Privacy Policy

Introduction

Teacher Assistant ("we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, and what rights you have in relation to it.

This policy applies to all users of the Teacher Assistant website at teacherassistant.ai and the Teacher Assistant PowerPoint Add-in and Google Slides integration.

Data Controller

The data controller responsible for your personal data is:

Data We Collect

Account data

When you create an account, we collect your name and email address. If you sign in via Google or Microsoft OAuth, we receive only the email address and display name provided by those services.

Usage data

We collect information about how you use the service — which features you use, how often content is generated, and general usage patterns. This data is used to improve the product and is not linked to personally identifiable information where avoidable.

Content data

We process the prompts and parameters you submit (topic, language, CEFR level) in order to generate lesson materials. We do not store the content of your generated materials beyond the active session unless you explicitly save them to your account.

Technical data

We automatically collect standard server log data including IP address, browser type, operating system, referring URLs, and timestamps. This data is used for security monitoring and technical diagnostics.

Communication data

If you contact us via email or our contact form, we retain your name, email address, and the content of your message in order to respond to your enquiry.

How We Use Your Data

We use the data we collect to:

• Provide and operate the Teacher Assistant service
• Authenticate your account and manage your session
• Generate lesson materials based on your inputs
• Improve the quality and accuracy of generated content
• Respond to support requests and enquiries
• Send important service notifications (account, billing, security)
• Analyse usage patterns to prioritise product improvements
• Comply with legal obligations

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

Legal Basis for Processing

We process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):

• Contract performance — processing necessary to provide the service you signed up for
• Legitimate interests — service improvement, security monitoring, and fraud prevention
• Consent — for analytics and non-essential cookies, where you have given explicit consent
• Legal obligation — where we are required to process data by applicable law

Cookies

We use cookies to operate the service and, with your consent, to analyse usage. Cookies are small text files stored on your device.

Essential cookies

Required for the service to function. These include session authentication tokens and security cookies. They cannot be disabled.

Analytics cookies

Used to understand how visitors use the site. We use anonymised analytics data to improve the product. These are only set with your consent.

Marketing cookies

Used to deliver relevant content and measure the effectiveness of our communications. These are only set with your explicit consent.

You can manage your cookie preferences at any time via the Cookie Settings link in the footer.

Sharing Your Data

We share your data only where necessary to operate the service:

• AI infrastructure providers — your prompts are processed by AI model providers to generate content. These providers are contractually bound to process data only for this purpose.
• Authentication providers — Google and Microsoft when you use OAuth sign-in
• Hosting and infrastructure — cloud service providers hosting the application
• Legal authorities — where required by applicable law or court order

All third-party processors are required to maintain appropriate technical and organisational security measures.

Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it by law.

Server logs are retained for up to 90 days for security and diagnostic purposes. Contact form submissions are retained for up to 24 months.

Your Rights

Under the GDPR you have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data ("right to be forgotten")
• Right to restriction — request that we limit how we process your data
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — withdraw consent at any time where processing is consent-based

To exercise any of these rights, contact us at info@wortkraftmaster.org. We will respond within 30 days.

Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted data transmission (HTTPS), secure authentication, and access controls.

No method of transmission over the internet is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

Children's Privacy

Teacher Assistant is intended for use by adult language teachers and educators. We do not knowingly collect personal data from children under the age of 16. If you believe we have inadvertently collected such data, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email or by placing a prominent notice on our website. The "Last updated" date at the top of this page reflects the most recent revision.

Continued use of the service after changes are posted constitutes acceptance of the updated policy.

Contact

For any questions about this Privacy Policy or to exercise your data rights, contact us at:

You also have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.