Privacy Policy

Effective date: 2026-07-16

Nothing is captured until you click Analyze.

This Privacy Policy explains how Van Tech Systems LLC(“EdxAI,” “we,” “us”) collects, uses, shares, and protects personal information when you use the EdxAI browser extension and website at edxai.app (the “Service”). EdxAI is an independent study aid that analyzes a screenshot of the page you are viewing, when you ask it to, and returns an explanation and worked answer. We are the controller (GDPR) / business (CCPA) responsible for this information. Contact: privacy@edxai.app.

The short version

• EdxAI captures a screenshot of your visible browser tab only when you click Analyze — plus any files you choose to attach (images, PDFs, or text) — and sends them to our servers and to Anthropic (our AI provider) to generate your result. They are processed transiently and not stored by EdxAI as coursework.
• Anthropic does not use commercial API data to train its models by default, and deletes inputs and outputs within about 30 days (longer only if its safety systems flag content, or where law requires).
• We store your account identity, subscription/credit and referral records, and content-free operational metadata (request IDs, timings, token counts, error codes).
• We do not sell or share your personal information, and we do not use it for advertising.
• You can delete your account at any time, and you have the rights described below.
• EdxAI is for users 16 and older.

Information we collect

Information you provide: your email and, if you sign in with Google, the basic profile Google returns (we use OAuth and never receive your Google password); payment status via Stripe (we do not receive or store your full card number); and anything you send us in support.

Information created when you use the Service: the transiently-processed screenshot (and text extracted from it), plus any files you attach (images, PDFs, or text you choose to upload), sent for analysis — which may incidentally contain sensitive information if it is visible on your screen or contained in a file you upload; and content-free operational metadata (request IDs, timings, token/credit counts, error and status codes, coarse device/browser type, and IP address as processed by our hosting and security layers). This metadata does not contain your coursework or screenshots.

We do not knowingly collect health, financial-account, biometric, or precise-geolocation data, and we do not build advertising or behavioral profiles about you.

How and why we use information

Our purposes, and (where the GDPR applies) our legal basis:

• Provide the core Service — capture, analyze, return your result — as performance of a contract.
• Process any incidental sensitive content within a screenshot, solely to deliver your result, under your explicit consent (given when you agree to the in-product capture notice).
• Create and manage your account and process payments/credits, as performance of a contract.
• Keep the Service secure, prevent abuse, and enforce quotas/cost limits, on our legitimate interests.
• Measure and improve reliability using content-free metadata, on our legitimate interests.
• Comply with legal, tax, and accounting obligations.

We do not use your data to make automated decisions that produce legal or similarly significant effects about you (GDPR Art. 22). You can withdraw consent and object to legitimate-interest processing at any time.

Screenshots and AI processing

When you click Analyze, EdxAI captures the visible area of the current tab — not just one region, and not other tabs, windows, or your desktop. Capture happens only on your click; EdxAI never captures continuously, in the background, on page load, or when the overlay opens. The on-page overlay is hidden during capture so it does not appear in the image. The screenshot is sent over an encrypted connection to our backend and then to Anthropic, PBC(the Claude API), which acts as our data processor. Under Anthropic’s Commercial Terms, Anthropic does not use commercial API inputs or outputs to train its models by default and deletes them within about 30 days (up to 2 years only if flagged by its trust-and-safety systems, or where law requires). EdxAI does not retain your screenshots or coursework after your result is produced. If you attach files (images, PDFs, or text), they are sent to Anthropic the same way, processed transiently, and not stored by EdxAI — attaching a file is always your choice.

Who we share information with

We share personal information only with service providers/processors that help us run the Service:

• Anthropic — AI analysis of the screenshots and any files you submit.
• Supabase — authentication and database.
• Stripe — payment processing.
• Vercel — website hosting.
• Railway — backend/API hosting.
• Sentry — content-free error and performance monitoring.

A current list is at Subprocessors. We may also disclose information to comply with law, to protect rights and safety, or in connection with a merger, acquisition, or sale of assets. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

International data transfers

EdxAI is based in the United States; your data is processed there and by the processors above. For data transferred from the EEA, UK, or Switzerland, we rely on the European Commission’s Standard Contractual Clauses (2021, Modules Two and Three) with the UK Addendum and Swiss addendum, as incorporated into our processors’ agreements, and, where applicable, their EU–US Data Privacy Framework certification. We apply supplementary measures including short retention, a commitment that your content is not used to train AI models, encryption in transit, and data minimization. Request a copy of the safeguards at privacy@edxai.app.

Data retention

• Screenshots / coursework: not retained by EdxAI after your result; at Anthropic, deleted within ~30 days.
• Account identity: until you delete your account.
• Subscription / credit / referral records: until deletion, then as required for tax/legal purposes.
• Content-free operational metadata: on a rolling schedule (target 90–180 days), then purged.
• Payment records held by Stripe: per Stripe’s own obligations.

Security

We use encryption in transit (HTTPS/TLS), encryption of stored data, least-privilege access controls, and secret management. No method is perfectly secure, but we work to protect and minimize what we hold. Report security issues to security@edxai.app.

Your privacy rights

Everyone can delete their account in the dashboard or email privacy@edxai.app. EEA/UK/Switzerland: access, rectify, erase, restrict, object, portability, withdraw consent, and complain to your supervisory authority. California (CCPA/CPRA):know/access, delete, correct, and opt out of any “sale”/“share” — though we do not sell or share; because we use any incidental sensitive information only to provide the Service, we are not required to offer a separate “Limit” option; we will not discriminate against you. Other US states (VA, CO, CT, TX, etc.):access, correct, delete, portability, and opt out of targeted advertising, sale, and profiling — none of which we do; you may appeal a denied request by emailing privacy@edxai.app.

Children and minors

EdxAI is intended for users 16 and older. We do not knowingly collect personal information from anyone under 16; contact privacy@edxai.app to report it and we will delete it. EdxAI is a direct-to-user tool, not a school service, and does not create “education records” or fall under FERPA.

Chrome Web Store — Limited Use

EdxAI’s use and transfer of information received through the browser extension, including any website content it processes, adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. We use it only to provide EdxAI’s single purpose, and we do not sell it, use it for advertising, or use it to determine creditworthiness.

Changes & contact

We may update this Policy; material changes will be dated and, where appropriate, notified in the app or by email. Questions or requests: privacy@edxai.app. See also our Terms, Refund Policy, and Cookie Policy.