Privacy Policy

The platform is owned by MAK IT LLP, Business Identification Number (BIN) 191240029778. Address: 124 Gagarin Avenue, Bostandyk District, Almaty, 050057, Republic of Kazakhstan. Personal data enquiries: nurbuscompany@gmail.com, +7 (708) 252 91-41.

The school determines why its students' data is used, which learning materials are provided and who participates in learning. The Company operates the platform and processes this data as part of its services to the school. You may contact your school or the Company directly about learning records.

Personal data means information about an identified or identifiable individual. Processing includes collecting, recording, storing, changing, using, providing access to, anonymising and deleting data. An organisation's details are not, by themselves, personal data, but information about its representatives may be.

• Account and contact data: first and last names, email, phone number, profile photo and other information added to the platform by the user or school.
• Learning data: school, group, assignments, lesson progress, answers, quiz and UNT results, grades, submitted work, attached files and comments.
• Technical data: IP address, browser and device information, session identifiers, login and activity times, error logs; when notifications are enabled, a push notification delivery identifier.
• Support requests, service-related correspondence, and contract and payment information to the extent needed for service delivery and record keeping.
• For optional Google Drive imports: the selected file's contents, name, identifier, type, size and information about whether downloading is permitted.

Data is used for registration and sign-in, organising learning, reviewing work, displaying progress, communicating with users, delivering notifications, providing support, performing contracts, maintaining security and complying with the laws of the Republic of Kazakhstan.

The Company processes data with the consent of the individual or their legal representative, or on another ground provided by the laws of the Republic of Kazakhstan. Reading this Policy does not replace consent where consent is required. Data collection is limited to what is needed for specific purposes; access and processing periods are limited accordingly.

Connecting Google Drive is optional. Authorisation takes place through Google. EduMentor requests the drive.file permission to work with files that the user selects and makes available to the application. The integration imports selected materials, does not request access to the entire Drive and does not receive the user's Google password.

Once selected, a file is copied to the school's storage in EduMentor and attached to an assignment. Google Docs, Sheets and Slides are exported as PDFs. The copy is accessible to participants whom the school has granted access to the relevant assignment and to authorised school staff. By selecting material for an assignment, the user instructs the platform to make it available to these participants and must be entitled to share it.

Changing or deleting the original in Google Drive does not change the imported copy. Importing does not start ongoing synchronisation. A short-lived Google access token is used for the import operation and is not saved in the platform database or persistent browser storage.

Google data is used only to import, store and provide the selected learning materials. The Company does not sell it or use it for advertising, assessing creditworthiness or training general-purpose artificial intelligence models. Company staff may access the contents with the user's permission for support, to investigate security threats or to comply with legal requirements.

The use and transfer of information received through Google APIs comply with the Google API Services User Data Policy, including the Limited Use requirements. You can revoke permission in your Google Account connections settings. Revocation stops further access under that permission, but does not delete previously imported copies: contact your school or the Company to request their deletion.

• Google API Services User Data Policy
• Manage your Google Account connections

Within the learning process, the school, its administrators and curators receive access according to their permissions. Learning materials are provided to assigned participants. When posting information in areas accessible to others, consider who will be able to see it.

To operate the service, the Company may engage hosting, storage, communications, email and push notification providers. They receive only the data needed to deliver the relevant service, subject to applicable confidentiality and protection requirements. Data is provided to authorised government bodies when there is a lawful basis. The Company does not sell personal data.

When Google and other external services are used, data may be processed outside the Republic of Kazakhstan. Such transfers must have a valid basis and comply with Kazakhstan's requirements for cross-border transfers. External services also apply their own privacy policies.

EduMentor uses cookies and browser local storage to maintain sign-in sessions, support security and save preferences, including the interface language. These technologies may contain identifiers linked to an account; this information is not automatically anonymous.

You can delete or restrict cookies and site data in your browser settings. You may need to sign in again afterwards, and some features may stop working. Notification permissions can be managed in your browser or device settings.

If optional analytics or advertising technologies are introduced on the site, the Company provides information about their purposes and providers and obtains consent where required. Google Drive data is not shared with advertising analytics. When you open an external video or Google Picker, the relevant provider may use its own storage technologies under its privacy policy.

Data is retained for as long as necessary for the stated purposes, service delivery and statutory obligations. The period depends on the data category, the relationship with the school, contractual obligations and the need to resolve disputes. Once the purposes have been fulfilled or the lawful grounds cease to apply, data must be deleted or anonymised.

Removing an attachment from an assignment does not always immediately destroy the file: it may be used in other materials or remain in the trash. To request deletion of a particular file from storage, identify the account, school and material concerned. Backup copies are removed according to their rotation cycle; until then, access is limited to recovery and mandatory retention purposes.

The Company applies organisational and technical safeguards, including access controls, session and transmission protection, logging and recovery measures. Employees and contracted specialists must maintain confidentiality. Kazakhstan's statutory requirements for collecting, storing and protecting personal data are binding on the Company.

You may request information about whether your data is processed and about the purposes, grounds, sources and retention periods; request correction, blocking or deletion in cases provided by law; withdraw consent; and complain about a violation of your rights to the competent authority or a court.

Send requests to nurbuscompany@gmail.com with the subject 'EduMentor personal data'. Include a way to contact you, the account or school concerned and the nature of your request. Do not send passwords or access tokens. To protect data, the Company may request proportionate proof of identity or a representative's authority. Requests are handled within the time limits established by applicable law.

Withdrawing consent may prevent us from providing features that require the data. It does not invalidate processing previously carried out lawfully or prevent retention required by law. Where a request concerns data managed by a school, the Company works with that school to fulfil it.

The platform may be used by students who are minors. Schools and legal representatives ensure that the necessary grounds and consents for organising learning and sharing a child's data are in place where required by law. Avoid placing excessive information about children in publicly accessible materials. A legal representative may use the contacts provided to request correction or deletion and to enquire about the grounds for processing a child's data.

The Company publishes the current version of this Policy on this page with its revision date. Users are notified of material changes to the purposes or methods of data use; where new consent is required, it is requested before the relevant processing begins. The Company is liable in accordance with the laws of the Republic of Kazakhstan. The Russian, Kazakh and English versions describe the same data processing practices.