Privacy Policy

1. Introduction

GradeSpace ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our educational platform, or engage with our services.

This policy applies to all users including website visitors, clients, learners (students), and instructors who use our platform.

This policy complies with:

GDPR (General Data Protection Regulation) - for users in the European Union and UK
CCPA/CPRA (California Consumer Privacy Act) - for California residents
PIPEDA (Personal Information Protection and Electronic Documents Act) - for Canadian users
LGPD (Lei Geral de Proteção de Dados) - for Brazilian users
FERPA (Family Educational Rights and Privacy Act) - for educational data where applicable

2. Data Controller

GradeSpace

Email: privacy@thegradespace.com

Data Protection Officer: dpo@thegradespace.com

Address: Gradespace LTD, 86-90 Paul Street, London EC2A 4NE, United Kingdom

3. Information We Collect

3.1 Information You Provide

Account Information: Name, email address, password, company/organization details, role designation (client, learner, instructor, administrator)
Educational Data: Course enrollments, assignment submissions, quiz responses, coding exercises, progress tracking, grades, certificates
Project Information: Details about your projects, requirements, specifications, and deliverables
Payment Information: Billing address, payment method (processed securely by Stripe), subscription plan details
Communication Data: Messages, feedback, support requests, and correspondence

3.2 Automatically Collected Information

Usage Data: Pages visited, features used, time spent on platform, course navigation patterns, learning behavior
Device Information: Browser type, operating system, device identifiers, IP address
Location Data: Approximate location based on IP address
Cookies and Tracking: See our Cookie Policy for details

4. How We Use Your Information

We use your information for the following purposes:

Educational Services

To provide access to courses, track progress, grade assignments, generate certificates, and deliver personalized learning experiences.

Service Delivery & Account Management

To create and manage accounts, authenticate users, provide client portals, and deliver requested services.

Payment Processing

To process payments securely through Stripe, manage subscriptions, and handle billing.

Communication

To send course updates, assignment notifications, service alerts, and respond to inquiries.

Analytics & Improvement

To understand learning behaviors, improve course content, and optimize platform performance.

5. Legal Basis for Processing (GDPR)

For users in the EU/UK, we process your personal data based on:

Contract Performance: To fulfill our obligations when you enroll in courses or subscribe to services
Consent: When you've given explicit consent (e.g., marketing, optional cookies)
Legitimate Interests: To improve our educational platform, prevent fraud, and ensure security
Legal Obligation: To comply with applicable laws (tax, accounting, educational regulations)

6. How We Share Your Information

We do not sell your personal information. We may share your data with:

Service Providers

Trusted partners like Firebase (hosting/db), Stripe (payments), Twilio (SMS), and Vercel (infrastructure)

Educational Partners

Instructors and organizations may access learner progress and grades for courses they manage

Legal Requirements

When required by law, court order, or to protect our rights and safety

7. International Data Transfers

GradeSpace is based in the United Kingdom. Your information may be transferred to, stored, and processed in:

United States: Firebase/Google Cloud servers, Stripe payment processing, Twilio SMS services
European Union: Backup servers and content delivery networks

For transfers from the EU/UK to other countries, we rely on:

Standard Contractual Clauses (SCCs) approved by the European Commission
Adequacy decisions where available
Service provider privacy commitments and certifications

8. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

Account Data: Retained while active + 30 days after deletion
Educational Records: 7 years for certificate verification and academic records
Assignment Submissions: 2 years after course completion
Payment Records: 7 years for tax and accounting compliance
Communication Data: 3 years for support tickets
Analytics: Aggregated data retained indefinitely; logs for 2 years

9. Your Privacy Rights

EU/UK Users (GDPR)

✓ Right to Access: Request a copy of all personal data we hold about you
✓ Right to Rectification: Correct inaccurate or incomplete information
✓ Right to Erasure: Request deletion of your data ("right to be forgotten")
✓ Right to Restriction: Limit how we process your data
✓ Right to Portability: Receive your data in a structured format
✓ Right to Object: Object to processing based on legitimate interests
✓ Right to Withdraw Consent: Withdraw consent at any time
✓ Right to Lodge a Complaint: File a complaint with your data protection authority

California Users (CCPA/CPRA)

✓ Right to Know: Request information about data collected in past 12 months
✓ Right to Delete: Request deletion of your personal information
✓ Right to Correct: Request correction of inaccurate personal information
✓ Right to Opt-Out: We don't sell personal information, so this is not applicable
✓ Right to Non-Discrimination: Equal service regardless of privacy choices
✓ Right to Limit Use: Control use of sensitive personal information

Canadian Users (PIPEDA)

✓ Right to Access: Access personal information we hold about you
✓ Right to Correction: Correct inaccurate personal information
✓ Right to Withdraw Consent: Withdraw consent for data processing
✓ Right to File a Complaint: File a complaint with the Privacy Commissioner

Educational Records (FERPA)

✓ Right to Inspect: Review educational records we maintain
✓ Right to Amendment: Request correction of inaccurate records
✓ Right to Control Disclosure: Control disclosure of PII from education records

To exercise your rights, contact us at privacy@thegradespace.com. We will respond within 30 days.

10. Data Security

We implement comprehensive technical and organizational measures to protect your personal information:

🔒

Technical Safeguards

End-to-end SSL/TLS encryption, encryption at rest, secure authentication, and regular security patches.

👤

Access Controls

Role-based access control (RBAC), principle of least privilege, and audit logs for data access.

🛡️

Organizational Measures

Employee training, strict confidentiality agreements, and regular security audits.

💳

Payment Security

PCI DSS compliant processing via Stripe. We do not store payment card details on our servers.

11. Children's Privacy

Our educational platform may be used by minors as part of legitimate educational programs.

Under 13 (COPPA): We do not knowingly collect info without verifiable parental consent. Schools must obtain appropriate consent.
Under 18: Must have parental consent or be under school supervision.
Parent Rights: Parents can review, delete, or refuse collection of their child's data.

12. Third-Party Services and Links

Our platform integrates with third-party services like Firebase, Stripe, Twilio, and Vercel. Each has its own privacy policy. We are not responsible for the content or privacy practices of external sites.

13. Changes to This Privacy Policy

We may update this policy to reflect changes in our practices. Material changes will be notified via email or posted on our website 30 days before taking effect. Continued use constitutes acceptance.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

General Inquiries: privacy@thegradespace.com

Data Protection Officer: dpo@thegradespace.com

Address: Gradespace LTD, 86-90 Paul Street, London EC2A 4NE, United Kingdom