← Back to LoginEdbase Logo

Privacy Policy — edbase.io

Effective date: July 1, 2026
Last updated: July 1, 2026

1. Who we are

edbase.io ("edbase," "we," "us," or "our") is an online course and education platform operated by SIA GLAMZ, a company registered in Latvia under registration number 40203664694, with its registered address at Tallinas iela 35B, Riga, LV-1012.

For any questions about this policy or your personal data, contact us at: info@edbase.io

This policy explains what data we collect, why we collect it, and how you can control it — including data accessed through Google sign-in, Google Calendar, and Google Drive integrations.

Note on access model: edbase.io is not open to public self-registration. Access is provisioned exclusively by our team on behalf of partner institutions ("Institutions" or "Customers"), or by administrators at those Institutions. If you are using edbase.io, it is because an Institution you are affiliated with (as staff, faculty, or student) has arranged access on your behalf.

Controller vs. processor: For most personal data relating to an Institution's staff and students, the Institution is the data controller and edbase.io acts as a data processor, operating under a Data Processing Agreement ("DPA") with that Institution. Where edbase.io determines the purpose and means of processing (e.g. account security, billing with the Institution, platform analytics), edbase.io acts as controller. Institution administrators and their staff/students should also refer to their Institution's own privacy notice, which governs the underlying relationship.

2. Data we collect

2.1 Account data (via Google Sign-In)

Your edbase.io account is created and provisioned by our team or by your Institution's administrator — there is no public self-registration. Once your account exists, you use Google Sign-In to authenticate. When you do, we access:

  • Your name
  • Your email address (typically your Institution-issued address)
  • Your Google account profile picture (if available)

We use this solely to verify your identity and authenticate your existing edbase.io account. We do not access your Google password, and we never see it.

2.2 Google Calendar data

If you choose to connect your Google Calendar, edbase.io may access:

  • Read-only view of your calendar events and ability to create and manage course-related events

We use this data only to schedule live classes, set assignment deadlines, and send session reminders. We do not read, store, or share calendar events unrelated to your use of edbase.io, and we do not use this data for advertising.

2.3 Google Drive data

If you choose to connect Google Drive, edbase.io accesses only files you explicitly create, open, or upload through the edbase.io application (Drive "per-file" access). We do not browse, index, or access your broader Google Drive contents.

We use Drive access to let you submit assignments, store course materials, and back up your work.

2.4 Other data you provide

  • Course enrollment and progress data
  • Payment and billing information (processed by our payment provider — we do not store full card numbers)
  • Support messages and communications with us

2.5 Automatically collected data

  • IP address, browser type, device information
  • Usage data (pages visited, features used, session duration) via cookies or analytics tools

3. How we use your data

We use collected data to:

  • Provide and operate the edbase.io platform
  • Authenticate your account and keep it secure
  • Deliver course content, track progress, and issue certificates
  • Schedule and manage classes via Calendar (if connected)
  • Store and retrieve your coursework via Drive (if connected)
  • Process payments
  • Respond to support requests
  • Improve our platform (aggregated, non-identifying analysis)
  • Comply with legal obligations

We do not sell your personal data. We do not use Google user data for advertising or serving ads.

4. Legal basis for processing (GDPR)

As we operate in the EU, we process your data under the following legal bases:

  • Contract necessity — to provide the course platform you signed up for
  • Consent — for optional integrations like Calendar and Drive, which you can revoke at any time
  • Legal obligation — e.g. tax and invoicing records
  • Legitimate interest — for basic security, fraud prevention, and service improvement

5. Data sharing

We share data only with:

  • The Institution that provisioned your access, which may view your account activity, progress, and usage data as part of its administrative role
  • Service providers who help us operate edbase.io (hosting, payment processing, email delivery), under data processing agreements
  • Legal authorities when required by law
  • Google APIs, strictly to enable the sign-in, Calendar, and Drive features you activate

We do not sell, rent, or trade your data to third parties for marketing purposes.

edbase.io's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. Data retention

We retain your data for as long as your account is active, or as needed to provide services. You may request deletion at any time (see Section 8). Calendar and Drive access tokens are deleted immediately upon disconnection or account deletion.

7. Data security

We use industry-standard measures (encryption in transit, access controls, secure hosting) to protect your data. No system is 100% secure, and we encourage you to use strong, unique passwords and enable two-factor authentication where available.

8. Your rights (GDPR)

As an EU-based service, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data ("right to be forgotten")
  • Restrict or object to certain processing
  • Data portability
  • Withdraw consent for optional integrations (Calendar, Drive) at any time via your Google Account permissions page
  • Lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija) or your local EU data protection authority

To exercise these rights, contact info@edbase.io.

9. Revoking Google access

You can disconnect edbase.io's access to your Google account, Calendar, or Drive at any time via:
https://myaccount.google.com/permissions

10. Children's privacy

edbase.io is not directed at children under 16. If you believe a child has provided us data without parental consent, contact us and we will delete it.

11. Changes to this policy

We may update this policy periodically. Material changes will be communicated via email or in-app notice. Continued use of edbase.io after changes constitutes acceptance.

12. Contact us

SIA GLAMZ
Tallinas iela 35B, Riga, LV-1012, Latvia
Email: info@edbase.io