Privacy Policy

1 Overview

EdTecInfo ("we", "our", "us") operates edtecinfo.com and provides free education tools, news, and college listings for Nepal. This Privacy Policy explains what data we collect, how we use it, and what rights you have.

2 What we collect

2.1 Account information (optional)

You can use most tools without an account. If you sign in with Google or Microsoft, we receive:

• Your name — to personalize your dashboard
• Your email address — to identify your account
• Your profile picture URL — for your avatar
• A unique user ID from the provider

We never receive your password. We never receive access to your email contents, contacts, or calendar.

2.2 Usage analytics

We collect anonymous, aggregated data about how visitors use our site:

• Pages visited and time on page
• Device type, browser, and screen size
• Approximate country (from IP, not stored)
• Referring website

This data cannot be traced back to you individually. We use it to fix bugs and improve the site.

2.3 Cloud drive access (only when you opt in)

If you use "Save to Drive", we request permission to only create and manage files that our app itself creates. We cannot see, read, or modify your existing Drive files. This is enforced by Google's drive.file scope, not by our choice.

Files you save through any EdTecInfo tool are placed in a folder tree rooted at EdTecInfo in your own Drive — for example, EdTecInfo/Scans/ for scanned documents, EdTecInfo/Converter/ for converted files. You retain full ownership of everything in that tree, and you can move or delete it at any time from Google Drive itself.

3 What we DON'T collect

This is the part that matters most. We do not:

• Upload your files without asking — Every tool runs entirely in your browser by default. When an advanced feature requires server processing, we ask first, and only that specific file is sent.
• Track you across the web — No third-party advertising trackers. No Facebook pixel. No cross-site cookies.
• Sell your data — Ever. To anyone. For any price.
• Read your email or contacts — Even though we ask Google/Microsoft for sign-in, we don't request those scopes.
• Store your search queries — Tool usage is processed locally and discarded.
• Keep IP addresses — We use them transiently for rate limiting, then drop them.
• Train AI models on your files — Nothing you process with our tools is used to train any model, ours or anyone else's.

4 How we process your files

Our tools use a hybrid model. You choose, per file, how it gets processed:

4.1 On-device (default)

The default for every tool. Files stay in your browser, processed by WebAssembly and JavaScript running on your own machine. OpenCV.js and Tesseract.js — both open-source — handle the heavy lifting. Nothing is transmitted to our servers.

• Speed: Fast, works offline once the tool is loaded.
• Privacy: Your file literally never leaves your device.
• Best for: Most documents, quick scans, privacy-sensitive material.

4.2 On our servers (opt-in, per file)

Some advanced features — like server-side document enhancement, batch OCR, or higher-accuracy document detection — require more compute than a phone can comfortably provide. When you enable these, we transmit only the specific file you're working on, process it, return the result, and delete the uploaded file from our servers within 1 hour. Uploaded files are never shared, sold, or used for training.

• Speed: Slower — network round-trip plus processing time.
• Privacy: The file leaves your device, but only for the duration of the job.
• Best for: Large multi-page scans, documents that need the best possible enhancement, or when you're on a low-powered device.

You can tell which mode you're using at any time: on-device tools display "Runs on your device" next to the file. Server-side features display a clear "This file will be uploaded" notice the first time you turn them on, and remember your choice thereafter.

4.3 OCR and text extraction

Our OCR uses Tesseract — a free, open-source text recognition engine. It runs entirely on your device by default (the language model downloads once, then is cached). Server-side OCR is available as an opt-in for users who need it and uses the same Tesseract engine on a controlled backend.

We do not use commercial cloud OCR providers (Google Vision, AWS Textract, Azure) at this time. If we ever add them, this policy will be updated and the feature will be opt-in with a clear notice.

5 How we use data

Here's everything we do with the small amount of data we collect:

• Authentication — to keep you signed in
• Dashboard — to show your scans and Drive files
• Analytics — to know which tools are popular so we improve them
• Security — to block abuse and rate-limit spam
• Emails — only if you opt in. You can unsubscribe at any time.

That's the complete list. We do nothing else with your data.

6 Cookies

We use two types of cookies:

• Essential cookies — session token (keeps you signed in), CSRF token (security). These cannot be disabled if you want the site to work.
• Preference cookies — theme choice, language, and remembered tool preferences (e.g., "always use server-side processing").

We do not use advertising cookies, tracking pixels, or third-party analytics that identify you.

7 Third parties

We integrate with a minimal set of trusted services:

• Google — OAuth sign-in and optional Drive access. Google Privacy Policy.
• Microsoft — OAuth sign-in and optional OneDrive access. Microsoft Privacy Statement.
• Cloudflare — CDN and DDoS protection. Sees request metadata, not file content.
• Open source libraries — OpenCV.js, Tesseract.js, jsPDF, and others, all loaded from public CDNs (jsDelivr, opencv.org). These receive standard HTTP logs but no file content.

8 Your rights

You have the following rights, and we honor them without a fight:

• Access — Ask what data we have on you. We'll reply within 7 days.
• Correction — Fix any incorrect data.
• Deletion — Delete your account and all associated data. One click in /settings, or email us.
• Portability — Export your data as JSON on request.
• Opt-out — Disable analytics with your browser's Do Not Track header.
• Withdraw consent — Sign out and revoke our access from your Google/Microsoft account settings at any time.
• Processing mode — Choose on-device processing for any tool, at any time. Our tools are designed to work fully without any server involvement.

9 Children's privacy

EdTecInfo serves students of all ages, including K-12 learners. We take this seriously:

• We do not knowingly collect personal information from children under 13 without verifiable parental consent.
• For our Sikai product, accounts for students under 13 must be created by a parent, guardian, or school.
• We never serve behavioral advertising to any user, at any age.
• Parents can request deletion of their child's account at any time by emailing [email protected].

If you believe we've collected data from a child under 13 without consent, contact us immediately and we'll delete it within 48 hours.

10 Security

We protect your account with:

• HTTPS everywhere — no plaintext connections
• Encrypted tokens at rest
• No storage of passwords (OAuth handles authentication)
• Files uploaded for server-side processing are auto-deleted within 1 hour
• Regular security audits of our dependencies
• Zero-trust architecture for internal services

If we ever experience a data breach affecting you, we'll notify you within 72 hours — directly and publicly.

11 Data retention

We keep your data only as long as necessary:

• Account data — until you delete your account
• Files uploaded for server-side processing — deleted within 1 hour of processing
• Session cookies — 30 days
• Analytics data — 14 months, then auto-deleted
• Error logs — 30 days
• Email subscriptions — until you unsubscribe

12 Changes to this policy

If we make material changes, we'll:

1. Update the "Last updated" date at the top
2. Send an email to all registered users
3. Show a banner on the homepage for 14 days

Continuing to use EdTecInfo after changes means you accept the new policy.

13 Contact us

Questions about privacy? We answer every email personally:

• Privacy questions: [email protected]
• Data deletion requests: [email protected]
• Legal notices: [email protected]

We respond within 48 hours. Often much faster.