Legal & Compliance

Privacy Policy & GDPR Compliance

Last Updated: August 2026 | Effective Date: August 2026

1. Introduction

Glotta ("we", "our", or "us") provides an AI-powered language teaching platform designed for educators and educational institutions. This Privacy Policy explains how we collect, use, store, and protect personal information when you visit our website, use our teacher dashboard, or interact with our services.

If you are a student or teacher using Glotta in a classroom context, please also review our Student & Children’s Privacy Policy (COPPA & FERPA), which specifically governs student data protection.

2. Information We Collect

  • Teacher Account Information: Name, work email address, school/institution name, country, password, and verification documents.
  • Curriculum & Classroom Data: Class names, subject levels, language preferences, generated lesson plans, custom vocabulary lists, and assignments.
  • Billing & Payment Data: Processed securely via our payment processors (e.g., Stripe). Glotta does not store full credit card numbers.
  • Technical & Usage Data: IP address, browser type, operating system, pages visited, and interaction timestamps.

3. Artificial Intelligence & Data Processing

Glotta utilizes artificial intelligence to assist teachers in generating curricula, assignments, and automated speech evaluations.

Zero Public AI Training Guarantee:

We hold strict enterprise zero-data retention agreements with our AI infrastructure providers. Your teaching materials, student voice recordings, and classroom submissions are never used to train, tune, or improve public AI models.

4. Data Storage & International Data Transfers

Glotta routes and hosts user data based on geographical region to comply with local data residency expectations:

  • European Union / UK / EEA Users: Hosted on European cloud servers (Frankfurt / Dublin) under EU GDPR and UK GDPR protections.
  • United States & Rest of World: Hosted on US-based tier-4 cloud servers (AWS / GCP) with AES-256 encryption at rest and TLS 1.3 in transit.

5. European Privacy Rights (GDPR & UK GDPR)

If you reside in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following statutory rights under the General Data Protection Regulation:

  • Right of Access: Request a copy of all personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate personal data.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data and account.
  • Right to Restrict or Object to Processing: Limit how we process your personal data.
  • Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format.
  • Right to Lodge a Complaint: Lodge a grievance with your local Data Protection Authority (DPA).

To exercise any of these rights, email us at support@glotta.ai. We fulfill all verified requests within 30 days.

6. Data Retention & Deletion

We retain account data as long as your account remains active. When a teacher or school deletes an account or classroom, associated student data and generated curriculum units are permanently purged from production databases within 30 days.

7. Contact Us

For privacy inquiries, Data Protection Officer (DPO) requests, or custom Data Processing Agreements (DPAs):

Glotta Privacy Team
Email: support@glotta.ai
Support: support@glotta.ai