Privacy Policy

Introduction

ChalkSurf ("we," "us," or "our") is an AI-powered platform that helps math teachers create, discover, and manage teaching materials. This Privacy Policy explains how we collect, use, and protect your information when you use our service at chalksurf.com (the "Service").

Information We Collect

Account Information

When you create an account, we collect your email address and authentication credentials. We use Supabase Authentication to manage user accounts, and passwords are never stored in plaintext.

Content You Create and Upload

We store the math exercises, worksheets, solutions, hints, and figures you create or upload to the Service. This includes scanned pages and images you submit for AI-powered exercise extraction. Content you mark as "Public" will be visible to other users; content marked as "Private" remains accessible only to you.

AI Processing Data

When you use our AI features - such as exercise extraction from scanned pages, exercise generation, difficulty adaptation, or content customization - your input is sent to third-party large language model (LLM) providers for processing. We send only the content necessary to perform the requested operation. We do not send your personal account information to LLM providers.

Usage Data

We collect basic usage analytics to understand how the Service is used and to improve it. This may include pages visited, features used, search queries, and general interaction patterns. We use PostHog for analytics.

Technical Data

We automatically collect standard technical information such as your IP address, browser type, device type, and operating system. This data is used for security, troubleshooting, and service improvement.

How We Use Your Information

We use your information to:

• Provide and maintain the Service, including storing your exercises, worksheets, and teaching materials
• Process your content through AI features (exercise extraction, generation, and customization)
• Authenticate your identity and secure your account
• Improve the Service based on usage patterns
• Communicate with you about the Service (for example, account notifications and updates)

How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

• Service providers: We use third-party services to operate ChalkSurf, including Supabase (database and authentication), Cloudflare (hosting and CDN), and LLM API providers (AI features). These providers process data on our behalf and are bound by their own privacy policies.
• Public content: Exercises and materials you choose to make public will be visible to other ChalkSurf users.
• Legal requirements: We may disclose information if required by law or in response to valid legal process.

Data Storage and Security

Your data is stored in Supabase-managed databases with row-level security policies. Uploaded files (such as exercise figures) are stored in Supabase Storage. We use HTTPS encryption for all data in transit and follow reasonable security practices to protect your data at rest.

Data Retention

We retain your account and content data for as long as your account is active. If you delete your account, we will delete your personal data and private content within 30 days, except where retention is required by law. Content you made public and that has been incorporated into other users' worksheets may persist in anonymized form.

Your Rights

You have the right to:

• Access and download your data
• Correct inaccurate information
• Delete your account and associated data
• Export your exercises and materials

To exercise any of these rights, contact us at the email address below.

Children's Privacy

ChalkSurf is designed for use by teachers and educators, not by children. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

International Data Transfers

ChalkSurf is operated from Hungary. If you access the Service from outside the European Union, please be aware that your data may be transferred to and processed in countries with different data protection laws. By using the Service, you consent to such transfers.

For users in the European Economic Area (EEA), we process personal data on the following legal bases: performance of our contract with you (providing the Service), our legitimate interests (improving the Service, ensuring security), and your consent where applicable.

Third-Party Services

The Service integrates with the following third-party services, each governed by their own privacy policies:

• Supabase - database, authentication, and file storage
• Cloudflare - hosting, CDN, and DDoS protection
• PostHog - product analytics
• LLM API providers - AI-powered content processing

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or your data, please contact us at:

Email: [email protected]