Privacy Policy
PREAMBLE
PyxiScience attaches great importance to the protection of your personal data and to respecting your privacy.
In this regard, the purpose of this privacy policy is to inform you in a clear, simple and comprehensive manner about the processing applied to the personal data you provide when creating an account on the PyxiScience application (hereinafter the « Platform ») and/or when logging in to the Platform with your university or professional account, or in connection with your use of the services offered thereon.
This privacy policy applies to all Users as defined in the Terms and Conditions of Use (hereinafter the « T&Cs »), and in addition to these T&Cs.
The term « Users » refers to any person, Learner (Pupil, Student, etc.) or Teacher who uses the Platform.
Capitalised terms are defined by the GDPR and/or in the T&Cs.
PyxiScience develops and markets adaptive learning services for mathematics and science, the purpose of which is to facilitate the learning of mathematics and science by making Content accessible to Users from the Platform.
The features of the Services are described in Article 2 of PyxiScience's T&Cs.
Depending on the processing concerned, PyxiScience may act as a data controller or as a data processor within the meaning of Regulation (EU) No. 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of personal data (hereinafter the « GDPR »), and Law No. 78-17 of 6 January 1978 on data processing, data files and individual liberties (hereinafter jointly referred to as the « Regulations »).
In this respect, PyxiScience implements the main principles of the Regulations on personal data as follows :
- Lawfulness: your personal data is collected for specified, explicit and legitimate purposes, and on the basis of an appropriate legal basis
- Transparency and fairness: you are informed of the processing that PyxiScience carries out and of its terms by means of this privacy policy or any other document provided for this purpose; no processing of your personal data is carried out without your knowledge
- Minimisation: PyxiScience only collects the personal data strictly necessary for the purpose pursued by its processing
- Limitation of the retention period: PyxiScience retains your personal data for the period necessary to carry out the processing for which it was collected or, where applicable, for the period set by law
- Data security: PyxiScience has implemented technical and organisational measures appropriate to the personal data collected, with a view to ensuring the integrity and confidentiality of this data and protecting it against any malicious intrusion, loss, alteration or disclosure to unauthorised third parties
- Commitment of its service providers and partners: PyxiScience carefully selects its subcontractors, service providers and partners and requires them to ensure a level of protection of your personal data equivalent to its own, to use your personal data only to the extent necessary to provide the services entrusted to them by PyxiScience, and to comply with the Regulations
PyxiScience may make changes to this privacy policy in line with changes to the applicable Regulations or developments in its business and the services it offers you.
PyxiScience will of course inform you of any changes to this policy and also invites you to consult this page regularly.
Capitalised terms not defined in this document have the meaning given to them in the Terms and Conditions of Use.
DATA CONTROLLER
Depending on the purposes and origin of the personal data processed, PyxiScience may act :
- As a data controller, for the data it collects directly from Users (e.g. management of the site and the application, creation of accounts at the initiative of users, direct relationship with users, statistical analysis, canvassing operations)
- As a data processor, for the data transmitted to it by a Partner who has taken out a collective subscription or created accounts for its Students and/or Teachers. In this case, the Partner concerned acts as the data controller, and PyxiScience only acts on the instructions of this third party within the framework of the applicable contracts
PyxiScience, trading under the name « PyxiScience », is identified in our legal notice, accessible here.
PROCESSING OF PERSONAL DATA BY PYXISCIENCE
Nature of the information collected by PyxiScience
Pursuant to the GDPR, personal data (hereinafter « Personal data ») means any information that allows you to be identified either directly (such as your name) or indirectly as a natural person (for example, using a unique customer number or order tracking number).
The Personal data processed by PyxiScience in the course of its business and the Services offered by the Platform is as follows :
- Users of the Platform: Surname, first name, email address (university + personal), IP address, exchanges with customer service, browsing data from cookies and tags placed on the Platform, data transmitted in connection with a request to exercise GDPR rights.
- Learners: All the data listed under "Users of the Platform" as well as : School, student number (if provided by the Partner), course of study, class, learner's handwritten answers.
- Teachers: All the data listed under "Users of the Platform" as well as : School attended, staff number (if provided by the Partner), classes taught, homework, tutorials, exams, communications with pupils (unilateral), grades awarded, lessons written, exercises created.
If, in the course of using the Platform, you communicate Personal data concerning another person, it is your responsibility to ensure that the person concerned has authorised you to share their Personal data with PyxiScience and that they have been duly informed of this privacy policy.
Where Personal Data is transmitted or collected through a Partner who has taken out a collective subscription, this organisation acts as the data controller and PyxiScience as the data processor within the meaning of the GDPR.
Collection of personal data of minors and protected adults
As part of the Services offered by the Platform, PyxiScience may be required to collect and process Personal data of minors, in particular within the framework of contracts concluded with Partners – notably secondary education institutions.
PyxiScience recommends that holders of parental authority and guardians monitor and participate in the online activities of persons in their care or under their responsibility (minors and protected adults).
In accordance with the applicable Regulations, consent to the processing of Personal data is given :
- For a minor under the age of fifteen : jointly by the minor concerned and by the holder(s) of parental authority over them
- For a minor aged at least fifteen : by the minor alone
- For a protected adult : by their legal guardian
Where the Personal data of minors or protected adults is communicated to PyxiScience by a Partner acting on their behalf, it is the sole responsibility of that Partner, as data controller, to ensure, prior to the transmission of said Data, compliance with the applicable Regulations on the protection of personal data, and in particular to obtain any consent required from the minor and, where applicable, from the holder(s) of parental authority, or from the legal representative of the protected adult. PyxiScience cannot be held liable in this respect and acts as a data processor or recipient of the Data on the instructions of the organisation concerned, in accordance with the regulations in force.
