Privacy policy

ELVORA – PRIVACY POLICY

Last updated: August 27, 2026

1. Introduction

This Privacy Policy explains how Elvora collects, uses, processes, stores, and protects personal information when schools, educational institutions, administrators, staff members, teachers, students, parents, and other authorized users access or use the Elvora platform and related services.

This Privacy Policy also applies to Elvora Recorder, the browser extension used by authorized users to record eligible online classes and transfer authorized recordings to cloud storage.

By using Elvora, users acknowledge that their information may be processed as described in this Privacy Policy, subject to applicable laws and the responsibilities of the educational institution providing access to Elvora.

2. Scope

This Privacy Policy applies to personal information processed through:

  • the Elvora web platform;

  • school-specific Elvora portals and subdomains;

  • administrator, staff, teacher, student and parent accounts;

  • online-class functionality;

  • Google integrations;

  • Elvora Recorder;

  • cloud recording and storage functionality;

  • communications and notifications;

  • other Elvora services that reference this Privacy Policy.

Third-party websites and services integrated with Elvora may be governed by their own privacy policies.

3. Information We May Process

The information processed depends on the services used, the user's role, and the configuration of the relevant educational institution.

3.1 Account and Identity Information

Elvora may process information such as:

  • first and last name;

  • email address;

  • user role;

  • school or institution;

  • account identifier;

  • profile information;

  • other information required to create and manage an authorized Elvora account.

3.2 School and Educational Information

Depending on the functionality used, Elvora may process information relating to:

  • schools and educational institutions;

  • classes;

  • teachers;

  • students;

  • parents;

  • staff members;

  • timetables;

  • attendance;

  • educational resources;

  • online classes;

  • administrative information;

  • other information entered into the platform by authorized institutions or users.

3.3 Authentication and Security Information

Elvora may process technical authentication and security information necessary to:

  • authenticate users;

  • maintain authorized sessions;

  • protect accounts;

  • prevent unauthorized access;

  • enforce permissions;

  • detect security incidents.

Passwords and authentication credentials must be handled using appropriate security measures and are not intended to be exposed to unauthorized persons.

3.4 Technical Information

When users access Elvora, certain technical information may be processed automatically, including information such as:

  • IP address;

  • browser type;

  • device or operating-system information;

  • timestamps;

  • technical logs;

  • session information;

  • error and security logs.

This information may be used for security, troubleshooting, service operation and prevention of abuse.

4. Purposes of Processing

Elvora processes information only where necessary for legitimate platform and educational purposes, including to:

  • provide and operate Elvora;

  • create and manage authorized user accounts;

  • identify the user's educational institution and permissions;

  • provide school and classroom management functionality;

  • manage schedules and attendance;

  • provide online-class functionality;

  • provide authorized class-recording functionality;

  • store and retrieve authorized recordings;

  • provide Google integrations requested by authorized users;

  • provide notifications and communications;

  • maintain platform security;

  • prevent fraud and unauthorized access;

  • diagnose technical problems;

  • provide support;

  • comply with applicable legal obligations.

Elvora does not process user information for purposes unrelated to the functionality of the platform without an appropriate legal basis or authorization.

5. Elvora Recorder

Elvora Recorder is a browser extension designed to allow authorized teachers or other authorized users to record eligible online classes associated with Elvora.

The extension's purpose is limited to providing authorized online-class recording and related cloud-storage functionality.

Elvora Recorder is not intended to monitor a user's general browsing activity or secretly record unrelated browser activity.

6. Information Processed by Elvora Recorder

When an authorized user uses Elvora Recorder, the extension may process information necessary to provide the recording functionality, including:

  • information identifying the authorized user where required;

  • school or institution identifiers;

  • class or online-session identifiers;

  • information necessary to verify that a recording is associated with an authorized Elvora class;

  • recording status;

  • technical information necessary to create and maintain the recording;

  • information necessary to upload, recover or complete an interrupted recording;

  • audio captured from the authorized online-class browser tab;

  • video and visual content captured from that tab;

  • other content visible or audible within the captured online-class tab.

