This is a translation of the French original. In case of difference, the French version prevails.
This policy explains which personal data Ardoisia processes, why, for how long, and how to exercise your rights. It applies to the portal compte.ardoisia.com and to the applications offered on *.ardoisia.com.
1. Who is responsible for your data?
The data controller is the publisher of Ardoisia:
- Name: Ardoisia
- Legal form: available on request at contact@ardoisia.com
- Address: available on request at contact@ardoisia.com
- Registration number: available on request at contact@ardoisia.com
- Contact for any question about your data: contact@ardoisia.com
When you use Ardoisia through a school's licence (primary school, middle school, high school…), that school remains responsible for the data of its pupils and staff; Ardoisia then acts as a processor, under a data processing agreement concluded with the school (see section 7).
2. Which data, why, and for how long?
| Data | Why | Legal basis | Retention period |
|---|---|---|---|
| E-mail address | Create and identify your account, send you your sign-in codes | Performance of the contract | As long as the account exists; deletion on request |
| Display name and Google identifier (if you sign in with Google) | Recognise you and show your name | Performance of the contract | As long as the account exists |
| Link to a school (deduced from the domain of your e-mail address) | Give you the access provided by your school's licence | Performance of the contract | As long as the account exists |
| Access and subscription (type, dates, granted manually or paid) | Know whether you can use the applications | Performance of the contract | As long as the account exists, then the statutory retention periods for accounting records if a payment took place |
| Usage credits: batches received (free, monthly, purchased) and, for each use of an artificial intelligence feature, the application, the type of operation, the number of credits spent and the date (never the content processed) | Keep your credit balance up to date, prevent abuse and be able to correct an error | Performance of the contract | As long as the account exists; after the account is deleted, this data is no longer linked to an identifiable person |
| List of a school's members: e-mail address, profile (teacher or pupil), any individual cap, status (approved, pending, removed), credits granted by the administrator, and each member's monthly credit consumption | Allow the school to manage its licences and usage quotas. The school administrator sees this information and receives summary e-mails (new sign-ups, quotas reached) | Performance of the contract with the school (processing agreement) | As long as the school's licence is active; a month's consumption is no longer linked to an identifiable person after the account is deleted |
| Purchase of personal credits: date and version of the terms accepted, an adult's consent for a minor | Prove the consent given before a purchase | Performance of the contract, legal obligations | Statutory retention periods for accounting records |
| Allocation of free credits: normalised e-mail address (without the “+tag” or Gmail dots), domain, IP address | Give free credits only once per mailbox and limit mass sign-ups | Legitimate interest (preventing abuse) | IP address: 48 hours. Normalised address: deleted with the account |
| One-time sign-in code | Check that you have access to the e-mail address. Only an irreversible fingerprint is kept, never the code itself | Legitimate interest (security) | Valid for 10 minutes; deleted at the latest 48 hours after it expires |
| Sign-in sessions: token fingerprint, IP address, browser used, dates | Keep you signed in, protect the account, be able to close a session | Legitimate interest (security) | 30 rolling days of sign-in; deleted within 31 days after they expire or are closed |
| IP address of sign-in code requests | Limit abuse (repeated sending) | Legitimate interest (security) | Deleted with the code (at the latest 48 hours after it expires) |
| Official curricula (BO) that you add in “Le BO” (PDF, 10 MB at most per account) and the list of supplied BO that you have hidden | Find them again in all the applications and on all your devices; they are visible only to you | Performance of the contract | As long as the account exists; deleted after 12 months without use |
| Visits per application: your account identifier, application, day, number of visits and time of the last one | Know which applications are used, to decide where to invest (internal statistics, with no external tool or advertising tracking) | Legitimate interest | As long as the account exists; deleted with it |
| Consent to be told when subscriptions launch (date of your consent) | Write to you when subscriptions and credit top-ups open, a few messages at most | Consent (optional box in My account; you can untick it at any time) | Until you withdraw your consent or the account is deleted |
| Class codes (Couleur Marine): class name, list of hidden words, update date, account of the teacher who created it | Let parents reuse the teacher's word display settings. No pupil data | Performance of the contract | Until the teacher deletes the code or the account |
| Algo Class: classes, pupil lists (first name, surname, sex, profile, options), list of teachers (title, surname, first name, form tutor, subject taught), accommodations in the form of tags, seating constraints, observations, seating plans, tasks, new-year simulations. This data is encrypted in your browser before being sent; only the record's identifier, its type, its modification date and the account or school concerned are kept in clear | Find your data on all your devices and share it with the colleagues at your school (what you choose to keep private can be read only by you) | Performance of the contract; for pupil data, processing on behalf of the school (processing agreement) | Private data: deleted with the account. Shared data: kept by the school (it remains if a colleague leaves). Deletions are kept for 12 months to synchronise devices |
| Algo Class — live sessions with the pupils: the class's first names, seating plan, timer and help requests (“raise a hand”). These messages are encrypted in the browsers; the service relays only encrypted text | Show the plan and the timer on the pupils' tablets and receive their help requests, without a pupil account | Performance of the contract; processing on behalf of the school (processing agreement) | For the duration of the session only: in the service's memory, deleted when the session is closed, after 4 hours of inactivity or 10 hours at most; never saved in a database or on the pupil's tablet |
| Log of administration actions (who granted, extended, revoked or blocked access) | Security and traceability of decisions | Legitimate interest | 12 months |
We do not sell your data, we show no advertising, and we use no audience-measurement or advertising-tracking tool.
