Content data: Retained while your account is active; deleted upon account closure
Usage/technical data: Retained for up to 12 months, then anonymized or deleted

You have the right to:

Access your personal data
Rectify inaccurate data
Erase your data (“right to be forgotten”)
Restrict processing
Data portability — receive your data in a structured format
Object to processing based on legitimate interest
Withdraw consent at any time (for consent-based processing)

To exercise any of these rights, email admin@aiventor.eu. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

Encryption in transit (TLS) and at rest
Access controls and authentication
Regular security reviews
Incident response procedures

10. International Transfers

Your data may be processed outside the EEA (e.g., by cloud or AI providers in the USA). In such cases, we ensure adequate safeguards through Standard Contractual Clauses (SCCs) or equivalent mechanisms.

11. Children’s Data

EduPilot is a tool for educators, not for direct use by children.

Age of consent for data processing: In Poland, the age threshold for independent consent to data processing is 16 years (Art. 8 GDPR, maintained at 16 by the Polish Act of 10 May 2018 on Personal Data Protection). For users under 16, processing requires verifiable consent from a parent or legal guardian.

If a school uses EduPilot to create content for students under 16, the school is the data controller and is responsible for obtaining necessary parental consents. We process such data only as a data processor under the school’s instructions and our Data Processing Agreement.

12. Cookies

We use essential cookies for authentication and session management. Analytics cookies are used only with your consent. See our Cookie Policy for details.

13. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or in-app notification.

14. Contact

For any questions about this Privacy Policy or your data:

Aiventor Sp. z o.o. Email: admin@aiventor.eu

If you believe we have not adequately addressed your concern, you have the right to lodge a complaint with:

Urząd Ochrony Danych Osobowych (UODO) ul. Stawki 2, 00-193 Warszawa, Poland Website: uodo.gov.pl Phone: +48 22 531 03 00

Or with the supervisory authority in your country of residence.