Privacy Policy

Last updated: August 17, 2025

1. Introduction

educraft ("we," "our," or "us") is committed to protecting your privacy and being transparent about how we handle your information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered slide generation service for NCEA teachers.

By using our service, you agree to the collection and use of information in accordance with this policy. We are committed to ensuring that your privacy is protected and that any information you provide will only be used in ways described in this policy.

2. Information We Collect

2.1 Personal Information

When you create an account and use our service, we collect the following personal information:

• Account Information: Your full name, email address, and password.
• Professional Information: School or institution name, teaching subject areas, and NCEA levels you teach.
• Payment Information: Billing details and payment method information (processed securely by our payment providers, not stored on our servers).
• Profile Information: Any additional information you choose to provide in your user profile.

2.2 Usage Information

As you use our service, we automatically collect certain information to improve your experience:

• Content Data: Slides you generate, prompts you create, and any customizations you make.
• Usage Patterns: How often you use the service, which features you use most, and your preferences.
• Technical Information: Device type, browser version, IP address, and operating system.
• Performance Data: Service response times and any errors you encounter.

2.3 Cookies and Tracking

We use cookies and similar technologies to:

• Remember your preferences and login status.
• Analyze how our service is used to improve performance.
• Provide personalized content and recommendations.
• Ensure security and prevent fraud.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve our slide generation service.
• Content Generation: To process your requests and create personalized slides based on your inputs.
• Service Improvement: To analyze usage patterns and enhance our AI models and service quality.
• Communication: To send important service updates, security notifications, and account information.
• Customer Support: To respond to your questions and provide technical assistance.
• Security: To protect against fraud, abuse, and unauthorized access.
• Legal Compliance: To meet our legal obligations and enforce our terms of service.

4. Data Security and Protection

We take the security of your personal information seriously and implement industry-standard measures to protect it:

• Encryption: All data is encrypted in transit and at rest using strong encryption protocols.
• Secure Infrastructure: We use secure cloud servers with regular security updates and monitoring.
• Access Controls: Strict access controls limit who can access your personal information.
• Regular Audits: We conduct regular security assessments and penetration testing.
• Employee Training: Our team receives regular training on data protection and privacy best practices.

5. Data Sharing and Third-Party Services

We are committed to protecting your privacy and do not sell, trade, or rent your personal information to third parties. However, we may share your information in the following limited circumstances:

• With Your Consent: When you explicitly authorize us to share specific information.
• Service Providers: With trusted third-party services that help us operate our business (e.g., payment processors, cloud hosting, analytics).
• Legal Requirements: When required by law, court order, or government request.
• Safety and Rights: To protect our rights, property, or safety, or that of our users or the public.
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with appropriate privacy protections).

Important Note: We use OpenAI's API services for AI-powered content generation. While we don't share your personal information with OpenAI, the content you generate (slides, prompts) may be processed through their systems in accordance with their privacy policy.

6. Your Privacy Rights and Choices

You have several rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Update or correct any inaccurate or incomplete information.
• Deletion: Request deletion of your personal information and account.
• Portability: Request a copy of your data in a machine-readable format.
• Restriction: Limit how we use your information in certain circumstances.
• Marketing Preferences: Opt-out of marketing communications (you'll still receive important service updates).
• Cookie Preferences: Manage your cookie settings through your browser.

To exercise any of these rights, please contact us using the information provided below. We will respond to your request within 30 days.

7. Data Retention and Deletion

We retain your personal information only for as long as necessary to:

• Provide our service to you.
• Comply with legal obligations.
• Resolve disputes and enforce agreements.
• Improve our service based on usage patterns.

When you delete your account, we will:

• Remove your personal information from our active systems.
• Delete your generated content and preferences.
• Retain minimal information for legal compliance (e.g., payment records for tax purposes).
• Complete the deletion process within 90 days.

8. International Data Transfers

Our service is hosted in New Zealand, but some of our third-party service providers may be located in other countries. When we transfer your information internationally, we ensure appropriate safeguards are in place to protect your privacy rights.

9. Children's Privacy

Our service is designed for teachers and educational professionals. We do not knowingly collect personal information from children under 13 years of age. If you believe we have collected such information, please contact us immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make changes:

• We will update the "Last updated" date at the top of this policy.
• We will notify you of significant changes via email or through our service.
• Your continued use of our service after changes become effective constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please don't hesitate to contact us:

12. Additional Resources

For more information about privacy and data protection in New Zealand, you may visit:

• Office of the Privacy Commissioner.
• Privacy Act 2020.