Privacy Policy

Introduction

At Sanabel AI, we are committed to protecting your privacy and the security of your personal information. This Privacy Policy explains how we collect, use, store, and safeguard your data when you use our AI-powered educational platform. Sanabel AI serves teachers, students, and school administrators. We take extra care of your data.

By creating an account or using any feature of Sanabel AI, you agree to the practices described in this policy.

Information We Collect

We collect the following categories of information:

• Account information: Full name, email address, password (hashed), and account role (teacher or student) provided at registration.
• Profile data: Language preference and any optional profile details you add in Settings.
• Usage data: AI tool usage history, session activity, daily and monthly usage counts, and progress data.
• Uploaded files: Documents and images you upload for use with AI tools, stored in Firebase Storage. PDFs are processed for text extraction to power tool responses.
• Support tickets: Messages, subject lines, and contact details submitted via the Help & Support form.
• Technical data: IP address, browser type, device type, and session cookie data.
• Payment information: Subscription plan status and billing period dates. We do not store raw payment card details — these are handled by our payment processor.

How We Use Your Information

• To create and manage your account and authenticate your sessions.
• To deliver AI-generated educational content through our tools and features.
• To track and display platform usage and progress.
• To enforce daily and monthly usage limits based on your subscription plan (Starter or Pro).
• To send important account and service notifications by email, such as password resets, support ticket updates, and subscription changes.
• To improve platform performance, fix bugs, and develop new features.
• To manage user accounts and platform access for educators.

AI Processing & Third-Party Services

Sanabel AI utilizes secure cloud AI infrastructure providers to power text, reasoning, and visual media generation. Prompts you submit and tool inputs you enter are processed securely to generate platform responses.

We use secure cloud data services for user authentication, encrypted database storage, and file storage under strict cloud security frameworks.

For large PDF files, we may generate and cache text embeddings to optimize document retrieval and speed up responses.

We do not sell your personal data to any third party. Data shared with infrastructure providers is strictly limited to what is required to deliver the Service.

Data Security

We use industry-standard security practices to protect your data. Authentication is handled via secure session tokens and encrypted cookies. Passwords are never stored in plain text. File uploads are stored with access rules that restrict files strictly to their owner.

Server-side API routes are protected by authentication middleware. Admin areas require verified admin role access. Despite these measures, no system is completely secure, and we cannot guarantee absolute security of data transmitted over the internet.

Cookies and Session Data

We use essential session cookies strictly necessary to maintain your authenticated login state. We do not use advertising cookies or track you across third-party websites.

Children's Privacy

Sanabel AI is designed for use in educational settings. Student accounts access a dedicated student workspace with curated tools appropriate for educational activities.

Your Rights

• Access: You can view your account data and usage statistics from your Settings page.
• Correction: You can update your profile information in Settings at any time.
• Deletion: You may request deletion of your account and all associated data by contacting us. Uploaded files can be deleted directly from the My Files page.
• Data portability: You may request an export of your account data by emailing us.
• Withdraw consent: You may stop using the Service and close your account at any time.

Data Retention

We retain your account data for as long as your account is active. Uploaded files remain in storage until you delete them or close your account. Support ticket data is retained for up to 2 years. If you request account deletion, we will remove your personal data within 30 days.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, for material changes, notify you by email or an in-app notice. We encourage you to review this policy periodically.

Contact Us

If you have questions, concerns, or requests regarding your privacy or this policy, please contact us at: