Privacy Policy — Edriso

A working channel for privacy requests has not yet been established. See privacy-request availability.

• Browsing: requested pages and documents, technical request information and exam view/download counts. Abuse prevention uses keyed identifiers derived from IP addresses.
• Browser preferences: language and theme are stored in cookies/browser storage. Visited-exam indicators are stored locally in your browser, not in a student progress account.
• Contributions: the document contents, original filename, size, file type, selected educational classification, rights confirmation and terms version, processing status and review history.
• Staff access: email, authentication/session information, MFA factors and administrative actions. Public browsing and contributions do not require a student account.

The current release does not offer student registration, subscriptions, payments, saved learning progress or AI tutoring.

Uploads are stored privately for processing and staff review. The file contents are sent to Cloudmersive for malware scanning; the scanner-facing filename is normalized. Approved documents may be published for anyone to view and download. Rejection or an unsuccessful upload does not mean all associated records are immediately erased.

Only submit material you have the right to share. Remove unnecessary personal information before uploading. Do not upload identity documents, passwords or support complaints.

• Vercel: website hosting and delivery; Vercel Web Analytics measures public-page usage. See Vercel Web Analytics privacy information.
• Supabase: database, document storage and staff authentication. See Supabase privacy information.
• Cloudmersive: security scanning of uploaded file contents. See Cloudmersive security information.
• Sentry: error reporting and sampled performance diagnostics. Application settings disable default personal-information collection and Sentry session replay and sanitize sensitive URLs and event data. This is separate from audience analytics.
• Google Analytics: public-page audience and usage measurement, including cookie-based identifiers when permitted by the browser. See Google Analytics data information.
• Microsoft Clarity: public-page interaction analysis, heatmaps and session recordings. See Microsoft Clarity privacy information.

No payment processor or AI tutoring provider is integrated into the current public service.

Language, theme and staff-session storage serve site functionality. Google Analytics, Microsoft Clarity and Vercel Analytics are nonessential audience analytics. They are excluded from authentication, MFA, administration, moderation and document-upload pages in this version.

There is currently no on-site analytics consent selector. Browser settings can limit cookies or clear site data, but clearing or blocking cookies alone does not necessarily stop analytics requests. The operator must resolve any required consent controls before launch; this notice is not evidence that consent has been obtained.

Published resources remain available until withdrawn. The application includes scheduled cleanup for eligible abandoned, failed or rejected uploads; review records, security records, archives and backups can be retained separately. Clearing browser data only clears data held in that browser.

Provider-specific retention periods, hosting locations and applicable international-transfer arrangements have not yet been confirmed in this notice. Services may process data outside Algeria. The operator must confirm and publish the relevant arrangements and retention/deletion procedures before launch; no claim that all data stays in Algeria is made.

Applicable Algerian personal-data legislation, including Law No. 18-07 as amended, may provide rights to information, access, correction, objection and deletion subject to its conditions. Use the privacy-request information to check channel availability. Do not send sensitive information to an unverified address.

The service is used by students, including minors. Do not include unnecessary personal data in documents. The operator must determine the applicable requirements for children’s data and consent before launch. There is no public student-account deletion screen.

This notice will be updated when the service, contact channels or confirmed processing arrangements change. Terms and conditions provide information about document use and copyright complaints.