Privacy Policy

How we handle and protect your data on EvaCode

Last updated: June 2026

1. Introduction

EvaCode ("we", "our", or "platform") is committed to protecting the privacy of its users ("you", "user", "teacher", "student"). This Privacy Policy describes how we collect, use, store, and protect the personal information you provide when using the EvaCode platform, available at evacode.com.br.

By creating an account and using our services, you agree to the practices described in this document. If you do not agree with this policy, we recommend that you do not use the platform.

2. Data We Collect

We may collect the following categories of personal data:

  • Identification data: full name, username, institutional ID, and profile picture (when provided).
  • Contact data: email address (academic and/or personal).
  • Academic data: course, campus, academic status, and school year/term.
  • Authentication data: password (stored encrypted), OAuth authentication tokens (Google).
  • Usage data: access logs, activities performed on the platform, assessment answers, submitted code, grades, and generated feedback.
  • Google Classroom data: when you choose to authenticate via Google or sync Google Classroom courses, we may access your name, email, course list, and student list (according to the permissions you grant).

3. How We Use Your Data

We use the collected data for the following purposes:

  • Create and manage your user account on the platform;
  • Authenticate your login (via password or Google OAuth);
  • Allow teachers to create, manage, and grade assessments, assignments, and challenges;
  • Allow students to answer assessments and receive AI-powered feedback;
  • Generate academic performance reports for teachers and institutions;
  • Maintain audit logs for security and compliance;
  • Send notifications about platform activities;
  • Improve the platform based on aggregated and anonymous usage analysis;
  • Comply with legal and regulatory obligations.

4. Data Sharing

EvaCode does not sell users' personal data. We may share information in the following situations:

  • With service providers: we use third-party services such as Google Cloud (Gemini AI) for AI-based grading. Your data (submitted code) may be processed by these providers to generate grades and feedback.
  • With educational institutions: teachers and coordinators affiliated with your institution may have access to your academic data and performance.
  • By legal obligation: we may disclose data when required by law, court order, or government request.
  • With your consent: in other situations, upon explicit authorization.

5. Storage and Security

Your data is stored on secure servers with encryption in transit (HTTPS/TLS) and at rest. We adopt technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction, including:

  • Password encryption using secure hashing algorithms;
  • Access control based on profiles (student, teacher, administrator);
  • Audit logging of all relevant actions on the platform;
  • Regular security updates.

Despite these measures, no system is completely secure. We cannot guarantee absolute security against all threats.

6. Data Retention

We retain your personal data while your account is active or for as long as necessary to fulfill the purposes described in this policy. After account deletion, data will be removed or anonymized within 90 days, unless there is a legal obligation to retain it (e.g., audit logs may be kept for legally defined periods).

7. Your Rights

Under applicable privacy laws, you have the following rights regarding your personal data:

  • Confirmation and access: know whether we process your data and access it.
  • Correction: request correction of incomplete, inaccurate, or outdated data.
  • Anonymization, blocking, or deletion: request anonymization, blocking, or deletion of unnecessary or unlawfully processed data.
  • Portability: request data portability to another provider.
  • Deletion: request deletion of data processed with your consent.
  • Consent withdrawal: withdraw your consent for data processing at any time.

To exercise your rights, contact us at the email provided in the contact section below. We will respond within 15 business days.

8. Cookies and Tracking Technologies

We use essential cookies for the platform's operation, such as session cookies to keep you logged in. We do not use advertising tracking cookies or third-party cookies for behavioral data collection.

By using the platform, you consent to the use of strictly necessary cookies for the operation of the services.

9. Google Authentication and Google Classroom

When you choose to log in using your Google account or connect Google Classroom:

  • We request only the minimum necessary permissions: profile, email, and (when applicable) access to Google Classroom courses and rosters.
  • We use the Google Classroom API exclusively to list courses and import student data, upon explicit action by the teacher.
  • We do not store Google access tokens longer than necessary for the requested functionality.
  • You can revoke EvaCode's access to your Google account at any time through your Google Account settings.

The use of information obtained from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

10. Children's Data

EvaCode is intended for educational institutions and their students. If you are a minor, please consult with your parent or guardian before using the platform. We do not knowingly collect personal data from children without appropriate consent. If we become aware that a child has provided us with personal data without parental consent, we will delete that information promptly.

11. International Data Transfer

Some of the service providers we use (such as Google Cloud and Groq) may be located in other countries. By using the platform, you consent to the transfer of your data to these providers, always in compliance with applicable data protection laws and with appropriate contractual safeguards.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify users of significant changes through a notice on the platform or by email. We recommend reviewing this policy regularly.

13. Contact

If you have any questions, requests, or complaints regarding this Privacy Policy or the processing of your personal data, please contact us:

Email: contato@evacode.com.br
Platform: evacode.com.br