At Collinear, we take the privacy and security of your data extremely seriously. This guide outlines our comprehensive approach to protecting your information and explains the measures we’ve implemented to ensure the highest standards of data security.

Our Data Privacy Commitment

Collinear is built with privacy as a foundational principle:

Your Data Stays Yours

• No Training on Your Data: Unlike many AI systems, Collinear never uses your data to train our models. Your information remains exclusively yours.
• School Ownership: All data uploaded to Collinear belongs to your school or institution and remains under your control.
• Transparent Data Policies: We clearly communicate what data we collect and how it’s used in our privacy policy.

Secure Data Storage

We implement industry-leading security practices to protect your information:

Storage Infrastructure

• Australian Servers: All data is stored on secure servers located in Australia, subject to strict data protection laws.
• Encryption at Rest: All stored data is encrypted using AES-256 encryption, the same standard used by financial institutions.
• Regular Security Audits: Our systems undergo regular security assessments by independent third-party experts.

Data Transmission

• End-to-End Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.3 protocols.
• Secure API Access: All API communications are authenticated and encrypted to prevent unauthorized access.
• Certificate Validation: We implement strict certificate validation to prevent man-in-the-middle attacks.

Access Controls

We maintain strict controls over who can access your data:

User Authentication

• Multi-Factor Authentication: Optional MFA provides an additional layer of security for account access.
• Role-Based Access: Different user roles (admin, teacher, student) have appropriate access limitations.
• Session Management: Automatic session timeouts and the ability to view and terminate active sessions.

Administrative Controls

• Audit Logging: Comprehensive logs of all system access and actions taken.
• No Third-Party Access: We do not provide unsecured access to third parties without explicit permission.
• Access Review: Regular reviews of access permissions to ensure they remain appropriate.

Compliance and Certifications

Collinear is designed to meet educational data privacy requirements:

Regulatory Compliance

• GDPR Principles: Although based in Australia, we adhere to GDPR principles for data protection.
• Educational Privacy Standards: Our platform is designed to comply with educational data privacy regulations.
• Regular Compliance Reviews: We continuously monitor changes in privacy regulations to ensure ongoing compliance.

Data Retention and Deletion

We provide clear policies on how long we keep your data:

Retention Policies

• Customizable Retention: Schools can set their own data retention periods based on their policies.
• Automatic Archiving: Options for automatic archiving of older data while maintaining access.
• End-of-Year Processes: Tools to help manage data at the end of academic years.

Data Deletion

• Secure Deletion: When data is deleted, it is securely wiped using industry-standard methods.
• Account Closure: Clear processes for data handling when accounts are closed.
• Data Export: Options to export your data before deletion for your records.

Security Incident Response

In the unlikely event of a security incident:

Our Response Process

1. Immediate Containment: Rapid response to contain any potential security breach.
2. Thorough Investigation: Comprehensive investigation to understand the scope and impact.
3. Transparent Communication: Timely notification to affected users with clear information.
4. Remediation: Swift action to address vulnerabilities and prevent future incidents.

Security Best Practices for Users

We recommend these practices to enhance your security:

Account Security

• Use strong, unique passwords for your Collinear account
• Enable multi-factor authentication when available
• Never share your login credentials with others
• Log out when using shared computers

Data Management

• Regularly review what data you upload to the platform
• Follow your institution’s data handling policies
• Report any suspicious activity immediately

For more information about our security practices or to report security concerns, please contact our security team at security@collinear.app.