At Eddify, all of our products are built from the ground up with privacy in mind. We firmly believe that your data belongs to you and that protecting it is one of our most important responsibilities.
To that end, we hold data security and privacy to the highest standards and invest continuously in our infrastructure and processes to provide you with the most secure solutions in the industry. We’re committed to being transparent about our security practices and helping you understand our approach.
Our Global Approach to Privacy
Whether you operate in the United States or Europe, Eddify has you covered. We support compliance with GDPR and CCPA requirements, among others.
- European Union: Eddify supports compliance with the GDPR. The EU General Data Protection Regulation (GDPR), effective 25 May 2018, is a regulation that strengthens data protection for all individuals in the European Union (EU). The GDPR places requirements on the way organisations and companies must collect, store, and process personal data. It also addresses the movement of such personal data outside the EU, and stipulates the controls and safeguards which must be in place to do so.
Eddify collects and uses only the personal data needed to provide our tutoring and test prep services. When designing and improving our products and features, Eddify has carefully considered data protection in order to help ensure personal data is processed in accordance with its legal requirements. Data is therefore processed in a transparent way and is retained only as is necessary, with appropriate safeguards in place to secure and protect it.
Under the GDPR, Eddify will serve as the data processor in our customer relationships in order to process personal data provided by the customer. Under our agreements, customers will always have the power and control over their data. Within our products, Eddify also provides certain functionality to help customers with their compliance with applicable legal requirements.
Eddify has always believed in the importance of securely and thoughtfully handling customer data and will continue to protect customer data in accordance with all applicable legal requirements, including the GDPR.
California: Eddify supports compliance with the CCPA. The California Consumer Privacy Act of 2018 (CCPA) was enacted into law on June 28, 2018, and many of its provisions went into effect on January 1, 2020. The CCPA grants California residents certain rights with respect to their ability to know and access the personal information that businesses collect about them. Those rights include the right to say no to the sale of their personal information. However, please note that Eddify does not sell personal information. Our Privacy Policy [https://www.eddify.co/privacy] describes how Eddify may collect and use personal data consistent with other CCPA-related rights when we act as a “business” (as defined under the CCPA).
When we process personal information provided by our customers, Eddify acts as a “service provider” (as defined under the CCPA). In that capacity, we only process and transfer the personal information of our customers and our customers’ end-users for the purpose of performing our rights and obligations under our existing contract(s) with our customers and for no other commercial purpose.
How We Protect Privacy
Product
Eddify’s products are designed to help customers balance their business and academic needs against privacy needs. Our hardware and software products include customizable control measures, features and tools to protect customer data.
Policies and Safeguards
Eddify is committed to transparency around how we hold and use personal data. Company-wide policies, contractual terms and other safeguards emphasize our responsibility to protect customer data and to stay compliant with the law.
- Privacy Policy: Eddify may collect personal data in support of its business. For more information about how Eddify may collect and use such personal data, please see our Privacy Policy.
Security
Protecting our customers’ privacy and respecting confidential information is fundamental to our core values. Eddify products are built from the ground up with security and privacy in mind.
- Security Practices: Eddify implements the highest industry standards for encryption, storage, privacy, network and endpoint security.
YouTube API Services
Eddify uses YouTube API Services to manage and analyze our own YouTube channel (@eddify). This internal tool is operated only by Eddify staff and acts only on our own channel.
What we access. Our channel’s video metadata (titles, descriptions, tags, playlists, publishing schedule), aggregate YouTube Analytics reports (views, watch time, subscribers, traffic sources), and public comments that viewers post on our videos (the commenter’s display name, channel ID and comment text).
How we use it. Channel and analytics data is used only to plan, publish and improve our educational content. Comments are used only to find and reply to viewer comments on our videos. We do not profile commenters, contact them outside YouTube, or sell or share their information.
AI-assisted replies. We use Anthropic’s Claude AI service to help draft replies to viewer comments. The comment text and related video information are sent to Anthropic solely to generate a draft reply, which Eddify staff review. Anthropic processes this data under its own terms and privacy policy.
Storage and deletion. YouTube API data stored for internal reporting, including comment data, is automatically deleted or refreshed within 30 days, and all such data is deleted within 7 days if access is revoked. We don’t store YouTube data in any database, and we never sell it or share it with advertisers or data brokers.
By using YouTube features on this site you agree to be bound by the YouTube Terms of Service. See the Google Privacy Policy for how Google handles data. You can revoke Eddify’s access at any time via Google’s security settings page.
Questions: hello@eddify.co
