Written and reviewed by Mahmoud Ghonemi, founder and CEO of iTutor ·
iTutor's data practices follow the GDPR: a lawful basis for processing, data subject rights (access, deletion, portability), data minimisation, encryption, and a Data Processing Agreement for institutional deployments. Users can export their data or delete their account from their settings.
More detail
The lawful basis is consent for individuals and contract for institutions, data is encrypted in transit and at rest, and retention is limited to its purpose. You can download a copy of your data from your account settings, and deleting your account permanently removes your subjects, uploads, chats, and generated content after a 14-day grace period. This describes our practice rather than a claimed certification; institutional accounts can request a formal Data Processing Agreement, which lists the sub-processors.