Privacy Policy
Last Update: 06/03/2024
Table of Contents
-
2.1 Information You Provide to Us
2.1.1 Communications
2.1.2 Payment Information
2.2 Information We Collect When You Visit Our Website
-
Legal Grounds for Processing Personal Data within European Territories
5.1 Consent
-
How We Share the Information We Collect
6.1 Vendors And Service Providers
6.3 As Required By Law and Similar Disclosures
6.4 Merger, Sale, or Other Asset Transfers
6.5 Consent
-
7.1 Controls
1. Introduction
Astrid Education AB (“Astrid,” “we,” “us,” “our”) values your trust and privacy above all else and is committed to protecting your personal data. We do not sell your information nor use it for advertising purposes.
If you have any questions or concerns regarding this privacy notice or our practices relating to your personal information, please contact us at support@withastrid.com.
We appreciate the trust you place in us when using our website https://withastrid.ai (the “Website”), Astrid AI Assistant, or any of our services (collectively referred to as the “Services”). We are dedicated to safeguarding your privacy. This privacy notice outlines the types of information we collect, our usage practices, and the rights you have concerning your data.
We urge you to read this privacy notice carefully and inform us if you disagree with any of the terms. If you are located in the European Economic Area (“EEA”) or the United Kingdom (“UK”), “personally identifiable information” (PII) refers to any data related to an identified or identifiable individual.
This privacy notice is applicable to all information gathered through our Services, including our Website and App, as well as any related services, sales, marketing, or events. In addition to this Privacy Policy, the utilization of our Services is also governed by our Terms of Service.
2. Information We Collect
2.1 Information You Provide to Us
When you download our application, utilize our services, engage in communication with us, or subscribe to our email notifications, you furnish us with personally identifiable information (PII) pertaining to yourself. This information may include, but is not limited to, your email address, voice data, and internet protocol (IP) address.
2.1.1 Communications
Should you initiate direct contact with us, we may acquire additional information concerning you. For instance, when you reach out to our Customer Support Team, we obtain your name, email address, the content of your message or any accompanying attachments, and any other information you opt to share. Furthermore, when we send you emails, we may monitor if you open them or engage with any links, with the intent of enhancing our customer experience and services.
2.1.2 Payment Information
We do not gather any payment-related information on our platform. In the event that you execute a purchase through our Services, your payment information – for example, credit card or other financial details – will be collected by our third-party payment processor on our behalf.
2.2 Information We Collect When You Visit Our Website
Websites collect personal information through the documentation of your computer’s identifier and Internet Protocol (IP) address, both of which are distinct to your computer and can be tracked back to you. Moreover, websites gather data via the utilization of cookies, which are diminutive text files capable of collecting and retaining data on the hard drive of your computer. It is crucial to emphasize that our website does not deploy such cookies.
Nonetheless, specific information, including your IP address, browser selection, and operating system, is recorded to ensure the proper functioning of websites. Be aware that this information is solely gathered for technical purposes and to maintain the smooth operation of our website.
2.3 Collection of Information When You Use Our Services
When you utilize our services, we gather essential data to ensure optimal functionality. One such instance is when you interact with our Automatic Speech Recognition (ASR) Service, where we process voice recordings to provide an accurate assessment of your speaking capabilities. It is important to emphasize that we do not listen to or record anything without your explicit consent. You remain in complete control, and we only process your voice recordings and evaluate your speaking abilities when you actively press the record button.
Moreover, we may collect certain personally identifiable information (PII) from you, which includes:
- Your account’s user name
- Email address
- Device information (manufacturer, model, device type, screen size, locale, OS information, timezone)
- Please be assured that we take your privacy seriously, handling your data with the utmost care and security. Our commitment lies in providing a safe and transparent user experience for all our valued users.
The privacy and security of your information are our top priorities. As such, we strictly adhere to a robust data retention policy that outlines the timeframe for retaining your data. For a comprehensive understanding of our data retention practices, we invite you to consult the applicable policy, which can be found by visiting our data retention page. policy.
