Your information deserves clear rules.

Scope and accountability

This policy applies to personal information handled through the Edyex website and its student, professional, guest and contact features. Edyex is accountable for personal information under its control, including information processed by service providers on its behalf.

Information we collect

Guest mode keeps student courses and professional tasks separate and stores their names, timer state and totals in the browser session. Clearing browser data or ending the session may remove that information.

Why we use information

• Create and authenticate accounts and remember language or mode preferences.
• Provide timers, schedules, objectives, flashcards, analytics, exports and recommendations requested by the user.
• Respond to support, feedback, privacy and partnership requests.
• Maintain service reliability, prevent abuse, investigate errors and protect accounts.
• Meet legal obligations and establish, exercise or defend legal rights where permitted.

Edyex limits collection, use and communication to purposes that a reasonable person would consider appropriate in the circumstances. A new incompatible purpose will require notice and, where required, new consent.

Service providers and transfers

Edyex does not sell personal information. Information may be made available to hosting, storage, security, email or technical service providers only as necessary to operate the service, under appropriate safeguards. It may also be communicated where required or permitted by law.

When automatic flashcard generation is requested, Edyex extracts readable course text and sends that text, optional instructions and technical request information to the configured language-model provider, currently OpenAI. The provider may process this information outside Quebec or Canada under its applicable business terms and data controls. The original uploaded file is not retained by Edyex after processing, but approved cards are saved to the user account.

Stripe processes monthly or annual subscription payments and receives account, billing and transaction information. Edyex receives customer, subscription, billing-period and payment-status identifiers but does not store complete payment card numbers.

The interface currently loads Bootstrap resources from a content delivery network. Other service providers may process technical information outside Quebec or Canada. Before communicating personal information outside Quebec, applicable risk and contractual requirements must be considered.

Retention and security

Personal information is retained only as long as reasonably necessary for the stated purposes, account administration, legal requirements, dispute resolution and security. When no longer required, it is deleted or anonymized according to applicable procedures and technical constraints, including backup cycles.

Administrative, technical and physical safeguards are selected according to the sensitivity, quantity, use and format of the information. No online system can guarantee absolute security.

Consent, cookies and choices

Consent is requested in clear terms when required and may be withdrawn, subject to legal or contractual restrictions and reasonable notice. Withdrawal may prevent certain features from operating.

Automatic flashcard generation occurs only when the user selects a document and requests analysis. Users control which generated cards are retained and may edit them before saving.

Essential session and language cookies support authentication, security, guest timers and preferences. Edyex does not currently describe these essential cookies as advertising cookies. Browser settings can block or clear cookies, but doing so may interrupt the service or erase guest information.

Advanced subscriptions renew monthly or annually according to the option selected at checkout. Billing changes and cancellation are managed through the secure Stripe customer portal, subject to the terms presented at purchase.

Access, correction and other rights

Subject to applicable law and exceptions, you may request access to personal information held about you, ask how it is used or communicated, and request correction of inaccurate or incomplete information. You may also ask about retention, authorized access categories and the Privacy Officer.

Depending on the law and circumstances, additional rights may include withdrawing consent, requesting deletion where appropriate, or raising a complaint. Edyex may verify identity and will respond within the period required by applicable law.

Privacy incidents

Edyex maintains a process to assess suspected loss, unauthorized access, use or communication of personal information, reduce harm and prevent recurrence. Incidents presenting the legally defined level of risk will be reported to the competent authority and affected individuals as required, and incident records will be maintained where required.

Questions, requests and complaints

Send privacy questions or requests through the Contact page and identify the request as a privacy matter. Include enough information to locate the relevant account or record, but do not send passwords or unnecessary sensitive information.

If a concern is not resolved, you may contact the Commission d’accès à l’information du Québec or the Office of the Privacy Commissioner of Canada, as applicable.

Changes to this policy

This policy may be updated to reflect service, legal or operational changes. The effective date and version will be revised, and prominent notice or renewed consent will be provided when required.