Return to Home

DATA PROTECTION & PRIVACY PROTOCOL

Privacy Policy & Data Protocol

Blindspot Edu is engineered to respect student and educator privacy. We believe learning tools should be frictionless, transparent, and free of behavioral surveillance.

Production Release adaptive-v1•Effective: October 24, 2026•Anonymous learner sessions
Protocol 01

Zero-Friction Anonymous Learner Sessions

We do not require account registration, passwords, social logins, or personal profile creation. When you visit Blindspot Edu, your browser is issued an anonymous learner session cookie containing a securely generated random token.

What is saved to your session: Your progress along lecture phases, completed diagnostic checks, prerequisite check status, and preferred narration settings (such as Amazon Polly voice preferences).

What is never collected: Your real name, physical address, academic institution records, or passwords.

Protocol 02

Audio & Video Processing Protocol

When you upload a lecture recording, import a public YouTube video, or record in-browser media:

  • Encrypted Media Storage: Uploaded audio and video files are stored in private Amazon S3 buckets (`SSE-AES256`) with strict Block Public Access policies enforced.
  • Qwen Speech Recognition: New recordings are sent to Alibaba Cloud Model Studio for Qwen transcription through a short-lived private S3 download URL. Qwen returns timestamped speech segments. A saved transcript may be reused without sending the recording again. Provider processing and retention follow the applicable API terms.
  • Pedagogical LLM Processing: Generated transcripts are analyzed for prerequisite concepts, phase boundaries, and diagnostics via commercial API endpoints with Alibaba Cloud Model Studio (Qwen 3.7 Flash). Bedrock is an available adapter but is not the active production provider. Provider handling is governed by the applicable API terms; we do not claim a verified provider-wide no-training guarantee.
Protocol 03

Email Notifications & Retention

Providing an email address on the upload form is entirely optional. If you choose to provide an email:

  • It is used exclusively to send a single one-time transactional message notifying you when your lecture processing completes successfully.
  • Backup copies and provider records may retain data beyond active queue cleanup. Emails are dispatched via Amazon Simple Email Service (SES) under our verified domain identity (@blindspot-edu.online).
  • Active Queue Cleanup: We do not send marketing newsletters. Once dispatched (or after reaching the 3 retry attempt limit), the recipient address field in the active database queue is cleared.
Protocol 04

Infrastructure & Subprocessors

Blindspot Edu uses the following service providers:

Amazon Web Services
Hosting (EC2 in us-east-1), encrypted storage (S3), email dispatch (SES), and neural speech synthesis (Polly).
Alibaba Model Studio
Commercial MaaS API (ap-southeast-1) for Qwen 3.7 Flash pedagogical decomposition.
Cloudflare
DNS resolution for blindspot-edu.online. Application traffic connects directly to the AWS host.
Protocol 05

Data Control & Right to Erasure

Because learner accounts are tied to your browser session:

  • Clearing Cookies: Clearing your browser cookies or site data immediately detaches your device from your anonymous session key.
  • Local Recording Drafts: In-browser studio recordings stored in client cache remain entirely on your device until uploaded or discarded.
  • Explicit Erasure Requests: If you need any specific lecture recording or processed artifact deleted, submit a request via our project repository issue tracker with your workspace URL.