EduCorelb
Privacy Policy
Effective date: 22 July 2026
EduCorelb ("EduCorelb", "we", "our", or "us") is committed to protecting the personal information of the students, teachers, and administrators who use the Platform. This Privacy Policy explains what information we collect, why, how we use and safeguard it, and the rights available to individuals, when you use www.educorelb.com and related services. It is designed to comply with Lebanese Law No. 81 of 2018 on Electronic Transactions and Personal Data, and to align with the principles of the EU General Data Protection Regulation (GDPR), under which our hosting infrastructure operates.
1. Definitions
- Platform: the EduCorelb website, applications, and services.
- Educational Institution (or "School"): a school or educational organization that subscribes to EduCorelb for its staff and students.
- Personal Data: any information relating to an identified or identifiable individual.
- Data Controller: the party that determines the purposes and means of processing Personal Data. For student and class data, this is the Educational Institution.
- Data Processor: the party that processes Personal Data on the Controller's behalf and under its instructions. For student and class data, this is EduCorelb.
- Processing: any operation performed on Personal Data, such as collection, storage, use, disclosure, or deletion.
2. Our Role: Controller and Processor
For the personal information of students and classes, the Educational Institution is the
Data Controller and EduCorelb acts as its
Data Processor: we process that data only to deliver the Platform and only on the School's documented instructions, which are set out in these terms and in any Data Processing Agreement between us. For a limited set of data that we determine ourselves (for example, the billing contact details a School provides, security logs, and the account of a School's designated administrator), EduCorelb acts as an independent
Data Controller. Schools may request our Data Processing Agreement at
support@educorelb.com.
3. Information We Collect
We collect only what the Platform needs to work:
- Account information: full name, username, email address (optional for students), user role, and school/class assignment.
- Student learning information: student identifiers, exercise results (which exercises were attempted, the answers given, whether they were correct, the specific mistake associated with a wrong answer, and time spent), and homework/assignment status.
- Teacher information: class and section assignments, and any content or announcements a teacher creates.
- School administration information: for the staff a School designates as billing or renewal contacts, a name, email, and phone number.
- Technical information: IP address (processed transiently to prevent abusive login attempts, and captured in standard hosting logs), and session/authentication cookies needed to keep you signed in.
We do not collect profile pictures, attendance records, teaching schedules, health data, or any special-category data. We run no advertising or analytics tracking, no location tracking, and no tracking across other websites.
4. Legal Basis for Processing
We process Personal Data on the following bases:
- Performance of a contract: to provide the services agreed with the Educational Institution.
- The instructions and authorization of the Educational Institution, which is responsible for establishing the appropriate legal basis (including any parental or guardian consent required by law) for the student data it asks us to process.
- Legitimate interests in keeping the Platform secure and functioning, such as preventing abusive login attempts and monitoring for errors, balanced against the rights of individuals.
- Legal obligations, where processing is required to comply with applicable law.
5. How We Use Information
We use information to:
- Provide educational services and deliver exercises;
- Authenticate users and keep accounts secure;
- Generate progress reports and dashboards for students, teachers, and administrators;
- Facilitate communication between schools, teachers, and students (such as homework and announcements);
- Maintain platform security and prevent abuse;
- Improve platform functionality;
- Provide customer support;
- Manage school subscriptions and billing;
- Comply with legal obligations.
We do not use student learning data for advertising, and we do not sell it. We do not use student Personal Data to train artificial-intelligence models.
6. Educational Data Ownership
Educational Institutions remain the owners and Controllers of their educational data. EduCorelb acts as a Processor and processes data only as necessary to deliver the Platform and support school operations. Access to student and class data is restricted by role-based rules enforced in the database itself: students see only their own progress, teachers see only the classes they teach, and school administrators see only their own school.
