Is iTutor GDPR compliant?

Yes — iTutor meets GDPR requirements: lawful basis for processing, data subject rights (access, deletion, portability), data minimisation, encryption, and a Data Processing Agreement for institutional deployments. EU users can request full data export or deletion at any time.

More detail

iTutor's GDPR posture covers the standard requirements: lawful basis is consent for individuals and contract for institutions, data is encrypted at rest (AES-256) and in transit (TLS 1.3), retention is purpose-limited, subprocessors are listed publicly. Users can export their conversation history, materials, and progress data, or request full account deletion — both are self-service in the dashboard. EU residents have the same rights as outlined in Articles 15-22.

Last updated: 2026-05-04