DPIA Key Facts

Olex.AI

Olex.AI (trading name of School Reviewer Limited), registered in England and Wales.

Data is processed for account management, service delivery, and marketing with a basis in contractual necessity, consent, and legitimate interests.

May include name, email, year level, class name, school, school group, EAL language and payment details, with payments processed via third parties.

Data is encrypted in transit and at rest, and managed within the UK, ensuring GDPR compliance.

Data may be shared with legal authorities, payment processors, OpenAI, Gemini and our website developers as necessary. We will never share your personal data with third parties for marketing purposes.

Personal data is retained as long as necessary for its processing purposes, typically three years post-last interaction.

Users have rights to access, correct, delete, restrict, or transfer their data, and to object to processing.

Uses cookies for functionality and user recognition, with user-managed preferences.

All servers are AWS servers located in the UK.

For full details, please see the complete privacy policy on our website.

OpenAI and Gemini are Data Processors for Olex.AI.

Our AI processing uses OpenAI and Gemini’s API, with all student data anonymised before submission.

OpenAI and Gemini do not train any models on data sent by Olex.AI over the API.

OpenAI and/or Gemini, in processing API request data, retain data
for 30 (OpenAI) and 55 (Gemini) days for investigating abuse only,
after which it is deleted from their servers.

OlexReader allows students to scan photos of handwritten essays for translation by Gemini or OpenAI Vision. Students trigger this call directly to Gemini or OpenAI. This feature can be enabled/disabled for schools individually, as agreed in the terms of our contract, to ensure schools maintain control over student AI interactions.