Who decides how your data is used?
COLEGIO HUMANITAS BILINGUAL SCHOOL, S.L. is responsible for how your data is used in TutorChat. This means the school decides what the tool is used for, which teachers may access it, which providers are authorized, and how long information is kept.
You can contact the school at Avenida de los Actores, 1–5, 28760 Tres Cantos, Madrid. You can also write directly to its Data Protection Officer at dpd@humanitastrescantos.com.
What data do we use, and why?
The school supplies your school email address and class membership to create and manage your access. When you use TutorChat, it processes the messages you write, materials your teacher adds, and earlier parts of the conversation needed to answer you.
TutorChat also creates and stores learning data, such as completed activities, progress, summaries, and formative estimates. It keeps some technical records to sign users in, protect accounts, detect errors, and keep the service secure.
These data let TutorChat answer you, continue earlier conversations, show progress, and allow teachers to help. They are not used for advertising, selling information, or general model training. Research is explained and decided separately: declining research does not prevent you from using TutorChat.
Your school email, class membership, and some technical data are necessary to provide access. TutorChat cannot operate without them. You decide what to write in each conversation, but should avoid personal information that is not needed. The current version does not process or store voice recordings.
Why may Humanitas use these data?
Humanitas uses these data because TutorChat forms part of its educational function. The proposed legal basis is performance of a task carried out in the public interest under Article 6(1)(e) GDPR and Additional Provision 23 of Spain’s Organic Education Act.
The educational processing therefore does not rely on asking for your data-protection consent. Spain's age-14 rule for certain data-processing consent does not change the legal basis Humanitas selects for this educational service. When you continue, TutorChat separately records that you received this information and that you accepted the terms of use; you are not authorizing research or another different use.
How is artificial intelligence involved?
TutorChat uses the z-ai/glm-5.3-flash artificial-intelligence model through TensorX Ltd., an Irish company. To generate an answer, TensorX may process your message, materials supplied by your teacher, and relevant parts of the conversation.
Your message is first analyzed to try to detect personal information, then an educational response is generated, and finally the response is checked before you see it. Because TensorX also performs the first check, it receives the original message for that analysis. Filters reduce risk but are not perfect, so avoid unnecessary personal information.
TensorX states that it processes messages and responses temporarily, does not store or log them, and does not use them to train or improve models. It also states that it hosts the model directly and does not share conversations with the model developer. It may retain limited operational data such as the request date, model used, and number of tokens processed.
Your teachers may access all your TutorChat conversations, activities, progress, summaries, and formative estimates. Those estimates may be wrong, are not official grades, and are not used to inform grades or decide promotion, discipline, admission, or another important school outcome. Tell your teacher if an estimate appears wrong.
Who receives the data, and where is it stored?
Data stored by TutorChat is encrypted and hosted with Amazon Web Services in Ireland. TensorX performs AI inference in Dublin and Helsinki. Authorized Humanitas teachers and administrators may access the data, as may technical staff when strictly necessary to maintain and protect the service.
TensorX uses other providers for infrastructure, security, communications, and support. Most processing occurs in Europe. Some auxiliary services may operate in the United States or United Kingdom under safeguards required by European law, such as Standard Contractual Clauses. Conversation content is not sent to those auxiliary services. TensorX publishes its current subprocessor list.
TutorChat technical support is available at ceiroasolans@berkeley.edu, but that address must not receive conversations, screenshots, or personal information. Report a problem to your teacher first so it can be escalated with only the minimum information needed.
How long is it kept?
Conversations and educational data are kept during the school year and for up to one year after it ends. They then cease to be used and are deleted from active systems.
Technical logs that do not contain conversations are kept for thirty days. Recovery backups may retain information for up to thirty-five additional days; they remain isolated and may be used only to restore the service after an incident. TensorX does not retain messages or responses.
If Humanitas grants an earlier deletion request, data is removed from active systems and disappears from recovery copies when their technical retention period ends.
What rights do you have?
You may ask what data is held about you, obtain a copy, correct inaccurate information, request deletion where applicable, restrict certain uses, or object for reasons relating to your situation. You may also request portability where it applies. These rights are not always absolute; Humanitas will consider each request and explain its decision.
You may start by speaking with your teacher, who can access your educational data and pass the request to the right person at the school. You may also contact the Data Protection Officer directly at dpd@humanitastrescantos.com.
If you believe your data was not used correctly, you may complain to the Spanish Data Protection Agency. If Humanitas materially changes the purpose, providers, AI model, or processing conditions, it must update this information before applying the change.