Secure data centers located within the European Union (EU)
Content you submit for AI features is processed through OpenRouter using only Zero Data Retention (ZDR) certified providers, which may involve international data transfers outside the EU.
EU residency applies to stored account data and study materials, not to real-time AI inference.
Hosting: Our platform is hosted on secure infrastructure compliant with GDPR and industry-standard security practices.
Privacy Mode: Strict Privacy Mode is always enabled and cannot be disabled by users.
Storage Scope: Account data, study materials, and chat history are stored in EU-based systems with encrypted databases and TLS 1.3 transport.
Account data and study materials are stored in Italy (EU). We select privacy-focused AI providers and configure maximum privacy settings.
When you use AI features, processing is performed by OpenRouter with ZDR-certified providers, which may involve international transfers we cannot monitor in real time.
We use EU Standard Contractual Clauses, encryption, Data Processing Agreements, and an essential-cookies-only posture compliant with the ePrivacy Directive.
Full GDPR rights: access, deletion, export, withdrawal of consent. You can disable AI while keeping your account.
Up to 3 years (see main Privacy Policy)
While your account is active
90 days for security and abuse monitoring
Adults (18+) using their own study materials for personal learning, comfortable with SCC-based international transfers.
Users needing strict EU-only processing, healthcare/education institutions needing HIPAA/FERPA compliance, users under 18, or anyone handling highly sensitive/confidential data.
This AI Privacy Policy explains how AI features work, what data is sent to third parties, and what we can and cannot guarantee.
AILearn360 controls account data and chooses providers. Third-party AI providers operate their own infrastructure under their privacy policies and our DPAs.
AILearn360 is designed for individual users aged 18+ for personal educational use.
All users must be 18+.
Italian Legislative Decree 101/2018 sets 14 as digital consent age, but we apply a stricter 18+ requirement globally.
Age is self-declared during registration; we rely on user honesty and do not knowingly collect data from users under 18.
Report suspected underage accounts to [email protected] for review.
AI features are provided as-is. AI may hallucinate, produce biased content, or include factual errors. You must verify all AI-generated information before relying on it.
Maximum liability is $100 USD or the subscription fees you paid, whichever is greater, except where GDPR or other mandatory law applies.
AILearn360 is designed for individual adult learners, not institutions.
While our ZDR AI providers may support HIPAA/FERPA in principle, AILearn360 is not certified for institutional compliance and does not offer Business Associate Agreements (BAAs), FERPA guarantees, or institutional audit trails.
The platform is for your own personal study materials only.
AILearn360 maintains written DPAs with OpenRouter and Google Cloud that satisfy GDPR Article 28.
Even though we rely on sub-processors, we remain responsible for ensuring they provide sufficient guarantees under GDPR Article 28.
We performed a Data Protection Impact Assessment (DPIA) for AI processing, covering necessity, proportionality, risks to users, encryption, minimization, and safeguards.
A summary can be shared with supervisory authorities, affected users on request, and compliance auditors (under NDA).
Our AI features process user study materials, personalize content, and involve international transfers. This is considered high-risk processing under GDPR Article 35(3), requiring a DPIA.
Software-as-a-Service (SaaS)
AILearn360 operates infrastructure, storage, and security. Users access through a browser.
Users are not responsible for configuring infrastructure, but are responsible for lawful use of the service.
We use AI to help you learn. We send parts of your study materials and questions to trusted AI providers to generate answers for you.
Stored in your account for context and review, following the retention rules in the main Privacy Policy (up to ~3 years).
Request metadata (timestamps, request IDs, rate limiting data) retained for ~90 days for troubleshooting and abuse prevention. These logs do not include full prompt/response text.
Encrypted backups typically retained for ~30 days, then purged.
Retains limited data for up to 55 days for abuse monitoring; does not store prompts/responses for paid API usage, and does not use such data for training.
ZDR-certified providers do not retain prompt/response data; contractual guarantee that customer data is not used to train models.
We do not have access to third-party providers' internal inference logs, intermediate states, or internal debugging traces.
You can withdraw your consent in settings to disable all AI processing without deleting your account.
You can delete stored AI conversation history immediately.
Strict Privacy Mode is enforced by default and cannot be disabled by users.
By using AI features, you agree that your study materials and questions may be processed by OpenRouter and ZDR-certified AI providers.
We configure maximum privacy via strict routing and data minimization, but we do not control third-party providers' internal systems.
See EU Data Residency and Data Retention for details on where and how AI providers may process data.
For AI features, our total liability is limited to the lesser of (a) what you paid in the 12 months before the claim, or (b) $100 USD.
This limit applies to all legal theories (warranty, contract, tort, etc.).
These exclusions do not apply to damages arising from GDPR violations or mandatory EU data protection obligations.
Nothing in this policy limits liability where such limitation would be unlawful.
Routes AI requests to privacy-focused model providers.
https://openrouter.ai/privacy
Does not store prompts/responses for paid API usage; keeps limited abuse-monitoring data up to ~55 days.
ZDR-certified providers via zdr: true
deny
strict
disabled
ZDR-certified AI model providers for generation and reasoning, selected via OpenRouter with zdr: true.
If you do not accept these terms, do not use AI features.
AI features are provided as-is with no warranty of accuracy, completeness, or suitability.
Our liability for AI features is capped at $100 USD or your subscription fees (whichever is greater), except where GDPR or mandatory law applies.
By using AI features, you agree to indemnify us for claims that arise from your use, except where such indemnification is restricted by applicable law.
For questions about this AI Privacy Policy or to exercise your rights, please contact us at [email protected]