7. Data Sharing
EduCorelb does not sell personal information. Information may be shared only with:
- The Educational Institution the user belongs to;
- Service providers who host and run the Platform on our behalf (database and file storage, application hosting, transactional email delivery, login-abuse prevention, and error monitoring), each bound to process data only for that purpose;
- Government or judicial authorities when legally required;
- Third parties with the consent of the Educational Institution or user, where applicable;
- A successor entity in the event of a merger, acquisition, or sale of assets, subject to this Policy.
8. International Data Transfers
Platform data is stored with our database provider in Frankfurt, Germany (EU), and our application servers are configured to run from the same region to keep access fast and data close to home. Some of our service providers (such as email delivery and error monitoring) may process limited technical data in other jurisdictions, including the United States, as part of providing their services to us. Where data is transferred outside its region of origin, we rely on appropriate safeguards, such as the provider's Standard Contractual Clauses and equivalent contractual protections.
9. Data Security
EduCorelb implements reasonable administrative, technical, and organizational safeguards, including:
- Encrypted connections (HTTPS) between your device and the Platform;
- Role-based access controls enforced at the database level;
- Secure, server-managed authentication sessions;
- Automated protection against repeated failed login attempts;
- A strict content-security policy and standard web security headers;
- Error monitoring configured to exclude personal information;
- Regular backups.
Correct answers and explanations for an exercise are withheld from a student until after they submit, and are never exposed to the student's device before that point. While we work to protect information, no method of electronic storage or transmission can guarantee absolute security.
10. Data Retention
We retain information only as long as necessary for the purposes described in this Policy. Indicative retention periods are:
| Data | Retention |
|---|
| Account and learning data of an active School | For the duration of the subscription |
| A user account deleted by a School | Recoverable for 30 days, then permanently removed |
| Data after a subscription ends | Available for export or deletion on the School's request; otherwise removed within a reasonable period, subject to legal obligations |
| Security and hosting logs | A limited period consistent with security and abuse-prevention needs |
| Backups | Cycled on a rolling basis and overwritten in the ordinary course |
11. Data Breach Notification
We maintain procedures to detect, investigate, and respond to security incidents. In the event of a personal-data breach that is likely to affect a School's data, we will notify the affected Educational Institution without undue delay after becoming aware of it, and provide the information reasonably needed for the School to meet its own notification obligations under applicable law.
12. Automated Processing
Grading on the Platform is deterministic: an answer is compared against the correct answer for that exercise, and the result is recorded. We do not carry out profiling or automated decision-making that produces legal or similarly significant effects on an individual.
13. Your Rights
Subject to applicable law and School policy, individuals may have the right to:
- Access their personal information;
- Correct inaccurate information;
- Request deletion, where legally permissible;
- Request export of their information in a portable format;
- Object to, or request restriction of, certain processing;
- Withdraw a consent that was previously given, without affecting prior processing.
Because Schools own and control their students' data, requests regarding student information should generally be directed to the Educational Institution first. Where EduCorelb acts as Processor, we will assist the School in responding to such requests. You may also contact us directly at
support@educorelb.com and we will respond within the period required by applicable law.
14. Children's Privacy
EduCorelb is designed for use by educational institutions. Student accounts are created and managed by Schools, or by EduCorelb on a School's behalf, not by students themselves and not through public sign-up. Schools are responsible for obtaining any parental or guardian permissions or consents required by applicable laws and regulations before a student account is created.
15. Cookies and Local Storage
EduCorelb uses cookies only to keep you signed in and to remember your role for faster navigation. We also store some non-sensitive information on your device, such as your language and theme preference and a local cache of your dashboard, to make the app faster and to let the installed app work briefly offline. There are no advertising or analytics cookies. Users may disable cookies through browser settings, although the Platform will not function without the authentication cookie.
16. Changes to this Policy
We may update this Privacy Policy periodically. Updated versions will be posted on this page with a revised effective date and version number. Where a change is material, we will take reasonable steps to inform Educational Institutions. Continued use of the Platform after publication constitutes acceptance of the updated Policy.