← Back to home

Privacy Policy

Effective Date: April 10, 2026 · Early Access

Who We Are

Qtaum is operated by its developer. For questions or requests, contact us at [email protected].

Our Commitment

Qtaum is built for instructors and students. We collect only the data necessary to provide the service. We do not sell your data, show ads, or use your submissions to train public AI models.

This Privacy Policy explains what data we collect, how we use it, and your rights.

What Data We Collect

Instructor Accounts

When you create an account, we collect:

  • Email address — for login, notifications, and account recovery.
  • Password — stored securely using industry-standard hashing.
  • Name — to personalize the interface and communications.

Student Submissions

Students do not create accounts. When students submit work, we collect:

  • Name and email — to identify the student and send feedback notifications.
  • Submitted files and links — the work being reviewed.
  • Responses and comments — replies to instructor feedback.

Student data is tied to the assignment and only accessible to the instructor who created it.

Usage Data

We collect basic operational and diagnostic usage data to improve Qtaum:

  • Log data — IP addresses, browser types, access times (for security and debugging).
  • Feature usage — which features are used, to prioritize improvements.

We do not track individual user behavior for advertising or use advanced analytics tracking.

How We Use Your Data

We use your data to:

  • Provide the service — store assignments, process submissions, deliver feedback.
  • Send notifications — email alerts for new submissions (instructors), published feedback, and replies (students).
  • Improve Qtaum — identify bugs, optimize performance, prioritize features.
  • Ensure security — detect abuse, prevent unauthorized access.

We do not use your data for:

  • Advertising or marketing to third parties.
  • Training public AI models (your submissions are not added to external datasets).
  • Selling or sharing with third parties, except as described below.

AI Processing

Qtaum uses AI to suggest feedback items. Here's how it works:

  • Submission processing: When you request AI suggestions, student submissions are sent to third-party AI services for analysis.
  • No public training: We use these services under terms that prohibit training public models on your data.
  • Instructor control: AI suggestions are drafts. You review, edit, or delete before publishing.

If you prefer not to use AI, you can review and write feedback manually.

Data Storage and Security

Where data is stored:

  • Application data (accounts, assignments, feedback) is stored in a secure PostgreSQL database.
  • Uploaded files are stored in S3-compatible object storage (e.g., AWS S3 or MinIO).
  • All data is stored in secure, access-controlled environments.

Security measures:

  • Passwords are stored securely using industry-standard hashing.
  • Data is transmitted over HTTPS (encrypted in transit).
  • File downloads require secure tokens.
  • Access to student submissions is restricted to the instructor who created the assignment.

No system is 100% secure. While we take security seriously, we cannot guarantee absolute protection against breaches.

Email Notifications

Qtaum sends email notifications to keep instructors and students informed:

Instructors

  • Receive email alerts when students create new submissions.
  • Do not receive emails for every student reply (to avoid inbox noise).

Students

  • Receive email alerts when instructors publish feedback.
  • Receive alerts when instructors add replies to published feedback.

We use email delivery services (e.g., SMTP providers) to send notifications. Your email address is not shared with third parties for marketing purposes.

Third-Party Services

Qtaum uses the following third-party services:

  • AI services: To generate feedback suggestions. Data is processed under terms that prohibit public model training.
  • Email delivery (e.g., SMTP providers): To send notifications. Emails are sent securely and are not used for marketing.
  • Cloud hosting and storage (e.g., AWS, DigitalOcean): To host the application and store files securely.

We carefully vet third-party providers and use them only as necessary to operate Qtaum.

Your Rights

You have the following rights regarding your data:

Access and Export

You can access your data at any time. You may request data export. Currently, export is done manually (copy assignments, feedback, etc.). Automated export tools may be added in the future.

Correction

You can update your account information (name, email, password) in your account settings.

Deletion

You can request account deletion directly in the application under account settings. The deletion process includes a confirmation step to prevent accidental deletion.

Once you confirm deletion, your request is processed and:

  • Your instructor account will be closed.
  • Assignments, submissions, and feedback you created will be deleted.
  • Students will no longer be able to access assignments you created.

If you cannot access your account, you can request deletion by contacting [email protected].

We may retain certain data for a limited period to comply with legal obligations or resolve disputes.

Data Portability (GDPR)

If you are in the EU, you have the right to receive your data in a structured, machine-readable format. Contact [email protected] to request data export.

Cookies and Tracking

Qtaum uses minimal cookies:

  • Session cookies: To keep you logged in.
  • Security cookies: To prevent cross-site request forgery (CSRF) attacks.

We do not use:

  • Advertising cookies.
  • Third-party analytics trackers (e.g., Google Analytics).
  • Social media tracking pixels.

Children's Privacy

Qtaum is designed for instructors working with students of any age. However:

  • Instructors must be 18+ to create accounts.
  • Student submissions may include work from minors.
  • Instructors are responsible for ensuring appropriate use with students and obtaining any necessary consents.
  • We do not knowingly collect personal data from children under 13 without appropriate consent.

If you believe a child's data has been submitted without appropriate consent, contact [email protected] immediately.

Data Retention

We retain your data as long as your account is active or as needed to provide the service.

  • Active accounts: Data is retained indefinitely unless you request deletion.
  • Closed accounts: Data is retained for a limited period to allow account recovery, then permanently deleted.
  • Backups: Deleted data may remain in secure backups for a limited period. Backups are rotated and eventually removed.
  • Legal obligations: In some cases, we may retain data longer to comply with legal requirements (e.g., tax records, dispute resolution).

International Users

Qtaum is operated by its developer and hosted using cloud infrastructure. If you use Qtaum from outside this region, your data may be transferred to and processed in the hosting region.

By using Qtaum, you consent to the transfer and processing of your data in accordance with this Privacy Policy.

EU Users: We respect GDPR rights, including access, correction, deletion, and data portability. Contact [email protected] to exercise these rights.

Changes to This Privacy Policy

We may update this Privacy Policy as Qtaum evolves. If we make significant changes, we'll notify you via email and update the "Effective Date" at the top of this page.

Continued use of Qtaum after changes take effect constitutes acceptance of the updated policy.

Contact Us

Questions or concerns about privacy?

We're committed to transparency and will respond to privacy inquiries promptly.