Olex.AI DPIA Key Facts

Data Controller

Olex.AI (trading name of School Reviewer Limited), registered in England and Wales.

Purpose and Means of Processing

Data is processed for account management, service delivery, and marketing with a basis in contractual necessity, consent, and legitimate interests.

Types of Personal Data Collected

May include name, email, year level, class name, school, school group, EAL language and payment details, with payments processed via third parties.

Data Protection Measures

Data is encrypted in transit and at rest, and managed within the UK, ensuring GDPR compliance.

Third-Party Sharing

Data may be shared with legal authorities, payment processors, OpenAI and our website developers as necessary. We will never share your personal data with third parties for marketing purposes.

Data Retention

Personal data is retained as long as necessary for its processing purposes, typically three years post-last interaction.

User Rights

Users have rights to access, correct, delete, restrict, or transfer their data, and to object to processing.

Cookies Policy

Uses cookies for functionality and user recognition, with user-managed preferences.

Server and Data Location

All servers are AWS servers located in the UK.

For full details, please see the complete privacy policy on our website.

Data Processor

OpenAI is a Data Processor for Olex.AI.

 

AI Processing

Our AI processing uses OpenAI’s API, with all student data anonymised before submission.

 

AI Model Training

OpenAI does not train any models on data sent by Olex.AI over the API.

 

OpenAI Data Retention

OpenAI, in processing API request data, retains data for 30 days for investigating abuse only, after which it is deleted from their servers.

 

OlexReader

OlexReader allows students to scan photos of handwritten essays for translation by OpenAI Vision. Students trigger this call directly to OpenAI. This feature can be enabled/disabled for schools individually, as agreed in the terms of our contract, to ensure schools maintain control over student AI interactions.