1. Data controller
The person responsible for EvaluatIA is Elio Manuel Diaz Jimenez, operating in the Dominican Republic. Privacy and support contact: elio.diaz.cudeni@gmail.com and +1 809-617-4100.
This policy is adopted primarily within the framework of Law No. 172-13 on personal data protection in the Dominican Republic and other applicable rules.
2. Data we may collect
- Evaluator account: name, email address, authentication provider, profile photo if supplied by the provider, and profile settings.
- Evaluator age verification: during registration, age is requested to verify that the person creating an evaluator account is 18 or older. We do not store the exact age entered; we retain a record that the requirement was met and that the legal terms were accepted.
- Educational content: exams, questions, rubrics, instructions, materials, files, images and settings added by the evaluator.
- Participants: name, code, student registration number, group, email address or other identifier configured as necessary by the evaluator, responses, attempts, results, scores, feedback and technical data needed to maintain the exam session.
- Usage and security: technical events, session identifiers, errors, audit logs, feature usage and data needed to protect the platform against abuse.
- Payments and credits: product purchased, amount, currency, payment status, PayPal order, capture or subscription identifiers, credit history, refund requests and the minimum data needed for reconciliation, fraud prevention and dispute handling. EvaluatIA does not receive or store full card numbers, bank account details or PayPal credentials.
- Support: messages and data you provide when requesting assistance or exercising a right.
To participate in an assigned assessment we do not request age as an access requirement. Taking an exam does not create an evaluator account or enable the platform’s general tools.
3. Purposes of data processing
We use data to authenticate evaluator users; create and maintain accounts; enable the creation and publication of assessments; identify participants; receive, store and display responses and results; provide support; prevent fraud and unauthorized access; maintain security records; manage payments, subscriptions, credits, cancellations and refunds; reconcile transactions; meet legal, accounting or tax obligations; and improve the service’s stability and operation.
4. Artificial intelligence and response review
Artificial intelligence features are reserved for restricted areas for authenticated evaluators and are used only when compatible with the provider’s current terms and applicable rules. The participant flow for opening, answering and submitting an assessment does not make direct calls to Gemini.
Questions that cannot be graded deterministically remain pending review. An evaluator may then review them manually or use assistance tools available in their restricted area when such use is enabled and permitted. AI may produce errors and never removes the evaluator’s ability to review or change a grade.
When a permitted AI tool processes content, instructions, questions, materials or the minimum context required for the feature may be sent to the provider. EvaluatIA may limit or disable AI features for certain categories of content, users or flows when required by provider terms or applicable rules.
5. Storage locations and who may process data
- Managed authentication service: account authentication and identity when this method is used.
- Managed database: profiles, settings, exams, attempts, responses, results and operational metadata.
- Managed Google Cloud storage: uploaded files and materials when the corresponding feature is used.
- Gemini API: processing associated with restricted AI tools for evaluators when enabled and their use is applicable.
- PayPal: authorization and processing of payments, subscriptions and refunds, fraud prevention and dispute resolution. PayPal processes the data provided by the user in accordance with its own agreements and privacy notice.
Google and PayPal operate their respective services in accordance with their own contracts and processing terms. Data may be processed on infrastructure outside the Dominican Republic. When using international providers, we apply available contractual and technical safeguards and limit transfers to what is necessary to provide the corresponding feature.
6. Basis and context of processing
Processing takes place as necessary to provide the requested service, manage the relationship with the evaluator user, carry out the assessment organized by the evaluator or institution, protect the platform, meet legal obligations and, where applicable, on the basis of consent or another valid authorization in the relevant context. Creating an evaluator account requires accepting the Terms and this Policy and confirming compliance with the minimum age applicable to that account.
7. Participants under the age of majority
EvaluatIA distinguishes between using the platform’s general tools and participating in an assigned assessment. Evaluator accounts and their general tools are reserved for people aged 18 or older. However, a participant under that age may take an assigned exam when allowed by the rules and by the relevant institution, teacher or responsible representative.
