Privacy Policy

Last updated: 17 September 2026

Please note: This is a general template and not legal advice. Global Fin X should have it reviewed against the specific data flows in the shipped build and against the privacy laws that apply to your users (for example GDPR, India's DPDP Act, or others).

This Privacy Policy explains how Global Fin X ("we", "us", "our") handles information in connection with the Educator Canvas application and this website (the "Service"). Educator Canvas is designed to be local-first: your documents and annotations are primarily stored on your own device.

1. Our approach in short

Your PDFs, annotations, notes, audio and images are stored on your device.
We do not operate a central server that collects your documents.
Data leaves your device only when you enable it — for example, AI features (bring your own key) or WebDAV/NextCloud sync you configure.
Secrets such as API keys and sync passwords are stored in your operating system's secure keychain, not in plain text.

2. Information we process

2.1 Content you create

Documents, ink, text notes, audio notes, pinned images and related annotations. This Content is stored locally on your device. We do not have access to it.

2.2 Credentials you enter

If you use AI features or WebDAV/NextCloud sync, you provide an API key or account credentials. These are stored in your device's secure keychain (Windows Credential Manager / Android Keystore) and are used only to connect to the service you chose.

2.3 Website information

If you contact us (for example, to request early access), we receive the email address and message you send. Depending on hosting, standard technical logs (such as IP address and browser type) may be processed by our website host to deliver and secure the site.

2.4 App diagnostics

Any diagnostic or crash information is used only to fix problems and improve the App. (Global Fin X: state here whether the shipped build sends any analytics or crash reports, and to whom. If none are sent, say so explicitly.)

3. AI features (bring your own key)

AI features are optional and off until you configure them with your own API key. When you invoke an AI action, the relevant Content — such as the text or image of the selection you chose — is sent from your device directly to the AI Provider you selected (for example OpenAI, Google Gemini, Anthropic Claude or DeepSeek), using your key. That provider processes the data under its own privacy policy and terms. We do not receive or store that Content. Please review your chosen provider's privacy policy before use, and do not submit Content you are not permitted to share with a third party.

4. Sync & storage you control

If you enable NextCloud / WebDAV sync, your annotations are transferred to the server you configure, under your account. That storage is controlled by you or your provider, not by Global Fin X.

5. How we use information

To provide and maintain the Service.
To respond to your enquiries and support requests.
To diagnose problems and improve the App.
To comply with legal obligations.

We do not sell your personal information.

6. Sharing

We share information only: (a) with third-party services you choose to connect (AI Providers, your sync server); (b) with service providers who help us operate the website or distribute the App (such as an app store or web host), under appropriate obligations; and (c) where required by law or to protect our rights.

7. Data retention

Content stays on your device until you delete it or uninstall the App. Credentials remain in your keychain until you remove them in the App. Emails you send us are retained only as long as needed to handle your request and to meet legal obligations.

8. Security

We use reasonable technical measures to protect information, including storing secrets in the OS keychain rather than in plain text. No method of storage or transmission is completely secure; you are responsible for securing your device and for keeping backups of important Content.

9. Children's privacy

The Service is intended for educators and adult users. Where the App is used by or for students, it should be used under the supervision and responsibility of a teacher, guardian or institution. We do not knowingly collect personal information from children.

10. Your rights

Depending on where you live, you may have rights to access, correct, delete, or restrict the processing of your personal information, or to object or withdraw consent. Because most Content is stored only on your device, you can exercise many of these directly in the App. For information we hold (such as support emails), contact us using the details below.

11. International use

Where you use third-party services (AI Providers, sync storage), your data may be processed in the countries where those providers operate. Their handling of your data is governed by their own policies.

12. Changes to this policy

We may update this Privacy Policy from time to time. Changes take effect when posted here, with an updated "Last updated" date.

13. Contact

For privacy questions or requests, contact Global Fin X at Info@globalfinx.in.