This Privacy Policy explains how Comzone Inc. ("oEdu.ai", "we", "us") collects, uses, shares and protects personal information when you use oEdu.ai (the "Service"). It applies to everyone who uses the Service, wherever they live, and includes the information required by the EU and UK General Data Protection Regulation ("GDPR") and Canada's Personal Information Protection and Electronic Documents Act ("PIPEDA").
Key information
- Who we are: Comzone Inc., Ontario, Canada, is the controller of your personal data.
- What we collect: your account details, purchase records, study activity, messages you send us, and technical data from your device.
- Why: to provide your courses, process payments, support you, keep the Service secure, and improve it. We don't sell your personal information.
- Your rights: you can access, correct, delete or download your data, object to certain uses, and withdraw consent. Email team@oedu.ai.
1. Who we are and how to reach us
The controller responsible for your personal data is Comzone Inc., Ontario, Canada. For any privacy question or request, email team@oedu.ai.
2. Information we collect
Information you give us
- Account details: name, email address and password (stored securely as a hash).
- Purchase details: plan, amount, billing country and transaction records. Card details are collected and processed by our payment provider; we don't store full card numbers.
- Messages you send us, including support requests and pass guarantee claims with the score reports you attach.
- Content you post: discussion comments, votes, notes, and the questions you ask the AI tutor.
Information collected automatically
- Study activity: lessons viewed, quiz and practice-exam answers, scores, Exam Simulator results and progress.
- Technical data: IP address, browser and device type, pages visited, and dates and times of access.
- Cookies and similar technologies. See our Cookie Policy.
Information from others
- Payment confirmations and fraud signals from our payment provider.
- Your name and email address from a third-party sign-in service, if you choose to sign in with one.
We don't intentionally collect special categories of personal data (such as health information). Please don't include them in messages or posts.
3. How we use your information and our legal bases
Under the GDPR, we must have a legal basis for each use of your personal data. The table shows what we use and why.
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Create and run your account; provide your courses, the Exam Simulator and the AI tutor | Account details, study activity, content you post | Contract: needed to provide the Service you signed up for |
| Process payments, renewals and refunds | Account and purchase details | Contract; legal obligation (tax and accounting records) |
| Review pass guarantee claims | Account details, study activity, score report you send | Contract |
| Personalize study, such as suggesting topics to review | Study activity | Legitimate interests: helping you prepare effectively |
| Answer support requests | Account details, your messages | Contract; legitimate interests |
| Send service messages (receipts, account notices, course updates) | Account details | Contract |
| Send marketing emails | Name, email address | Consent: you can withdraw at any time |
| Keep the Service secure; prevent fraud and account sharing | Technical data, account activity | Legitimate interests: protecting our users and the Service; legal obligation |
| Improve our courses and features | Study activity and technical data, aggregated or de-identified where possible | Legitimate interests: improving the Service |
| Sign in with a third-party account | Name, email address from that service | Contract (at your request) |
| Comply with the law and respond to lawful requests | Any relevant data | Legal obligation |
Where we rely on legitimate interests, we've balanced them against your rights. You can object at any time (see Your rights).
4. How we share information
We don't sell or rent your personal information, and we don't share it for cross-context behavioral advertising. We share it only with:
Service providers (processors) that act on our instructions under written contracts, for hosting, payment processing, email delivery, sign-in, customer support and features of the Service such as the AI tutor. They may use your information only to provide their services to us.
Authorities, courts or professional advisers, when required by law or needed to establish, exercise or defend legal claims, or to protect our users or the public
A buyer or successor, if our business is reorganized, merged or sold. We'll notify you before your information becomes subject to a different privacy policy
5. International data transfers
We're based in Canada, and our team and service providers operate in several countries. Your information may therefore be processed outside the country where you live.
For personal data from the EU or UK:
- Canada: the European Commission has recognized Canada (for organizations subject to PIPEDA) as providing adequate protection. The UK recognizes this too.
- Other countries: we use the European Commission's Standard Contractual Clauses (and the UK Addendum where needed), plus additional safeguards where appropriate.
You can ask us for more information about these safeguards at team@oedu.ai.
6. How long we keep it
We keep personal data only as long as we need it for the purposes above:
- Account and study data: while your account is active. After you close your account, we delete or de-identify it within 90 days, except as below.
- Transaction records: up to 3 years, or longer only if tax or accounting law requires it.
- Pass guarantee evidence: up to 12 months after the claim is decided.
- Support messages: up to 24 months after the conversation ends.
- Backups: deleted data may remain in secure backups for a limited period until they are overwritten.
7. Your rights
Depending on where you live, you have some or all of these rights:
- Access: get a copy of the personal data we hold about you.
- Correction: correct inaccurate or incomplete data. You can update most details in your account.
- Deletion: ask us to delete your data, subject to legal obligations.
- Portability: get your data in a structured, machine-readable format, or have it sent to another provider.
- Restriction: ask us to limit how we use your data in certain cases.
- Objection: object to processing based on legitimate interests, and to direct marketing at any time.
- Withdraw consent: where we rely on consent, such as for marketing emails, without affecting earlier processing.
- Complain: lodge a complaint with a supervisory authority.
How to make a request: email team@oedu.ai from your account email. We'll verify your identity and respond within one month (GDPR) or 30 days (PIPEDA), extending only where the law allows. Requests are free unless they are manifestly unfounded or excessive. We won't treat you differently for exercising your rights.
Supervisory authorities:
- In the EU: the data protection authority in your country of residence.
- In the UK: the Information Commissioner's Office (ICO).
- In Canada: the Office of the Privacy Commissioner of Canada.
US residents: depending on your state, you may have similar rights to know, delete and correct your personal information, and to opt out of its sale or sharing. We don't sell or share personal information as those laws define it. You can make requests the same way.
8. Children
The Service isn't for children under 13, and we don't knowingly collect their personal information. Users aged 13 to 17 may use the Service only with the consent of a parent or guardian. In the EU, where the law sets a higher age of digital consent, parental consent is required up to that age. If you believe a child under 13 has given us personal information, contact us and we'll delete it.
9. Security
We use administrative, technical and physical safeguards to protect personal data, including encryption in transit, restricted access on a need-to-know basis, and confidentiality obligations for our team and providers. No method of transmission or storage is completely secure. If a breach is likely to affect your rights, we'll notify you and the relevant authorities as required by law.
10. Links to other sites
The Service may link to other websites, such as exam providers' official pages. We're not responsible for their privacy practices. Please review their policies.
11. Changes to this policy
We may update this policy. If we make material changes, we'll notify you by email or in the Service before they take effect. The "Last updated" date shows the latest version.
12. Contact
Questions, requests or complaints about privacy: team@oedu.ai. Comzone Inc., Ontario, Canada.