Privacy Policy

1. Who We Are

Syllarc is an AI-assisted course-authoring service for educators. It helps users plan courses, create and revise teaching materials, generate lecture content and presentations, check sources, and export course artifacts.

The data controller or business responsible for this Policy is:

Equal Science LLC

7533 S Center View Ct STE N, West Jordan, UT 84084

Privacy contact: privacy@syllarc.com

2. Information We Collect

Account and authentication information

We collect information such as your email address, optional display name, password hash, account role, email-verification status, session-token digest, account status, and credit balance. We do not store your account password in readable form. Authentication session tokens are stored server-side as keyed cryptographic digests.

Course inputs and uploaded materials

We collect the information you choose to provide when creating a course, including course titles and descriptions, prompts, preferences, teaching approaches, lecture instructions, and other course-planning information.

If you upload a PDF, Word document, or supported text file, the Service may extract and store its text, filename, summary, and related instructions with your draft so that the material can be used during later course generation. Do not upload student records, protected health information, confidential employer information, or third-party material unless you are authorized to use it with the Service.

Generated content and artifacts

We store generated course outlines, lecture content, notes, assessments, references, diagrams, presentation files, export files, draft versions, snapshots, generation status, and related metadata so that you can review, edit, download, retry, or resume your work.

AI-assistant and feedback content

When you use the Help Bot, we store your question, the response, relevant page context, and related operational metadata, including safety and audit classifications applied to the exchange. If you submit feedback or contact support, we also store the information you choose to provide, such as whether the response was helpful and any comments you add.

Usage, billing, and operational information

We collect information needed to operate and secure the Service, including feature usage, generated-job status, token and provider usage, estimated vendor cost, credit deductions and grants, error information, security events, administrative actions, timestamps, and limited request metadata such as IP address and user agent in server or security logs.

Browser storage

Syllarc currently stores authentication state in browser `sessionStorage` and uses `sessionStorage` or `localStorage` for interface preferences, dismissed guidance, and draft-specific view state. Logging out removes the authentication state but may not remove every interface preference. You can clear these values using your browser's site-data controls.

Syllarc does not currently rely on cookies for its own authentication. An external media service that you choose to load may use cookies or other browser storage under its own policy.

3. How We Use Information

We use personal information to:

• Create, authenticate, secure, and administer accounts.
• Provide, maintain, and improve course-authoring features.
• Process uploaded materials and generate requested teaching content.
• Save drafts, artifacts, histories, and settings.
• Verify factual claims, find academic sources, and improve source transparency.
• Calculate credits, provider usage, and operating cost.
• Send transactional messages such as email-verification and password-reset messages.
• Provide support, respond to feedback, and diagnose errors.
• Prevent abuse, fraud, unauthorized access, and security incidents.
• Comply with law, enforce our agreements, and establish or defend legal claims.
• Create aggregated or de-identified analytics that no longer identify an individual.

We do not use Syllarc to make decisions that produce legal or similarly significant effects about you. AI-generated material is a draft for educator review, not an automated decision about a person.

4. Legal Bases for Processing

Where the law requires a legal basis, we process personal information as necessary to provide the Service and perform our agreement with you; to comply with legal obligations; and for legitimate interests such as security, fraud prevention, service reliability, support, and product improvement, provided those interests are not overridden by your rights. We rely on consent where required, and you may withdraw consent for future processing where consent is the applicable basis.

5. Service Providers

Depending on the feature you use, Syllarc may send relevant portions of course instructions, uploaded or extracted content, generated material, claims, or prompts to service providers that help us operate the Service. These providers may include:

The precise providers used may change as we improve the Service. We require providers to handle information under their applicable agreements and privacy terms. Provider retention and security practices can differ from ours. We do not state that provider systems delete data at the same moment that Syllarc removes it from active systems. We maintain more detailed provider records internally and provide additional information when required by applicable law or contract.

Syllarc does not use your Inputs or Outputs to train or fine-tune AI models, and we do not sell them.

Under the commercial API terms and account settings currently used for AI text generation, that provider does not use API inputs or outputs to train or improve its models. Syllarc has not enabled optional provider training or data-sharing for that service. The provider may retain some request content temporarily for abuse monitoring, security, service operation, or legal compliance. Retention for those purposes is separate from model training.

6. Third-Party Links, Videos, and Exported Files

Course materials may contain links to publications, websites, videos, or other resources. Syllarc does not control those third parties. They receive information under their own privacy policies when you choose to follow a link or use their service.