3. Content you use in the applications
Some applications process content that you type or import: texts, photos of pages, voice recordings, documents, videos. This content is used only for the requested function (text recognition, reading analysis, proofreading voice, translation, transcription). To do this, it is sent to the artificial intelligence services of Google (see section 5). As a general rule, the applications do not keep this content on our servers: it passes through memory and is then forgotten, and your settings, documents and libraries stay on your device.
Exception: Online Video Sequenceur. This application saves on our servers, in your personal space, the results of processing each video: the video's title and link, transcript, translations, themes, quiz questions, conversation with the assistant and excerpts that you mark. This data stays until you delete the video. When you upload a video file, it is kept for three days and then deleted automatically. YouTube videos are not copied: the application reads the link. If you publish a link, the corresponding sequence (excerpts, questions, subtitles) is saved at a public address accessible to anyone who has it, for up to five years or until you delete the link. The YouTube player embedded in these pages works in “enhanced privacy” mode (youtube-nocookie.com): Google receives the visitor's IP address when the player loads, but no tracking cookie is set before the video is played.
Marking of papers and report cards (Moodle Automata, Bulletin périodique). The “Correction Screenshots” and “Correction Xlsx” modules of Moodle Automata, as well as the “Bulletin périodique” application, process pupils' answers and results. Pupils' surnames and first names stay in your browser: before anything is sent, they are replaced by pseudonyms (“Pupil 1”, “Pupil 2”…) and are put back only on screen, on your device. Only the answers, marks, class, subject and criteria that you choose are sent to Google to be marked or commented on, with the key indicated in section 5. They are not kept on our servers. The report card history and drafts, which contain names and comments, are kept only in your device's browser: we have no access to them, and it is up to you to delete them (“Delete this report card” button), especially on a shared computer. You remain responsible for ensuring that the answers you submit contain no information that could identify a pupil.
Sparring-Partner Oral. Your history (figures for each oral, audio recording, transcript text, debrief and posture percentages if you requested them) is kept only in your device's browser, until you delete it from the application's home page; you can turn off the retention of recordings. If you turn on the camera, posture and gaze are analysed on your device by a model hosted with the application: no image is sent. The video of the oral, if recorded, stays in your browser for 14 days at most (then it is deleted automatically) so that you can export your debrief as an HTML file; this file is produced on your device and we have no access to it. If you request the transcript, the audio is sent, piece by piece (one minute at most), to the Google Cloud Speech-to-Text service and then deleted. If you appear before the jury, the text of your presentation and answers, as well as the marking scheme you entered if any, are sent to Google's AI (Gemini) to generate the questions and the debrief, with an adult's consent. Ardoisia keeps neither the audio nor the texts. The key used is that of your school, or the publisher's with credits.
Exception: Algo Class. This application saves on our servers, to allow sharing within a school, the data you enter in it (pupil lists, accommodations in the form of tags without any medical information, constraints, observations, plans, tasks). This data is encrypted in your browser before being sent: the service stores encrypted text and does not read its content. However, the encryption keys are derived from a secret that the service keeps separately from the data: this encryption protects against a leak of the data alone, it does not technically prevent the publisher from accessing it. Only accounts of the same school share data; everything you keep private can be read only by your account. No Algo Class data is sent to an artificial intelligence service. Schools decide which of their teachers have access and remain responsible for the pupils they enter in it. The optional sound meter of the “Focus-Timer” uses the microphone of the teacher's computer: the sound level is measured in memory, in the browser, then forgotten; no sound is recorded, sent or kept. Live sessions. When the teacher opens a session, pupils join it from the “Algo Class Student” page, without an account: they scan a QR code, pick their first name from the class list, see the plan and the timer and can raise a hand. The messages (first names, plan, timer, help requests) are end-to-end encrypted: the session key is in the QR code (the fragment of the address, never sent to our servers); the service relays encrypted text, in memory only, and erases it when the session is closed, after 4 hours of inactivity or 10 hours at most. Pupils enter no personal data; the pupil page uses no tracker, sets only the language cookie (ard_lang), keeps in the tab only a random device identifier (erased when it is closed) and keeps no access log. The IP address is used in memory only, to limit abusive sending. The teacher and the school inform pupils and their families about the use of these sessions (an information note is provided in the application).