2.4 Information from Third-Party Services
As a user, you have the ability to connect Third-Party Services to enhance a variety of features. For example, you can merge your calendar with Google, choose to sign in through your Google account, or decide to synchronize your class data from Google Classroom. If you opt to sign in to our Teacher platform using your Google account, certain details like your first and last name, as well as your email, will be shared with us. When you sync your Google Classroom data with our platform, we’ll receive information about who’s in your class. Furthermore, if you decide to integrate Astrid Assistant with your calendar, our services will access and store the names and times of your upcoming events from your chosen calendar on your device. This data isn’t transmitted or stored anywhere else. We use this information to provide you with notifications, pre-meeting alerts, and reminders. You’re free to enable or disable these features at your convenience. We assure you that your information remains private and isn’t shared with any third parties. Additionally, no Google data is shared with any third-party services.
Furthermore, any use or transfer of the information we receive from Google APIs to other applications strictly adheres to Google API Services User Data Policy, including the Limited Use requirements. To learn more about Google’s User Data Policy, you can read it here.
Please note that we neither receive nor store passwords for any Third-Party Services when you connect them to our platform. If you have enabled such features, we recommend reviewing the privacy settings and information provided by the Third-Party Services to understand what data may be shared with us.
3. Large Language Model-Powered Response Generation
Our Astrid AI Assistant leverages advanced Large Language Models (LLMs) obtained from reputable third-party providers to generate coherent and natural language responses. These models utilize data from our proprietary ASR model, including linguistic metrics such as fluency, intelligibility, and pronunciation scores. Additionally, a transcript of your recording session is used to create summary notes. By combining the evaluation capabilities of our ASR model with the text generation abilities of LLMs, we offer personalized responses tailored to your specific needs. It is important to note that the LLMs do not collect any biometric data, such as your voice. LLMs are versatile artificial intelligence technology widely employed in natural language processing, chatbot interactions, and human-oriented communication scenarios. We have implemented stringent measures to safeguard your personal information. Any data transmitted to our third-party partners undergoes a comprehensive anonymization process to ensure it remains untraceable to individual users.
However, it is essential to acknowledge that when you create an account with Astrid, you agree to the utilization of third-party services within our platform. These services play a vital role in providing an exceptional user experience by delivering intelligent and contextually relevant responses. If you wish to discontinue the transmission of your speech scoring data to an external service, please contact us at support@withastrid.com to terminate your account.
4. Utilization of Collected Information
We collect and process your information for various purposes, as detailed below. These objectives encompass the provision and enhancement of our Services, communication with you, marketing initiatives, fraud prevention, enforcement of our Terms of Service, compliance with legal obligations, and any other purposes we may inform you about when gathering your information. Specifically, we use the gathered information to:
- Deliver, maintain, refine, and augment our Services;
- Comprehend and evaluate your usage of our Services while developing new services, services, features, and functionalities;
- Engage in communication with you, furnish updates and other information pertinent to our Services, address your requested information, respond to remarks and queries, and render customer support;
- Generate anonymized, consolidated data consisting solely of de-identified, non-personal information that is legally permissible for any purpose;
- Detect and prevent fraudulent activities, as well as address trust and safety concerns that may transpire;
- Adhere to compliance requirements, including enforcing our Terms of Service or other legal entitlements, or as mandated by relevant laws and regulations, or as necessitated by any judicial procedure or governmental authority;
- Serve other objectives for which we furnish explicit notice during the collection of information.
5. Legal Grounds for Processing Personal Data within European Territories
If your residence or place of business is within the European Economic Area (EEA) or the United Kingdom (UK), we shall only process your personal data when there is a valid and lawful basis for doing so, as outlined below.
5.1 Consent
We may process your personal data when you have provided us with clear and explicit consent for specific data processing activities.
5.2 Contractual Necessity
We may process your personal data when it is essential to deliver our Services to you. For instance, we might need to process your personal data to address your inquiries or fulfill your requests.
