Privacy Policy
Privacy Policy
Last updated: 8 October 2026 · v2026-10-08
This policy explains how T-place handles personal data when you visit our website or use the service. It covers teachers and students, the information we collect, why we use it, and how you can exercise your rights. If you have a question, please contact us using the email address below.
1. Who we are
T-place is operated by Kateryna Polishchuk, registered in the Unified State Register of Ukraine, 3518709724, 3 Strazhesko St, Kyiv, Ukraine. For questions about this policy or requests about your personal data, email teacher.place.co@gmail.com.
2. Who is responsible for personal data
Your account data. We use your registration and payment details, along with information about how you use T-place, to provide and support the service. We are responsible for deciding how this information is used. Under the GDPR, this makes us its controller. This policy explains how we handle it and what rights you have.
Your students’ data. You, or the school you work on behalf of, decide which student data is needed for teaching and how long to keep it. The teacher or school is the controller of that data. T-place processes it on your instructions to run lessons, store answers and show results. In this role, we are a processor and follow the terms of our Data Processing Agreement. We do not use students’ work for our own purposes.
For students and parents. You can read about data collected during lessons in the section below. For questions about a particular lesson, or to ask for data to be corrected or deleted, contact the teacher or school that organised it.
3. What information we collect
| Category | Information | Source |
|---|---|---|
| Account | Email address, a password hash and email verification status. If you sign in with Google, we also receive your Google account ID, email address, name and profile picture URL. | You, or Google if you choose Google sign-in. |
| Profile | Name, country, profile description and image, interface and teaching languages, notes, to-do items and saved instructions for the AI assistant. | You. Most profile fields are optional. |
| Teaching content | Lessons, exercises, collections, uploaded images, documents, audio and video, classes and assignments, and live-class chat messages and drawings. This may include student names you enter in a class roster or calendar entry; we process those names on your behalf. | You. |
| AI conversations | Your messages, the assistant’s replies, attached images and usage records. | Your use of AI features. |
| Billing | Your plan and subscription, payment and invoice records, and payment-provider notifications. We do not receive or store your full card number. | Our payment provider. |
| Technical and security data | The IP address and browser recorded at sign-in. Error logs may also contain the IP address, browser details and URL of a failed request. | Your browser, automatically. |
| Support and reports | Messages you email us and reports you submit in the app. | You. |
4. How we use personal data
| Purpose | Reason | Legal basis |
|---|---|---|
| Provide your account and the service, including sign-in, lesson storage and classroom features. | To deliver the service you requested. Student data is processed on the teacher’s or school’s instructions under the DPA. | Performance of our contract for your account data. The teacher or school determines the legal basis for student data. |
| Send service emails, such as verification links, password resets and class or subscription notices. | To manage your account and keep you informed about the service. | Performance of our contract. |
| Respond to requests made through AI features. | To provide the AI features you choose to use. | Performance of our contract. |
| Process payments, issue invoices and keep accounting records. | To manage purchases and meet accounting requirements. | Performance of our contract and compliance with legal obligations. |
| Maintain security and reliability through session records, request checks, rate limits, checks of the email domain used to register (including a DNS mail-server lookup), error logs and monitoring. | To protect accounts and detect or resolve faults. | Our legitimate interest in providing a secure, reliable service. |
| Measure visits to the website using cookieless analytics. | To understand how the website is used. | Our legitimate interest in understanding website use. |
| Display material you publish in the community library. | To share the material you choose to publish with other teachers. | Consent, which you can withdraw by unpublishing the material. |
We do not sell personal data or use it for advertising. We do not build profiles to predict your interests or behaviour.
5. Information for students and parents
Students can join a lesson using a link or code from their teacher, without creating an account. We ask for a name so the teacher can identify each student’s work. A first name or nickname is enough. You do not need to provide your full name, address, phone number or date of birth.
Your answers are saved as you work, so you can continue after closing a tab or losing your connection. Your teacher can see your answers and results. Some exercises are marked automatically against the teacher’s answer key, and the teacher can change any grade. We do not routinely read students’ work; authorised access may be needed to help the teacher or investigate a technical or security issue. We do not use that work for advertising or to train AI models.
The teacher or school decides how long to keep lessons and student work. If you want to access, correct or delete your data, contact them first. They can manage the data in T-place or ask us for help.
You can also email us at teacher.place.co@gmail.com. If your request concerns data we process for a teacher or school, we will refer it to them and help them respond. We do not independently change or delete that data without their instructions, unless the law requires us to do so.
Lessons may include activities from Miro, Wordwall, Quizlet or Genially, or videos from YouTube. Opening an activity or playing a video connects your browser to that provider, which may receive your IP address and browser details and use its own cookies. YouTube preview images are also loaded from Google before you press Play. Information you enter in an external activity is handled by that provider under its own privacy policy. Links to those policies are on our provider list.