Elvora Recorder does not intend to collect unrelated browsing history or monitor websites that are not involved in the authorized recording workflow.

7. Starting a Recording

Recording functionality is intended to operate only when an authorized user initiates an eligible recording.

Before or during the recording workflow, the user may be required to interact with Elvora, Elvora Recorder, the browser, or the conferencing service to authorize the capture.

The extension uses browser capabilities required to capture the authorized online-class tab and maintain the recording process.

Users must not use Elvora Recorder to intentionally record unrelated meetings, websites, communications, or other content outside its authorized educational purpose.

8. Recording Consent and Institutional Responsibility

Educational institutions and authorized users are responsible for ensuring that online-class recording is permitted under applicable laws and institutional policies.

Before recording participants, the institution and/or authorized user must provide any notices and obtain any permissions or consents required by applicable law.

This may include requirements relating to teachers, students, parents, guardians, staff members or other participants.

Elvora provides the technical recording functionality but does not replace an institution's responsibility to determine whether recording is legally and organizationally appropriate.

9. Recording Processing and Cloud Uploads

During recording, information may be temporarily processed on the user's device as necessary to create and maintain the recording.

Authorized recording data may then be securely transferred to cloud infrastructure used by Elvora or configured for the relevant educational institution.

Technical mechanisms may be used to support:

  • multipart or segmented uploads;

  • temporary local recording state;

  • recovery from interrupted uploads;

  • verification of upload completion;

  • prevention of incomplete or corrupted recordings.

These mechanisms are used solely to provide reliable recording and storage functionality.

10. Recording Storage and Retention

Recording availability and retention may depend on:

  • the institution's subscription;

  • storage quotas;

  • institutional configuration;

  • configured retention periods;

  • contractual requirements;

  • applicable legal requirements.

Recordings may be deleted when:

  • an authorized institution or user requests deletion where applicable;

  • an applicable retention period expires;

  • storage or subscription conditions require deletion;

  • an account or service is terminated;

  • deletion is required by applicable law.

Information will not knowingly be retained longer than reasonably necessary for the purposes for which it is processed, subject to legitimate operational, contractual and legal requirements.

11. Google Services

Elvora may integrate with Google services where enabled by the institution or authorized user.

An authorized user may choose to connect a Google Account to Elvora.

Depending on the permissions granted, Elvora may use Google APIs to provide functionality such as:

  • authentication;

  • identifying the authorized Google account;

  • creating or managing calendar events;

  • creating or associating Google Meet meetings with educational sessions.

Elvora only requests Google permissions necessary for the functionality being provided.

Users may revoke applicable Google permissions through their Google Account settings where supported.

Google services remain subject to Google's own terms and privacy policies.

12. Google API Data

Information obtained through Google APIs is used only to provide or improve user-facing functionality that is appropriate to Elvora and authorized by the user.

Elvora does not sell Google user data.

Elvora does not use Google user data for advertising purposes.

Elvora does not use Google user data to determine creditworthiness or for lending purposes.

Elvora's use and transfer of information received from Google APIs will comply with applicable Google API Services User Data Policy requirements, including applicable Limited Use requirements.

13. Sharing and Disclosure of Information

Elvora does not sell personal information or recording content.

Information may be disclosed only where reasonably necessary to provide and secure the service, including to:

  • the educational institution responsible for the relevant account;

  • authorized users of that institution according to their roles and permissions;

  • infrastructure or cloud service providers used to operate Elvora;

  • technical service providers necessary to provide requested functionality;

  • authorities where disclosure is required by applicable law.

Service providers should receive only the information reasonably necessary to perform their relevant services.

Elvora does not transfer user information to third parties for unrelated advertising or marketing purposes.

14. Limited Use of User Data

Personal and sensitive user information processed by Elvora and Elvora Recorder is used only for purposes related to the core functionality of the platform and extension.

Elvora does not:

  • sell user data;

  • sell recordings;

  • use recorded classroom content for advertising;

  • use user information for unrelated advertising profiles;

  • use or transfer user information for determining creditworthiness or lending;

  • intentionally use Elvora Recorder to monitor unrelated browsing activity.