5.3 Compliance with a Legal Obligation
We may process your personal data when we are obliged by law to do so. For instance, we might process your personal data to adhere to tax, labor, and accounting requirements.
5.4 Legitimate Interests
We may process your personal data when we or a third party possess a legitimate interest in the processing activity. Notably, we have a legitimate interest in utilizing your personal data for service enhancement and internal analytics purposes, as well as in improving the safety, security, and efficacy of our Services. We will only rely on our or a third party’s legitimate interests to process your personal data when these interests do not infringe upon your rights and interests.
6. How We Share the Information We Collect
This section talks about how we share information that is actually collected. We may share personal information from or about you with service providers, third-party applications, and services you connect to our Services, analytics providers, as required by law, in connection with a corporate transaction, or otherwise with your consent. We do not share or otherwise disclose the information we collect from or about you except as described below or otherwise disclosed to you at the time of the collection.
6.1 Vendors and Service Providers
We may share any information we receive with vendors and service providers retained in connection with the provision of our Services.
6.2 Analytics Partners
We use analytics services such as Mixpanel, Sentry, and Segment to collect and process certain analytics data in some of our products, but we do not use any analytics on the services designated for children or our desktop app (Astrid For Education or Astrid AI Assistant). These services may also collect information about your use of other websites, apps, and online resources. To help us understand how you use our Services and to help us improve them, we automatically receive information about your interactions with our Services, like the pages or other content you view, the searches you conduct, purchases you make, your comments, and the dates and times of your visits.
6.3 As Required By Law and Similar Disclosures
We may access, preserve, and disclose information that has been collected if we believe doing so is required or appropriate to: (a) comply with law enforcement requests and legal processes, such as a court order or subpoena; (b) respond to your requests; or (c) protect your, our, or others rights, property, or safety. For the avoidance of doubt, the disclosure of your information may occur if you post any objectionable content on or through the Services.
6.4 Merger, Sale, or Other Asset Transfers
The use of your information following any of these events will be governed by the provisions of this Privacy Policy in effect at the time the applicable information was collected.
6.5 Consent
We may also disclose your information with your permission.
7. Your Choices
Users of the App have the following controls over their information:
- Pause or stop recordings at any time
- Access or download your information, including personal information like your name, email address, and voice recordings we have collected
- Update or correct inaccuracies in your personal information
- Delete certain personal information we have about you, except information we are obligated to keep for legitimate business or legal purposes
- Disable certain types of data collection (where technically feasible)
You can also opt out of receiving marketing emails from us by clicking the “unsubscribe” link present in all our communications. Please note that even if you opt out, we may still need to contact you regarding your account or services you have requested.
7.1 Controls
Users of the App can pause or stop their recording at any time. If you have any requests related to your data and GDPR, please do not hesitate to reach out to us at dpo@withastrid.com.
7.2 Your European Privacy Rights
As a European company operating within the European Union, we understand and respect your privacy rights as prescribed under the European General Data Protection Regulation (GDPR) and other applicable data protection laws. If you are a resident of the European Economic Area (EEA) or the United Kingdom, you have additional rights concerning your personal information, as detailed below.
You may request access to, updates, or corrections of any inaccuracies in your personal information that we hold. Furthermore, you have the right to restrict or object to the processing of your personal information, request that your information be anonymized or deleted (when appropriate), or exercise your right to data portability, allowing you to easily transfer your personal information to another organization.
In addition, you possess the right to lodge a complaint with a supervisory authority, including in your country of residence, place of work, or where a specific incident occurred. You are entitled to withdraw any consent previously provided to us regarding the processing of your personal information at any time, without incurring any charges. We will honor your preferences moving forward, and such withdrawal will not affect the legality of any processing that occurred prior to your withdrawal of consent.
