Privacy Policy

Last updated: June 10, 2026

1. Information We Collect

To provide our AI tutoring experience, we collect the following categories of data:

  • User Profiles & Credentials: Email addresses and terms/privacy acceptance timestamps.
  • Uploaded Materials: Learning files (PDFs, DOCX, PPTX, TXT) uploaded to your Global Library.
  • Chat History: Text messages exchanged with the Socratic AI tutor.
  • Board State: Whiteboard drawing snapshots and historical drawing command logs.
  • Telemetry Logs: Focus duration, break times, and session progress metrics.

2. Data Processing and Third-Party Sharing

We process your data using secure internal systems and select third-party services necessary for core features:

  • Google GenAI (Gemini Realtime API): We pass document texts, drawing snapshots, and live audio inputs to Google Gemini models to generate interactive tutoring responses. This processing is subject to Google's privacy protocols.
  • Qdrant (Vector Database): Text chunks extracted from your study documents are converted to vector embeddings and stored in Qdrant to enable semantic search (RAG) capabilities.

3. Data Storage and Security

Your uploaded documents and databases are stored securely inside Google Cloud Storage (GCS) and isolated database networks (PostgreSQL and Qdrant). We implement secure database connection pooling, internal Docker network port isolation, and secure key encryption to prevent unauthorized data exposure.

4. Right to Deletion (GDPR "Right to be Forgotten")

We fully respect your data privacy and rights under the General Data Protection Regulation (GDPR). You have the right to erase your data from our systems at any time:

  • Document Deletion: Deleting a document from your library permanently deletes the original file from GCS, deletes its text chunks and vector embeddings from Qdrant, and erases all associated database records.
  • Account Deletion: Deleting your account triggers a cascading purge that deletes your user profile, learner memory, chat logs, board snapshots, GCS files, and Qdrant points. Your email address is stored solely as a secure SHA-256 cryptographic hash in our offer protection log to prevent welcome-credits abuse, and no plaintext personal identifiers remain.

5. Contact Us

For any questions regarding your privacy, data deletion rights, or how your study materials are handled, please contact our support team at privacy@tablo.ai.