Skip to content

Legal

Privacy Policy

Last updated: October 2, 2026

1. Introduction

EduCRM ("we", "us", "our") is operated by GN. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our websites educrmapp.com and educrm.gr and use our services, including our customer relationship management platform hosted at app.educrmapp.com.

2. Information We Collect

We may collect the following types of information:

  • Personal Information: Name, email address, company name, and phone number provided when you create an account, fill out a contact form, or subscribe to our service.
  • Account Data: Information you enter into the platform, including student records, session logs, payment records, and application data.
  • Usage Data: Information about how you interact with our website and platform, including IP address, browser type, pages visited, and time spent.
  • Payment Information: Billing details processed securely through Stripe. We do not store your credit card information on our servers.

3. How We Use Your Information

  • To provide, operate, and maintain our services
  • To process your transactions and manage your subscription
  • To communicate with you, including responding to inquiries and sending service updates
  • To improve our website and services
  • To comply with legal obligations

These purposes describe the personal data you provide to EduCRM directly. They do not apply to data received from Google Workspace APIs, which is used only to provide and improve the user-facing features you explicitly connected. See section 7.

4. Data Sharing

We do not sell your personal information. We share data only with sub-processors necessary to operate the Service:

  • Google Cloud (Firebase, Firestore, Cloud Functions, KMS) hosting, database, authentication, OAuth-token encryption. Region: europe-west1.
  • Anthropic (Claude API) AI mapping of spreadsheet columns during student import.
  • Vercel frontend hosting and cookieless page-view analytics (only with your consent).
  • Stripe payment processing.
  • Resend transactional email (invites, notifications).

All sub-processors are bound by their own privacy policies and data processing agreements. A current sub-processor list is available at educrmapp.com/security on request.

Data received from Google Workspace APIs is an exception: it is stored only in Google Cloud (Firestore, region europe-west1) and is not shared with any other sub-processor on this list.

5. Email Integrations

EduCRM does not connect to student or customer email accounts. We do not read, store, classify or send email from a Gmail or other mailbox on your behalf.

A previous optional Gmail integration was retired before general availability. No customer email data was ever collected or stored.

6. AI Processing

EduCRM uses AI in two places: converting a spoken note into structured tasks, and proposing how the columns of a spreadsheet map to student fields when you import data. In both cases the result is shown to you and saved only if you confirm it.

Spreadsheet import mapping is processed by Anthropic (Claude) as a sub-processor under our data processing agreement, and only the column headers and a small number of sample rows are sent. Anthropic does not train on our customers' data.

Voice notes submitted through the AI task feature are transcribed and converted into tasks by an external AI provider. No AI feature contacts anyone on your behalf.

7. Google Workspace APIs and Limited Use

The only Google Workspace API EduCRM integrates with is Google Calendar, through the optional two-way calendar sync you can enable and disconnect at any time in your workspace settings.

Data received from that API is used solely to provide and improve the calendar sync feature itself, a user-facing feature that is prominent in the EduCRM interface and that you chose to connect. We do not use it for any other purpose: not to develop other features, not for analytics or research, not to improve our website or our services generally, and not for any purpose you did not authorise when you connected the integration.

EduCRM's use of raw or derived user data received from Google Workspace APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

In particular:

  • We do not use, transfer, or sell Google user data (raw, aggregated, or derived) to create, train, fine-tune, or improve foundational or generalized artificial intelligence or machine learning models, whether our own or a third party's.
  • No data received from a Google Workspace API is sent to any AI or machine learning model or third-party AI service. The AI features described in section 6 run only on data you enter into EduCRM yourself (the spreadsheet you import, the voice note you record) and never on Google Calendar data.
  • Google user data is never used for advertising, and is never sold or transferred to data brokers, information resellers, or other parties.
  • No human reads your Google user data, except where you have given explicit consent, where it is necessary for security purposes or to comply with applicable law, or where the data has been aggregated and anonymised.
  • Disconnecting the integration in your workspace settings, or revoking access at myaccount.google.com, deletes the stored credentials and mirrored calendar data.

8. Data Retention

  • Workspace and account data: retained for as long as your account is active. Exported and deleted within 30 days of account closure on request.
  • AI usage logs (usage counters, audit events): retained for 12 months.
  • Payment records: retained for 7 years, as required by tax law.

You may request immediate deletion of any personal data by contacting us at the address below.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. All data is transmitted over encrypted connections (HTTPS/TLS).

10. Your Rights (GDPR)

If you are located in the European Economic Area, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict processing of your data
  • Request portability of your data
  • Withdraw consent at any time

To exercise any of these rights, please contact us at the email below.

11. Cookies and browser storage

This website uses a small number of strictly necessary cookies and browser storage entries, and asks for your consent before anything optional runs. Non-essential analytics and marketing scripts do not load until you allow them.

The full list of what is stored, why, and for how long is in our Cookie Policy, where you can also change your choices at any time.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

GN
Email: privacy@educrmapp.com