Privacy Policy

This policy explains what personal data Mooctis (“we”, “us”) collects when you use the platform, why we collect it, who we share it with, and the rights you have over it under the EU General Data Protection Regulation (GDPR).

1. Who we are

Mooctis is operated by Vazantis Oy, a Finnish limited company (Y-tunnus / Business ID 3636621-5). For any question about this policy or your data, contact us at privacy@mooctis.com.

2. What we collect

• Account information — name, email address, role (student/teacher), and institutional student ID if your course requires one.
• Course content and activity — enrollments, lesson progress, quiz answers, assignment submissions, and grades.
• AI-assisted tool interactions — when enabled, the text of assignment/quiz submissions and lesson Q&A questions you choose to send for AI-assisted feedback.
• Communications — course announcements and account-related notifications sent to you by email.

3. Why we process it, and our legal basis

• Performance of a contract (Art. 6(1)(b) GDPR) — running the core service: course access, submissions, grading, and communication with your course's teaching staff.
• Consent (Art. 6(1)(a) GDPR) — specifically for AI-assisted processing of your submissions and lesson questions. This is separate from the core service: declining does not block your enrollment or use of the platform, it only means your work is reviewed by teaching staff instead of AI-assisted tools. You can change this choice at any time from your course page.
• Legitimate interest (Art. 6(1)(f) GDPR) — platform security, abuse prevention, and aggregate usage analytics that don't identify individuals.

4. AI-assisted processing, specifically

When you consent to AI-assisted tools in a course, the relevant content (e.g. your submission text, or a question you ask about a lesson) is sent to OpenAI to generate feedback, suggested scores, or an answer. Before sending, we strip obvious identifying information such as your name and email address from submission content where feasible.

We process this data under an agreement with OpenAI covering GDPR compliance, and all of our own infrastructure (application hosting and database) is located in the EU. This means your data is not processed outside a GDPR-compliant framework as part of this flow.

AI-generated feedback and scores on assignments are, depending on your course's settings, reviewed by a teacher before you see them, or released to you automatically — your course's settings determine which.

5. Who we share data with

We do not sell your personal data, and we do not use it for advertising.

6. How long we keep data

• Submission files (the files you upload for assignments) are kept for 1 year after your grade is released, then deleted.
• Grades and AI feedback are kept as part of your academic record for as long as your account or the course exists.
• Lesson Q&A conversations are not stored beyond what's needed to answer your question in context.
• You can request earlier deletion of your account and associated data — see Section 8.

7. Your rights

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request erasure of your data, subject to our academic record-keeping obligations
• Restrict or object to certain processing
• Receive your data in a portable format
• Withdraw consent to AI-assisted processing at any time, without affecting your enrollment
• Lodge a complaint with your local data protection supervisory authority

8. Contact and complaints

To exercise any of these rights, contact privacy@mooctis.com. If you're not satisfied with our response, you have the right to lodge a complaint with your national data protection authority.

9. Children

[If any students on this platform may be under the age of 16, additional parental consent requirements under GDPR Art. 8 may apply — confirm applicability for your user base and add the relevant provisions here.]

10. Changes to this policy

If we make material changes to this policy, we'll ask users to re-confirm their agreement the next time they sign in.