Privacy notice

Eval10 ("Eval10", "we"), available at eval10.online, is the controller of the personal data described in this notice, in accordance with Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP). Privacy contact: soporte@eval10.online.

1. Data we collect

• From teachers (users): name, email address and profile picture of their Google account when signing in; subscription and billing data processed by Stripe (we do not store card numbers).
• From students, entered by the teacher: name, group, student ID, subject, email address and phone number, as well as the submitted assignments (PDF or images), the activity instructions and rubrics.
• Results: the grade, feedback and breakdown generated by the system.
• Technical data: usage and error logs required to operate the service.

2. How we use the data

• Create and manage the teacher's account and subscription.
• Grade assignments with artificial intelligence and display the evaluation history.
• Email the teacher the result of each evaluation.
• Handle support requests and prevent misuse.

We do not sell personal data and we do not use it for targeted advertising inside the dashboard.

3. Responsibility for student data

The teacher decides which student data to enter and upload, and represents that they have the necessary authorization or legal basis (for example, from the school or from parents or guardians in the case of minors). Eval10 processes that data solely on behalf of the teacher and to provide the service. We recommend not including unnecessary data (for example, a student's phone number or email) when it is not essential.

4. Service providers involved

To provide the service we share data with these processors:

• Google (Sign in with Google and Gemini API): authentication and analysis of assignments. Assignments are sent to the paid Gemini API; under the paid API terms, Google does not use them to train its models.
• Supabase: database and authentication.
• Cloudflare: file storage and network.
• Vercel: application hosting.
• Stripe: subscription payments.
• Resend: email delivery.

Some of these providers are located outside Mexico, so data may be transferred to and stored in other countries under each provider's contractual safeguards.

5. Use of your Google account information

Eval10 only accesses your name, email address and profile picture to identify you and sign you in. The use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not access your Gmail, Drive or any other data in your account.

6. Retention and deletion

We keep evaluations and their files according to your plan (for example, the 200 most recent evaluations on the Basic plan). When that limit is exceeded, the oldest ones are automatically deleted together with their files. You can also request deletion of your account and all your data at any time.

7. Your rights (ARCO) and withdrawal of consent

You may exercise your rights of access, rectification, cancellation and objection, and withdraw your consent or limit the use of your data, by writing to soporte@eval10.online with your name, your account email and a description of your request. We will respond within 20 business days. Students may direct their request to their teacher or to us through the same channel. If you are located in the European Union, the United Kingdom or California, you may have additional rights under local law; contact us and we will help you exercise them.

8. Security

We apply reasonable technical and administrative measures: encrypted connections (HTTPS), per-user access control at the database level, files in private storage and protected service keys. No system is infallible; if a breach affecting your data occurs, we will notify you.

9. Cookies

We use strictly necessary cookies to keep your session and remember your language and currency preferences. If we enable advertising measurement tools (for example, the Meta pixel) on public pages, we will let you know and you will be able to decline them.

10. Changes to this notice

We may update this notice. The current version will be published on this page with its update date.