Privacy Notice

DeconstructAI is an educational software service operated by Sabrice Guerrier. Sabrice Guerrier is the data controller for personal data collected through the service.

We collect the following categories of personal data:

• Account information: email address, account role (student, instructor, owner), and authentication credentials managed by our backend provider.
• Course context: section enrollments and join codes you participate in.
• Tutor conversations: questions, responses, attachments, and session metadata.
• Usage and billing data: credit usage events, payment history, and access entitlements.
• Device and security data: trusted-device identifiers and IP addresses used for fraud prevention and account security.

We use personal data for the following purposes and legal bases:

• Providing the service: to authenticate you, run tutoring sessions, manage sections, and process payments (contract performance).
• Security and fraud prevention: to enforce device limits, detect abuse, and protect accounts (legitimate interest).
• Product improvement: to understand how the service is used and improve tutoring quality (legitimate interest, or consent where required).
• Customer support: to respond to inquiries and resolve issues (contract performance or legitimate interest).
• Marketing: only with your consent where applicable.

We share personal data only as needed to operate the service. Our current service providers are:

• Lovable Cloud: application hosting and deployment.
• Supabase: authentication, database, and file storage.
• OpenAI (via Lovable AI Gateway): generating AI tutor responses from your inputs.
• Paddle: our Merchant of Record for payment processing, subscription management, tax compliance, and invoicing.
• Brave Search API or an equivalent search provider: looking up learning resources related to your topic.

We may also share personal data with professional advisers (such as legal or accounting advisers) and with authorities where required by law or to protect our rights. This list may change as our infrastructure evolves; we will update this notice when it does.

Conversations are private by default. Instructors cannot view conversation contents unless the student explicitly shares the conversation. By default, instructors see activity metadata only.

Students may voluntarily choose to share tutor conversations to help improve DeconstructAI. When conversations are used for product improvement, personally identifying account information is removed or minimized where practical.

Account information and tutoring conversations are retained while an account remains active. Upon account deletion, personal information is deleted or anonymized within a reasonable period unless longer retention is required for legal obligations, fraud prevention, security, payment records, or dispute resolution.

Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to or withdraw consent for certain processing. If you are located in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local supervisory authority.

To exercise any of these rights, contact us at support@deconstructai.org. We will respond within the timeframe required by applicable law.

We implement appropriate technical and organizational measures to protect personal data, including encryption in transit, access controls, and regular review of our practices.

Only cookies and similar technologies necessary for authentication, security, and operation of the service are used. We do not use analytics or marketing cookies without your consent.

DeconstructAI is operated from the United States, and our service providers may process personal data in the United States and other countries. If you access the service from outside the United States, your personal data will be transferred to and processed in the United States.

Where personal data is transferred from the European Economic Area or the United Kingdom, we rely on appropriate safeguards such as Standard Contractual Clauses or an applicable adequacy decision, as implemented by the service providers listed above.

We may update this Privacy Notice from time to time. We will post the revised notice with a new “Last updated” date. Material changes will be communicated to users where required.

If you have questions about this Privacy Notice or how we handle your data, contact us at support@deconstructai.org.