The evaluator or institution must request only the data needed to identify the participant and administer the assessment, and must have the applicable institutional, family or legal authorizations. EvaluatIA does not require a participant under the age of majority to falsely declare they are an adult in order to answer an exam.
If we receive a valid request relating to a minor’s data, we may require reasonable information to verify the requester’s identity and authority before accessing, correcting, blocking or deleting information, as appropriate.
8. Retention periods and criteria
Not all data has the same retention period. We apply the following criteria and avoid keeping information longer than necessary for the purpose for which it was used:
| Category | Retention |
|---|---|
| Evaluator account and profile | While the account remains active. Following a valid closure or deletion request, data that is no longer needed is deleted or blocked, except for legal obligations or pending claims. |
| Exams, materials and files | While the evaluator keeps them in their account, or until they are deleted, the account is closed or an applicable valid deletion request is made. |
| Participant attempts, responses and results | While needed for the assessment and while the evaluator or institution retains the exam or its results. They may be deleted earlier following a valid request, unless there is a legal reason to retain or temporarily block them. |
| Security, audit and support | For the time reasonably needed to investigate incidents, prevent abuse, resolve the request or demonstrate compliance with obligations. They are then deleted, anonymized or blocked as appropriate. |
| Records of evaluators’ acceptance of legal terms | For the time needed to demonstrate acceptance of the Terms, handle claims and meet legal obligations; they are then deleted or blocked as appropriate. |
| Payments, subscriptions, credits and refunds | During the relationship and afterward for the period needed for reconciliation, fraud prevention, claims handling and compliance with accounting, tax or legal obligations. We do not retain the complete financial data managed by PayPal. |
| Copies on providers’ infrastructure | Deleting operational and backup copies may require an additional technical period according to the provider’s tools, backup cycles and terms, unless the law requires certain data to be retained. |
9. Account and data deletion
You can request access, correction, updating, blocking or deletion by writing to elio.diaz.cudeni@gmail.com. To avoid disclosing or deleting another person’s data, we may request reasonable information to verify your identity and relationship with the requested data.
For requests relating to participants, we may also need information about the assessment, institution, teacher, access code or representative’s authority so that we can correctly locate and manage the information.
10. Rights of the data subject
Under applicable law, you can request information about your data, access it, request its correction or updating and request deletion or blocking where appropriate. You can also submit a complaint about processing you consider incorrect. Requests will be handled within the deadlines established by applicable Dominican rules.
11. Data transfers and disclosures
We do not sell personal data to advertisers. We may disclose data to providers as needed to operate the platform, meet a legal obligation, protect rights and security or carry out a valid instruction. Providers receive only the information needed for the corresponding purpose and are subject to their applicable terms and contractual obligations.
12. Security
We use authentication controls, access rules, server-side validation, logical data separation, security logs and measures available on Google’s infrastructure to reduce the risk of unauthorized access, alteration, loss or disclosure. No Internet-connected system can guarantee zero risk.
13. Cookies and local storage
EvaluatIA may use cookies or browser storage that are strictly necessary for authentication, security, session continuity and attempt recovery. If non-essential analytics, advertising or tracking technologies are introduced in the future, this policy and consent controls will be updated before they are used, where necessary.
14. Google and PayPal services and policies
Processing by Google services is also governed by the terms applicable to each product. You can consult the Google Privacy Policies, Cloud Services Terms, Cloud Services Data Processing and Security Terms and the Gemini API Additional Terms.
For payments, you can consult the PayPal legal agreements and privacy notice applicable in the Dominican Republic. PayPal independently determines how it processes data received directly, what checks it performs and how long the original payment method takes to reflect a refund.
15. Changes to this Policy
We may update this Policy when features, providers or legal requirements change. We will indicate the date of the current version and request renewed acceptance from registered users when a change requires additional consent.
16. Contact and requests
Responsible party: Elio Manuel Diaz Jimenez.
Email: elio.diaz.cudeni@gmail.com.
Phone: +1 809-617-4100.
Operations: Dominican Republic.
Also see our Terms and Conditions.