GDPR Compliance

Last updated: September 10, 2025

1. What is GDPR?

The General Data Protection Regulation (GDPR) is a European Union regulation that came into effect on May 25, 2018. It governs the collection, processing, and protection of personal data of individuals within the European Union and the European Economic Area.

At LectureLearn, we are committed to complying with GDPR requirements to protect the privacy and data rights of our users, including those located in the EU/EEA.

2. Your GDPR Rights

As a user of LectureLearn, you have the following rights under GDPR:

  • Right to Access: You can request information about what personal data we hold about you.
  • Right to Rectification: You can request correction of inaccurate or incomplete personal data.
  • Right to Erasure: You can request deletion of your personal data in certain circumstances.
  • Right to Data Portability: You can request your data in a structured, commonly used format.
  • Right to Object: You can object to processing of your personal data for certain purposes.
  • Right to Restriction: You can request limitation of processing of your personal data.

3. How We Comply with GDPR

3.1 Lawful Basis for Processing

We process your personal data based on the following lawful bases:

  • Consent: When you explicitly agree to our data processing activities.
  • Contract: To provide our services and fulfill our contractual obligations.
  • Legitimate Interest: To improve our services and communicate with you.
  • Legal Obligation: When required by law.

3.2 AI Data Processing

As an AI-powered tutoring platform, we process your educational content and queries using Google Gemini APIs and other AI services. This processing is necessary for providing our core services and is conducted under strict data protection measures. We ensure that:

  • AI processing is limited to what is necessary for educational assistance
  • Data is processed securely and not used for unrelated purposes
  • You have control over your data and can request deletion at any time
  • AI-generated content is clearly marked and comes with appropriate disclaimers

3.3 Data Protection Impact Assessment

We conduct regular Data Protection Impact Assessments (DPIAs) for high-risk processing activities, including our AI data processing, to ensure compliance with GDPR requirements.

4. International Data Transfers

If we transfer your personal data outside the EU/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions by the European Commission.

5. Data Breach Notification

In the event of a personal data breach, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay if the breach poses a risk to their rights and freedoms.

6. Contact Us About GDPR

If you have any questions about our GDPR compliance or wish to exercise your GDPR rights, please contact us using the information below:

We will respond to your request within one month of receipt, or within three months if the request is complex.

7. Supervisory Authority

If you are not satisfied with our response to your GDPR request, you have the right to lodge a complaint with your local supervisory authority. You can find the contact details of your supervisory authority on the European Data Protection Board's website.

8. Changes to This GDPR Notice

We may update this GDPR compliance information from time to time. We will notify you of any significant changes by posting the new GDPR notice on this page and updating the "Last updated" date.