If another application were to keep content, it would say so before any recording and this policy would be updated.
With credits, a subscription or a school's licence, access to AI services is provided by the publisher or by the school: you have no key to manage. Credits are given at sign-up; each use of an AI feature consumes some of them, and they have an expiry date shown in your account. When an application lets you save your own access key to an AI service, that key stays in your browser and is not saved on our servers; its use may then be billed by Google according to your plan.
Which key processes your content? Depending on your access, your content is sent to Google with your school's key (school licence), with your own key, or with the publisher's key (individual subscription, free or purchased credits, including when a school member has used up their quota and uses their personal credits). In the latter case, the publisher is Google's customer for these calls; the publisher uses Google's paid offer for this, whose terms provide that the content sent is not used to train its models. The published pages of Online Video Sequenceur use YouTube's “enhanced privacy” mode (youtube-nocookie.com), which sets no tracking cookie before the video is played.
4. Cookies and storage in your browser
Ardoisia uses only strictly necessary cookies for the service to work: they do not require your consent and are not used for any tracking.
| Name | Purpose | Duration |
|---|---|---|
ard_session | Keep you signed in, on the portal and on Ardoisia's applications | 30 days, renewed with use |
ard_login | Tie a sign-in code to the browser that requested it | 10 minutes |
ard_oauth | Secure the sign-in with Google | 10 minutes |
ard_lang | Remember the chosen language (French, English or Indonesian), on the portal and in the applications, including the Algo Class pupil page | 1 year |
The applications may also save in your browser (local storage) your display settings or, if you decide so, your personal AI key. This information stays on your device and you can erase it at any time from your browser settings.
5. Who receives your data?
- Contabo GmbH (Aschauer Straße 32a, 81549 Munich, Allemagne): server hosting (server location: European Union).
- Brevo (Sendinblue SAS, a French company): sending the e-mails containing your sign-in codes.
- Google: sign-in with your Google account (if you choose this method), artificial intelligence services used by the applications (text recognition, transcription, voice) and, for Online Video Sequenceur, the embedded YouTube video player.
Some of these providers may process data outside the European Union, notably in the United States (Google). These transfers are covered by the mechanisms provided for by the General Data Protection Regulation (standard contractual clauses or adequacy decision). We do not disclose your data to any other third party, except where required by law.
6. Children and pupils
An Ardoisia account is intended for an adult (parent, teacher, school staff member). Pupils use the service as part of their school, which decides which accounts are opened. We do not offer direct account creation to a minor under 15 (or the age set by the law of your country), and, apart from the Online Video Sequenceur results described in section 3, we keep no content produced by pupils. The purchase of personal credits by a minor requires the consent and payment of a parent or legal guardian. In Algo Class, a pupil can join a live session of their teacher without an account: they enter no personal data (they only pick their first name from the class list), the session is temporary and encrypted, and nothing is kept on their device or on our servers after the session (see section 3).
7. Schools
When a school holds a licence, it determines the purposes and means of processing the data of its pupils and staff; Ardoisia processes it only to provide the service, on its instructions, under a data processing agreement. The school provides its own access keys to AI services; the corresponding costs are borne by it. It sets its members' monthly quotas and may grant extra credits. Its administrator sees the list of its members, their profile and their credit consumption (never the content processed), and is told by e-mail of new sign-ups and quotas reached.
8. Security
Connections are encrypted (HTTPS). Sign-in codes and session tokens are never stored in clear. Schools' access keys, when saved, are encrypted. Administration access is restricted and every action is logged. Despite these precautions, no system is infallible: in the event of a data breach likely to expose you to a risk, we will inform you and the competent authority within the legal time limits.
9. Your rights
You can request access to your data, its rectification, its erasure, the restriction of or objection to its processing, and its portability. Write to contact@ardoisia.com from your account's address: we reply within one month. Deleting an account erases your address, your name and your sessions; only the accounting records linked to a payment are kept, if the law requires it.
If you are located in Indonesia, your rights are those recognised by Indonesian Law No. 27 of 2022 on Personal Data Protection (notably access, rectification, deletion and withdrawal of consent), which you exercise in the same way, by e-mail.
If you believe your rights are not being respected, you can lodge a complaint with the French data protection authority (CNIL, www.cnil.fr) for people located in France or the European Union, or the competent authority of your country.
10. Changes
We may update this policy, for example when adding an application or a provider. The date of the last update appears at the bottom of the page; in the event of a significant change, we will inform you.