Privacy Policy

Auliqo (the "Service") is operated by Auliqo, headquartered in Guatemala. For the purposes of EU and UK data-protection law, Auliqo is the data controller of the personal data it processes about its account holders. For Customer Content uploaded by Instructors, Auliqo acts as a data processor on behalf of the Instructor or their institution.

Privacy contact: privacy@auliqo.ai.

We collect the following categories of data:

• Account data: name, email, password hash, role, language preference.
• Customer Content: rubrics, student submissions (text and file uploads), grades, comments, and any metadata you upload.
• Usage data: pages viewed, features used, AI runs requested, error logs, IP address, user-agent.
• Billing data: held by Paddle as Merchant of Record. We receive only the metadata required to provision your subscription (plan, status, renewal date), not your card details.
• Communications: messages you send to support or sales.

We process personal data for the following purposes:

• To provide the Service, including running AI reviews against your rubrics.
• To authenticate you and protect your account from abuse.
• To process payments and prevent fraud (via Paddle).
• To improve the Service through aggregated usage analysis.
• To send essential operational messages (billing, security, terms updates).
• To send product updates and marketing, only where you have opted in or where permitted under applicable law. You can opt out at any time.
• To comply with legal obligations.

Where the GDPR or UK GDPR applies, we rely on the following legal bases: performance of the contract with you (to operate the Service); legitimate interests (to secure the Service, prevent abuse, and improve our product); consent (for optional marketing); and legal obligations (to retain billing records and respond to lawful requests).

We share data only with vendors that help us run the Service, under written agreements that restrict use to our instructions:

• Paddle.com Market Limited (Merchant of Record): subscription billing, tax, refunds.
• AI model providers (such as Anthropic and OpenAI): inference for grading runs. These providers are contractually prohibited from training on Customer Content.
• Cloud hosting and storage providers: to host the application and database in encrypted form.
• Email delivery and customer-support tooling: for transactional and support messages.
• Error monitoring and analytics: for product reliability and improvement.
• We do not sell personal data.

When an Instructor submits student work for an AI review, the relevant content is transmitted to an AI model provider for the sole purpose of generating a suggested grade or feedback. The Instructor is responsible for obtaining any consents required under their institution's policies and applicable law before submitting student data to the Service.

Our vendors are located in the United States, the European Union, and other jurisdictions. Where we transfer personal data outside your country, we rely on safeguards permitted under applicable law, such as the EU Standard Contractual Clauses and the UK International Data Transfer Addendum.

We retain Customer Content for as long as your account is active. After account closure, Customer Content is deleted within 90 days, except where longer retention is required by law (for example, billing records may be kept for up to 7 years for tax compliance).

Logs and analytics data are retained for up to 12 months.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion ("right to be forgotten").
• Export your data in a portable format.
• Object to or restrict certain processing.
• Withdraw consent where processing relies on consent.
• Lodge a complaint with your local data-protection authority.

To exercise these rights, email privacy@auliqo.ai. We will respond within the timeframe required by law.

We use industry-standard safeguards including encryption in transit (TLS) and at rest, access controls, audit logging, and regular dependency review. No system is perfectly secure; if you believe your account has been compromised, contact security@auliqo.ai immediately.

The Service is intended for educators. We do not knowingly collect personal data directly from children. When an Instructor uploads student work that includes data about minors, the Instructor and their institution remain responsible for the lawfulness of that collection.

We use a small number of strictly necessary cookies to keep you signed in and to remember your locale preference. We do not use third-party advertising cookies. Where required by law, we will request consent for any non-essential cookies before setting them.

We may update this Privacy Policy from time to time. The "last updated" date at the top reflects the latest version. Material changes will be announced by email or in-product notice.

Privacy questions: privacy@auliqo.ai. Billing-related privacy questions are jointly handled with Paddle; see paddle.com/legal for their privacy notice.