Privacy Policy

Last updated: June 20, 2026

1. Information We Collect

To provide our AI tutoring experience, we collect the following categories of data:

  • User Profiles & Credentials: Email addresses and terms/privacy acceptance timestamps.
  • Uploaded Materials: Learning files (PDFs, DOCX, PPTX, TXT) uploaded to your Global Library.
  • Chat History: Text messages exchanged with the Socratic AI tutor.
  • Board State: Whiteboard drawing snapshots and historical drawing command logs.
  • Telemetry Logs: Focus duration, break times, and session progress metrics.

2. Data Processing and Third-Party Sharing

We process your data using secure internal systems and select third-party services necessary for core features:

  • Google GenAI (Gemini Realtime API): We pass document texts, drawing snapshots, and live audio inputs to Google Gemini models to generate interactive tutoring responses. This processing is subject to Google's privacy protocols.
  • Qdrant (Vector Database): Text chunks extracted from your study documents are converted to vector embeddings and stored in Qdrant to enable semantic search (RAG) capabilities.
  • Firebase Authentication: We utilize Google Firebase for user credential validation, secure login session management, and identification purposes.
  • Dodo Payments: We collect names, emails, and billing details for payment processing. This transaction processing is handled securely in compliance with PCI-DSS guidelines to protect your financial information.

3. Data Storage, Security & Retention Limits

Your uploaded documents and databases are stored securely inside Google Cloud Storage (GCS) and isolated database networks (PostgreSQL and Qdrant). We implement secure database connection pooling, internal Docker network port isolation, and secure key encryption to prevent unauthorized data exposure.

To ensure high database query speeds, minimize long-term data footprints, and preserve student privacy, Tablo automatically **prunes Socratic chat history and telemetry logs older than 180 days** on a rolling basis. Uploaded learning files, syllabus documents, and mastered concepts in your learner profile will be retained continuously as long as your account is active.

Admin Data Access Notice: To maintain cognitive teaching standards, troubleshoot technical errors, and validate pay-per-hour tutoring balances, Tablo administrators and authorized system developers may access secure backend databases containing chat logs, telemetry metrics, and user profiles. This access is strictly guarded, limited to internal operations, and complies with industry standard least-privilege policies.

4. Right to Deletion (GDPR "Right to be Forgotten")

We fully respect your data privacy and rights under the General Data Protection Regulation (GDPR). You have the right to erase your data from our systems at any time:

  • Document Deletion: Deleting a document from your library permanently deletes the original file from GCS, deletes its text chunks and vector embeddings from Qdrant, and erases all associated database records.
  • Account Deletion: Deleting your account triggers a cascading purge that deletes your user profile, learner memory, chat logs, board snapshots, GCS files, and Qdrant points. Your email address is stored solely as a secure SHA-256 cryptographic hash in our offer protection log to prevent welcome-credits abuse, and no plaintext personal identifiers remain.

5. Policy Changes

We reserve the right to update this Privacy Policy as our service evolves. We will notify you of any changes by updating the "Last updated" date of this Privacy Policy on this page.

6. Contact Us

For any questions regarding your privacy, data deletion rights, or how your study materials are handled, please contact our support team at abemeleksamson@tablo.study.