Information is not transferred for purposes unrelated to providing, maintaining, securing or supporting the applicable Elvora functionality except where required by law or expressly authorized.

15. Data Security

Elvora implements reasonable technical and organizational measures intended to protect information against:

  • unauthorized access;

  • unauthorized disclosure;

  • alteration;

  • misuse;

  • accidental loss;

  • destruction.

Security measures may include authentication controls, authorization rules, encrypted communications, tenant isolation, restricted infrastructure access and technical monitoring.

However, no internet-based platform, browser extension, transmission method or cloud-storage system can guarantee absolute security.

16. Multi-Tenant Data Isolation

Elvora is designed to serve multiple educational institutions.

Access controls are intended to ensure that users can access only the school, classes, recordings and information for which they are authorized.

Users must not attempt to access information belonging to another institution or another user without authorization.

17. Data Retention

Personal information is retained only for as long as reasonably necessary to:

  • provide Elvora services;

  • maintain authorized accounts;

  • satisfy contractual obligations;

  • maintain security and technical records;

  • comply with applicable legal obligations;

  • resolve disputes where necessary.

Different categories of information may have different retention periods.

Educational institutions may also have their own retention obligations or policies.

18. Data Deletion

Subject to applicable law, contractual requirements and institutional responsibilities, authorized requests may be made concerning deletion of personal information.

Where an educational institution controls the relevant educational records, users may need to submit certain requests directly to that institution.

Deletion requests may be subject to information that must be retained for legal, security, contractual or legitimate operational purposes.

19. Children's and Students' Information

Elvora is an educational platform and may process information concerning students, including minors, when the platform is used by educational institutions.

Educational institutions are responsible for determining the appropriate legal basis for processing student information and for obtaining parental or guardian authorization where required by applicable law.

Elvora processes student information only as necessary to provide authorized educational services and according to applicable contractual and legal requirements.

Elvora does not knowingly use student information for behavioral advertising.

20. User Rights

Depending on applicable law and the user's relationship with the relevant educational institution, users may have rights concerning their personal information, including rights to:

  • request access;

  • request correction;

  • request deletion where applicable;

  • object to or restrict certain processing where applicable;

  • request information about how their data is processed;

  • withdraw consent where processing is based on consent.

Some requests involving school-controlled educational information may need to be directed to the relevant educational institution.

Identity verification may be required before fulfilling certain privacy requests.

21. Third-Party Services

Elvora may rely on third-party infrastructure and services for functions such as:

  • hosting;

  • cloud storage;

  • authentication;

  • email or notifications;

  • APIs;

  • online conferencing;

  • other infrastructure required to provide Elvora.

Third-party services may process limited information as necessary to provide their services and may be governed by their own privacy policies and contractual obligations.

22. International Data Processing

Depending on the infrastructure providers used by Elvora or an educational institution, information may be processed or stored in countries other than the user's country.

Where required by applicable law, appropriate safeguards should be used for international transfers of personal information.

23. Changes to This Privacy Policy

Elvora may update this Privacy Policy when necessary to reflect:

  • changes to Elvora services;

  • new functionality;

  • changes to Elvora Recorder;

  • changes to third-party integrations;

  • technical changes;

  • legal or regulatory requirements.

The latest version will be made available through the official Elvora website.

Where appropriate, users or institutions may be notified of material changes.

24. Relationship With the Terms and Conditions

This Privacy Policy should be read together with the applicable Elvora General Terms and Conditions.

The Terms and Conditions contain additional provisions concerning use of the platform, online classes, Elvora Recorder, recordings, subscriptions and institutional responsibilities.

25. Contact

Questions or requests concerning this Privacy Policy, personal information, Elvora Recorder or recording-related privacy matters may be submitted using the official contact information published by Elvora.

Privacy requests should clearly identify the nature of the request and, where applicable, the relevant institution or Elvora account.

Website: elvora.tn

Last updated: August 27, 2026