Privacy Policy

1. Who We Are

We provide the School AI Compliance Platform, software that helps schools and vendors document AI tool usage, complete questionnaires, and manage compliance obligations.

We operate in full compliance with the General Data Protection Regulation (GDPR/AVG), the EU AI Act, and the Dutch GDPR Implementation Act (UAVG).

2. Data We Collect

We collect the following categories of personal data:

• User account information (name, email, organization, role)
• Staff-submitted tool data (tools used, AI classification, use cases)
• Vendor-submitted data (questionnaire answers, product descriptions, certifications)
• Technical data (browser type, session logs — IP addresses are NOT stored)

3. How We Use Data

We process personal data only for providing the platform, maintaining accounts, facilitating questionnaires, generating reports, and security purposes.

We do NOT use personal data for advertising, sell data to third parties, or use AI models to train on customer data.

4. Legal Basis

We process data under GDPR Article 6(1)(b) (contract performance), Article 6(1)(c) (legal obligations), and Article 6(1)(f) (legitimate interest for security).

5. Data Retention

We retain data for as long as the contract remains active and up to 12 months after termination unless earlier deletion is requested.

6. Your Rights

Under GDPR, you have the right to:

• Access your data
• Correct inaccurate data
• Request deletion
• Restrict processing
• Data portability
• Object to processing
• File a complaint with the Autoriteit Persoonsgegevens

7. Contact

For privacy questions, please contact us at privacy@strategihub.com