Lecture previews show a local placeholder for externally hosted videos. Syllarc does not load the third-party video player until you choose to load it. If you choose to load the video, your browser contacts the external media provider, which may receive information such as your IP address, browser details, and interaction with the player.

Downloaded HTML teaching artifacts are self-contained and do not automatically load equation-display resources or fonts from external hosts. Course materials may still contain ordinary links to third-party resources. If you choose to follow a link, the destination receives information under its own privacy practices.

7. How We Disclose Information

We may disclose personal information:

• To service providers that process information for the purposes described above.
• To your institution or account administrator when your account is institution-managed and the administrator is authorized to access the relevant information.
• To professional advisers, auditors, insurers, or transaction counterparties subject to appropriate confidentiality obligations.
• When required by law, legal process, or a valid government request.
• When reasonably necessary to protect users, the public, Syllarc, or the integrity of the Service.
• In connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to applicable law.
• At your direction or with your consent.

We do not sell personal information or share it for cross-context behavioral advertising or targeted advertising. If our practices change, we will update this Policy and provide any choices required by law before the change applies.

8. Retention

We retain account information, course inputs, generated content, artifacts, feedback, and operational records for as long as reasonably necessary to provide the Service, maintain security and reliability, resolve disputes, enforce agreements, and meet legal, tax, accounting, or audit obligations. Different categories can have different retention periods.

When information is no longer needed, we delete it, de-identify it, or isolate it from ordinary use, subject to legal and operational requirements.

Syllarc creates encrypted backups for service recovery. Backup copies may remain after information is removed from active systems. Backups are isolated from ordinary product use and are accessed only for recovery, security, and operational purposes. They are removed through our backup-retention and recovery procedures, subject to legal and operational requirements.

Backups are not edited item-by-item during their retention window. They are isolated from normal product use and are used for disaster recovery. If a backup is restored, outstanding verified deletion obligations must be re-applied to the restored active system.

9. Access, Correction, and Deletion Requests

Depending on where you live, you may have rights to request access to, correction of, deletion of, restriction of, or portability of personal information, and to object to certain processing. You may also have the right to complain to a data-protection authority.

Syllarc does not currently provide a self-service account-deletion button. To make a privacy request, email privacy@syllarc.com from the address associated with your account and describe the request. We may ask for additional information reasonably necessary to verify your identity and authority.

We do not promise that every deletion request will be completed within 30 days. We will acknowledge, evaluate, respond to, and complete valid requests within the time required by applicable law, taking into account identity verification, the scope and complexity of the request, permitted extensions, and lawful retention exceptions.

When deletion is required, we use a controlled operator-assisted process to delete or de-identify personal information in active systems. Some security, accounting, audit, fraud-prevention, or legal records may be retained where permitted or required by law. Information in backups remains isolated until it is removed through the applicable backup-retention process.

We will not discriminate against you for exercising a privacy right where the law prohibits such discrimination.

10. International Data Transfers

Syllarc and its providers may process information in the United States and other countries. Those countries may have data-protection laws different from the laws where you live. Where required, we use legally recognized transfer mechanisms and safeguards applicable to our provider accounts and the transfer in question. Contact privacy@syllarc.com for information about safeguards relevant to your request.

11. Security

We use administrative, technical, and organizational safeguards designed to protect personal information. These include password hashing, keyed session-token digests, access controls, least-privilege service identities, encrypted offsite backups, input and file-size limits, isolated document parsing, provider-egress controls, and security logging.

No system is completely secure. You are responsible for protecting your credentials and for promptly notifying us if you believe your account or information has been compromised.

12. Educational and Sensitive Information

Syllarc is a course-authoring tool, not a student-information system, medical-record system, or repository for regulated research data. Do not upload personally identifiable student records, grades, protected health information, payment-card data, government identifiers, export-controlled information, or confidential third-party data unless you have authority to do so and an appropriate agreement with us covers that use.

If your institution requires a data-processing agreement, FERPA terms, a business-associate agreement, or other institutional terms, contact privacy@syllarc.com before using Syllarc for regulated information.

13. Children's Privacy

The Service is intended for educators and other adult users and is not directed to children under 13. We do not knowingly collect personal information directly from children under 13. If you believe a child has provided personal information to us, contact privacy@syllarc.com.

14. Changes to This Policy

We may update this Policy to reflect changes in the Service, law, or our practices. We will post the revised Policy with a new effective date and provide additional notice when required by law. Material changes apply prospectively unless the law permits otherwise.

15. Contact Us

For privacy questions or requests, contact:

Equal Science LLC

7533 S Center View Ct STE N, West Jordan, UT 84084

privacy@syllarc.com