How we collect, use, and protect your personal data
In brief: Edu AI collects only the data it needs to deliver your courses, process payments, and improve the platform. We never sell your personal information. You can access, correct, delete, or export your data at any time. This policy explains everything in detail.
Edu AI (www.eduailast.com) is committed to protecting your privacy. This Privacy Policy explains what personal data we collect, why we collect it, how we use and safeguard it, and what rights you have under the General Data Protection Regulation (GDPR) and other applicable data-protection laws.
The entity responsible for processing your personal data is:
Edu AI
Str. Lalelelor 2A, Ileana, Calarasi 917130, Romania
Email: messenger@eduailast.com | Phone: +40 722 606 166
| Data | When Collected | Purpose |
|---|---|---|
| Name, email address | Account registration | Create your account, communicate with you |
| Company, job title | Registration (optional) | Personalise your learning experience |
| Payment details | Subscription checkout | Process payments securely via Stripe / PayPal |
| Messages, support tickets | Contact form, helpdesk | Respond to your enquiries |
| Data | Technology | Purpose |
|---|---|---|
| IP address, browser, device info | Server logs | Security monitoring, diagnostics |
| Pages visited, time on page, clicks | Cookies & Analytics | Improve the platform, understand usage |
| Course progress, quiz scores | Platform features | Track your learning, personalise recommendations |
Every piece of data we process has a lawful basis under the GDPR:
Art. 6(1)(b) — Deliver your account, provide courses, process payments, and fulfil our agreement with you.
Art. 6(1)(f) — Improve the Service, run analytics, prevent fraud, and ensure platform security.
Art. 6(1)(a) — Send marketing emails and set optional cookies. You can withdraw consent at any time.
Art. 6(1)(c) — Comply with tax, accounting, and law-enforcement requirements.
We never sell your personal data. We only share it with trusted partners who help us operate the Service:
Some of our service providers operate outside the EU/EEA. When your data is transferred internationally, we ensure protection through:
Kept while your account is active, plus 30 days after deletion to allow recovery.
Retained for 10 years as required by Romanian tax and accounting law.
Automatically purged after 90 days.
Kept for 3 years after your last interaction, or until you withdraw consent.
As a data subject in the EU/EEA, you have strong rights over your personal data:
Request a copy of all personal data we hold about you.
Correct inaccurate or incomplete data at any time.
Request deletion of your data ("right to be forgotten").
Limit how we process your data in certain situations.
Receive your data in a structured, machine-readable format.
Object to processing based on legitimate interest or profiling.
Take back consent at any time — no questions asked.
To exercise any right, email us at messenger@eduailast.com. We will respond within 30 days.
We use cookies and similar tracking technologies to operate and improve the Service. For a detailed breakdown of every cookie we set, how long it lasts, and how to opt out, please read our Cookie Policy.
We take the security of your data seriously and implement appropriate technical and organisational measures:
All data in transit is encrypted with TLS on every page of the platform.
HTTP-only, SameSite=Strict session cookies prevent common web attacks.
All passwords are hashed and salted before storage — never stored in plain text.
Strict role-based access and regular security reviews protect internal systems.
No system is 100% secure. If you discover a vulnerability, please report it responsibly to messenger@eduailast.com.
Edu AI is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If we become aware that a child under 16 has provided us with personal data, we will delete it promptly. If you believe a child under 16 has shared data with us, please contact us immediately.
We may revise this Privacy Policy to reflect changes in our practices, legal requirements, or the services we offer. When we update it, the "Last Updated" date at the top will change. For significant modifications, we may also notify you by email or through an in-platform notice. Continued use of the Service after an update constitutes acceptance of the revised policy.
If you believe your data-protection rights have been violated, you have the right to lodge a complaint with the Romanian Data Protection Authority:
ANSPDCP — Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal
B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336, Bucharest, Romania
Website: www.dataprotection.ro
For privacy-related questions or to exercise your data rights: