Privacy Policy
Effective: June 1, 2026 · Operated by PlexusVision · Ontario, Canada · Compliant with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA)
1. Who We Are
RizmiMind is an AI-powered tutoring platform operated by PlexusVision, based in Ontario, Canada. We provide Socratic AI tutoring, progress tracking, and parent reporting tools for high school and early university students. Questions about this policy can be directed to support@rizmimind.ca.
2. Information We Collect
Account Information
When you register, we collect your full name, email address, password (hashed — never stored in plain text), role (student or parent), grade level, and curriculum preference.
Tutoring Session Data
We store the content of your tutoring conversations (questions you submit and AI responses), session duration, subject, topic, hint usage, and session outcome (understood / gave up / in progress). This data powers your progress tracking and parent reports.
Progress & Mastery Data
We track which concepts you have studied, your mastery scores, spaced-repetition review schedules, exam readiness estimates, and earned achievement badges.
Payment Information
We collect your subscription plan and billing period. Card details are processed and stored exclusively by Stripe or PayPal — we never see or store your card number, CVV, or bank details on our servers. We store the Stripe Customer ID and subscription ID for billing management.
Contact & Support Data
If you contact us via live chat (Crisp) or email, we store the conversation to provide support and follow up.
Phone Number (Optional)
Parents may optionally provide a WhatsApp phone number to receive study alerts. This is voluntary and can be removed at any time from the parent dashboard.
Usage & Technical Data
We collect standard server logs including IP address, browser type, pages visited, and timestamps. We use this for security, debugging, and platform improvement. We do not sell this data.
3. How We Use Your Information
- To provide AI tutoring sessions and track your learning progress
- To generate parent dashboard reports and WhatsApp alerts
- To process subscription payments and manage your billing
- To send transactional emails (account verification, receipts, weekly progress reports)
- To improve the platform — analysing usage patterns to fix bugs and improve features
- To enforce our Terms & Cancellation Policy and prevent fraud
- To respond to support requests
We do not use your data for advertising, sell it to third parties, or use it to train AI models beyond your own tutoring session context.
4. Third-Party Services
We use the following trusted third-party services to operate RizmiMind. Each has its own privacy policy.
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Authentication & database | Account data, session data, progress data |
| Anthropic (Claude AI) | AI tutoring engine | Tutoring messages (no name or email sent) |
| Stripe | Payment processing | Name, email, billing address, card details |
| PayPal | Payment processing | Name, email (via PayPal redirect) |
| Twilio | WhatsApp parent alerts | Parent phone number, alert message text |
| Resend | Transactional email | Email address, email content |
| Crisp | Live chat support | Name, email, support conversation |
| Vercel | Web hosting | IP address, server logs |
5. Student & Minor Privacy
RizmiMind is designed for high school and early university students, some of whom may be under 18. We take student privacy seriously.
- Students under 18 should register with parental knowledge and consent.
- Tutoring conversation content is used solely to provide the tutoring service and generate progress reports for the linked parent account.
- We do not display advertising to students.
- We do not share student data with schools, third-party marketers, or any party not listed in Section 4.
- AI tutoring messages are sent to Anthropic's API for processing. No student name, email, or identifying information is included in those requests — only the academic question and session context.
6. Data Retention
We retain your data for as long as your account is active or as needed to provide the service.
- Active accounts — all data retained while the account exists.
- Cancelled subscriptions — account and tutoring history retained for 12 months after cancellation, then anonymised.
- Deleted accounts — personal data deleted within 30 days of a deletion request. Anonymised usage statistics may be retained indefinitely.
- Billing records — retained for 7 years as required by Canadian tax law.
7. Your Rights Under PIPEDA
As a Canadian resident, you have the following rights regarding your personal information:
Right to Access
Request a copy of all personal data we hold about you.
Right to Correction
Request correction of inaccurate or incomplete data.
Right to Withdraw Consent
Withdraw consent for non-essential data processing at any time.
Right to Deletion
Request deletion of your account and personal data.
Right to Know
Know what data we collect, why, and with whom it is shared.
Right to Complain
Lodge a complaint with the Office of the Privacy Commissioner of Canada (OPC).
To exercise any of these rights, email support@rizmimind.ca with the subject line "Privacy Request". We will respond within 30 days.
8. Cookies & Local Storage
We use the following cookies and browser storage:
- Authentication cookies — set by Supabase to keep you logged in. Essential — cannot be disabled.
- Admin session cookie — httpOnly cookie for admin portal access.
- Live chat (Crisp) — Crisp sets cookies to maintain your support chat session.
- Local storage — used to remember your dashboard preferences (subject, curriculum) between sessions.
We do not use advertising cookies, tracking pixels, or analytics cookies from third parties.
9. Security
We implement the following safeguards to protect your information:
- All data transmitted over HTTPS (TLS encryption)
- Passwords hashed using bcrypt — never stored in plain text
- Database access controlled by Row Level Security (RLS) policies
- Payment data handled exclusively by PCI-DSS compliant providers (Stripe, PayPal)
- Admin access protected by secret-key authentication
- API keys stored as environment variables — never exposed to the browser
Despite these measures, no system is 100% secure. If you suspect unauthorised access to your account, contact us immediately at support@rizmimind.ca.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top and notify active subscribers by email at least 14 days before material changes take effect. Continued use of RizmiMind after the effective date constitutes acceptance of the updated policy.
11. Contact & Complaints
Privacy Officer: PlexusVision · Ontario, Canada
If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (OPC).