To exercise these rights, please contact us using the contact details provided at the end of this Privacy Policy. In order to fulfill your request, we may require you to provide reasonable information to verify your identity. Kindly note that exceptions and limitations apply to each of these aforementioned rights. Although any changes you make will be reflected in active user databases immediately or within a reasonable timeframe, it is important to understand that we may retain personal information for backup, archiving, fraud and abuse prevention, analytics, compliance with legal obligations, or when we reasonably believe that we have a legitimate reason to do so.
7.3 Do Not Track Compliance
Currently, there is no universally accepted standard for addressing Do Not Track signals, and as such, we do not engage with or respond to these signals.
Please be aware that if you opt not to provide us with the information we require, certain features of our Services may not function as intended.
8. Third-Party Involvement
Our Services may contain links to websites, services, or services that are not owned or operated by us. Please be advised that we are not accountable for the privacy practices of these third parties. This Privacy Policy does not govern your activities on these third-party platforms, nor does it pertain to any information you disclose to them. We strongly recommend that you review their respective privacy policies before divulging any information to them.
9. Security Measures
We endeavor to employ reasonable precautions to safeguard the information we collect. However, we cannot provide absolute assurance regarding the security of your information. To bolster the safety of the information we maintain, we utilize various physical and electronic protective measures. It is crucial to recognize that no electronic transmission or storage method can guarantee complete security; thus, we cannot promise the absolute protection or privacy of your information.
10. Retention of Personal Information
We will either delete personal information or retain it in a form that does not enable individual identification when it is no longer necessary for the purpose for which it is processed, unless legally mandated to preserve the information for an extended period.
In cases where we process personal information for our own objectives, we establish the retention period based on a variety of factors, such as the type of services we provide to you, the nature and duration of our relationship, the probability of reengagement with our services, the potential impact on our services resulting from the deletion of certain information about you, and compulsory retention periods as stipulated by law and the statute of limitations.
11. California Residents Have Specific Privacy Rights
If you are a resident of California, you have specific rights regarding access to your personal information. The “Shine The Light” law (California Civil Code Section 1798.83) allows our California users to request and obtain from us, once a year and free of charge, information about the categories of personal information (if any) we disclosed to third parties for direct marketing purposes, and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. To make such a request, please submit your request in writing to us using the contact information provided below.
If you are under 18 years of age, reside in California, and have a registered account with one of our services, you have the right to request the removal of unwanted data that you publicly post on the Services. To request the removal of such data, please contact us using the provided contact information and include the email address associated with your account and a statement that you reside in California. We will ensure that the data is no longer publicly displayed on the Services, but please note that the data may not be completely or comprehensively removed from all of our systems (e.g. backups, etc.).
12. Children’s Privacy
We do not knowingly collect, maintain, or use personal information from children under 18, and no part of our services is directed toward children. If you become aware that a child has provided us with personal information in violation of this Privacy Policy, please contact us at support@withastrid.com.
13. International Visitors
We retain the information we gather within the European Union and may transfer it outside your country. In doing so, we employ appropriate safeguards to ensure sufficient protection of your personal information. Our Services are hosted in the United States and are designed for users situated in the United States. If you opt to utilize our Services from the EEA, the UK, or other regions with varying data collection and usage laws compared to the United States law, please be aware that you are transferring your personal information to the United States for storage and processing. We may transfer personal information from the EEA or the UK to the U.S. and other third countries, following European Commission-approved or UK Government-approved Standard Contractual Clauses, or otherwise in compliance with relevant data protection legislation. Furthermore, we may transfer your data from the U.S. to other countries or regions for data storage and processing, meeting your demands, and maintaining the Services. By submitting any information, including personal information, to the Services, you consent to such transfer, storage, and processing.
14. Amendments to this Privacy Policy
Modifications to this Privacy Policy pertain to your use of our Services following the “last updated” date displayed at the top of this page. We will publish any revisions to the Privacy Policy on this page, and the updated version becomes effective upon posting. If we substantially alter the ways in which we use or share personal information previously obtained through the Services, we will notify you via the Services, email, or other forms of communication.