6. How AI features use your data
The AI assistant uses models from Anthropic and OpenAI, both based in the United States. When you use the assistant, we send the information it needs to respond: your message, earlier messages in the conversation, relevant lesson content, any images you attach and your saved instructions. We do not include your email address or billing details as account information. If you put personal information in a message, attachment or lesson, it may be included in the content sent to the provider.
We do not routinely read your conversations with the assistant. Authorised staff may access a conversation if you ask for help with it or if we need to investigate misuse of the service.
Automatic grading does not use an AI provider. Student answers are checked on our servers against the teacher’s answer key. This process does not send submissions to Anthropic or OpenAI. However, if you paste a student’s work into the assistant or attach an image of it, that content is sent with your request. Please do not include students’ personal data in AI requests.
Our business terms with Anthropic and OpenAI state that they do not use the content we send to train their models. They may retain it for a limited period for abuse monitoring, as described in their policies. You can find links on our provider list.
7. How automatic grading works
T-place checks exercises with predefined answers against the teacher’s answer key. Open questions and free writing are marked by the teacher. Teachers can review and change every result. Automatic marks are intended to support teaching; decisions that significantly affect a student should involve the teacher’s own review and judgement.
8. Who we share data with
We use service providers for hosting, file storage, email, payments, AI features and monitoring. They receive the information needed for their services. Where a provider acts as our processor, it handles that information on our instructions under a data processing agreement. Some providers also act as independent controllers for particular activities, such as payment compliance. Our provider list describes the services we use and their locations.
We may also share data with professional advisers who have a duty of confidentiality, with authorities when legally required, or with a buyer if the business is sold. If ownership changes, we will tell you before any resulting material change to how your data is handled.
Storage and international transfers. Our application databases, uploaded files and database backups are hosted in Google Cloud’s Belgium region, within the European Union. Some providers are based in the United States and may process or access data there. For these transfers, we rely on the European Commission’s Standard Contractual Clauses or, where applicable, the provider’s certification under the EU–US Data Privacy Framework. Contact us for a copy of the safeguards that apply.
9. How long we keep data
Retention depends on the type of information. Some records are deleted automatically. Lessons, uploads and student work generally remain until you delete them or ask us to close your account. The table below explains the current retention periods.
| Information | Retention |
|---|---|
| Sign-in sessions, including the recorded IP address and browser | Deleted after expiry or sign-out by the scheduled cleanup process. |
| Email verification and password-reset tokens | Deleted by the cleanup process once they have been expired for seven days. |
| In-app notifications | Usually 7 to 30 days, depending on the type. Some system notices have no expiry and remain until removed. |
| AI conversation messages | The latest 100 messages in each conversation are kept. Messages outside that group are deleted once they are more than 90 days old. |
| Abandoned uploads | Removed after 24 hours. |
| Database backups | Kept for 15 days. Deleted data is removed from backups as they expire within that period. |
| Your account, profile, teaching content, uploads, classes and student work (except live-class chat and drawings) | Kept while your account is open, unless you delete it earlier. There is currently no automatic expiry for this data. You can ask us to close your account and delete it. |
| Live-class chat messages and drawings | Deleted 90 days after the class ends (180 days if it was never ended). |
| Billing and invoice records | As long as tax and accounting law requires, even after the account is closed. |
| Error logs containing IP addresses and browser details | Kept for the retention period of our monitoring-provider plan. Contact us for the current period. |
10. Your rights and how to use them
You can ask to access, correct or delete your personal data, restrict its use, or receive it in a portable format where those rights apply. You can also object to processing based on our legitimate interests. If we rely on your consent, you can withdraw it at any time without affecting the lawfulness of earlier processing. These rights come from Ukrainian data protection law for users in Ukraine and from EEA law for users in the EEA, and we extend the same protections to users elsewhere.
To make a request, email teacher.place.co@gmail.com. We respond within one month. Account deletion is currently handled by our team on request. Before deleting your account, we will confirm which data will be removed so you have an opportunity to save a copy.
You also have the right to complain to a data protection authority, including the authority where you live or work. You can contact us first if you would like us to help resolve the issue, but you do not have to.
11. How we protect data
We use HTTPS to protect data in transit and store passwords as Argon2id hashes rather than readable text. Sign-in uses short-lived signed tokens with rotating keys. Students receive separate tokens with access limited to their session. Our services use separate databases, uploaded files are held in private storage, and access links are time-limited. Database backups are encrypted, and monitoring helps us detect failures. More detail is available in the security section of the Data Processing Agreement.
12. Children’s data
Teacher accounts are available to people aged 18 or over. Children can take part in lessons without an account, under the guidance of a teacher. The teacher or school is responsible for having a lawful basis for processing student data and obtaining any permissions required. If you believe a child has created a teacher account, contact us so we can investigate and remove it.
14. Changes to this policy
We may update this policy as the service changes. We will notify you before a material change to how we handle your data takes effect. If you have any questions, email teacher.place.co@gmail.com.