PyxiScience endeavours to provide clear, accessible and understandable information to minors, protected adults and their legal representatives about the processing carried out and the rights available to them. Maximum and appropriate technical and organisational security measures are implemented to ensure enhanced protection of the Personal data of the persons concerned.
The rights of access, rectification, erasure and objection may be exercised at any time by the minor, the protected adult or their legal representative, in accordance with the regulations in force.
Purposes of the collection of information by PyxiScience and legal bases
PyxiScience is only authorised to use your Personal data if it has a valid legal basis among the following :
- The performance of a contract (e.g. to offer and send a content offer or to open and manage an account), or
- Compliance with a legal obligation (e.g. retention of invoices), or
- Where it is in the legitimate interest of PyxiScience, or
- Where you have given your consent to the collection of Personal data
When you voluntarily provide Personal data concerning yourself, you undertake to communicate accurate information that does not harm the interests or rights of third parties.
PyxiScience may process your Personal data for the following Purposes and on the basis of the following Legal Bases :
| Purpose of Processing | Legal Basis of Processing |
|---|---|
| Creation and management of User accounts on the Platform (Learners and Teachers) | Performance of the Contract |
| Management of Subscription contracts (with Learners and/or the Partner financing the Subscription on behalf of its Learners) | Performance of the Contract |
| Administrative and educational management of Learners (civil status, educational monitoring with the Teacher) | Performance of the Contract |
| Analysis of the Learner's level (progression on the Platform, monitoring of Courses, results of completed Exercises, grading of handwritten answers) | Performance of the Contract |
| Management of Content consulted and/or published on the Platform (Courses, Exercises, past papers, videoconferences) | Performance of the Contract |
| Management of the use of the Platform and browsing | Performance of the Contract |
| Management of the communication channels made available on the Platform (messaging, chatbot, forum) | Performance of the Contract |
| Assessment and grading of Learners (correction of Exercises completed by Learners and of Learners' handwritten answers using third-party artificial intelligence software) | Performance of the Contract |
| Monitoring of exchanges with customer service | Performance of the Contract |
| Management of payment and billing operations (with Learners and/or the Partner financing the Subscription on behalf of its Learners) | Legal obligation |
| Management of requests to exercise individual rights and, where applicable, management of data breaches | Legal obligation |
| Sending personalised communications by email, SMS, on social media or any other medium | Consent |
| Improving the services offered and securing the use of the Platform | Legitimate interest of PyxiScience |
| Producing statistics on the progress level of Learners | Legitimate interest of PyxiScience |
| Producing anonymous statistics on Platform traffic | Legitimate interest of PyxiScience |
Where the processing of Personal data requires your consent, PyxiScience ensures that it obtains this consent beforehand.
PyxiScience undertakes not to process your data for purposes other than those initially agreed without first informing you and obtaining your consent again for the new processing, unless the processing is required or authorised by law.
Rights of individuals over the Personal Data collected
You have the right (in the circumstances, under the conditions, and subject to the exceptions provided for by the applicable Regulations) to :
- Request access to the Personal data that PyxiScience processes concerning you : this right allows you to know whether PyxiScience holds your Personal data and, where applicable, to obtain information and a copy of said Personal data
- Request the rectification of your Personal data : this right allows you to have your Personal data corrected if it is inaccurate or incomplete
- Object to the processing of your Personal data : this right allows you to request that PyxiScience stop processing your Personal data
- Request the erasure of your Personal data : this right allows you to request that PyxiScience erase your Personal data, including where said Personal data is no longer necessary to achieve the purposes pursued
- Request the restriction of the processing of your Personal data : this right allows you to request that PyxiScience only process your Personal data in limited circumstances, in particular with your consent
- Request the portability of your Personal data : this right allows you to receive a copy (in a structured, commonly used and machine-readable format) of the Personal data that you have transmitted to PyxiScience, or to ask PyxiScience to transmit this Personal data to another data controller
Insofar as the processing of your Personal data is based on your consent, you have the right to withdraw said consent at any time by contacting the data protection officer at the address indicated below.
Please note that the withdrawal of your consent does not affect the lawfulness of the processing of your Personal data based on this consent and carried out by PyxiScience prior to this withdrawal. Furthermore, certain processing of your Personal data may be maintained if another legal basis provided for by the Regulations (such as the performance of the contract, compliance with a legal obligation or legitimate interest) justifies it.
Where the processing is carried out by PyxiScience as a data processor on behalf of a Partner, any request to exercise rights (access, rectification, objection, erasure, etc.) must be sent directly to the Partner concerned, the sole data controller in this context. PyxiScience will facilitate the exercise of these rights by forwarding without delay any request it receives directly to the data controllers concerned.
Where PyxiScience acts as a data controller, your rights may be exercised as follows by electronic means, at the following address : dpo@pyxiscience.com.
The request must state your surname, first name, postal address and email.
In order to guarantee the security and confidentiality of your data, proof of identity may be requested if your identity cannot be sufficiently established. This document will only be retained for as long as necessary to verify your identity, then deleted in accordance with the applicable Regulations.
PyxiScience will respond to you within one month of the exercise of the right. In certain cases, related to the complexity of the request or the number of requests, this period may be extended by 2 months. In this case, you will be informed of this extension and of the reasons for the delay within one month of receipt of your request.
These rights may, in certain cases provided for by the applicable Regulations, be subject to exceptions.
You also have the right to lodge a complaint with a supervisory authority for the protection of personal data. The French authority is the CNIL (Commission Nationale de l'Informatique et des Libertés).
You can contact the CNIL :
- Online: via the complaint form available on the official website : www.cnil.fr
- By post: CNIL - Service des Plaintes, 3 Place de Fontenoy, TSA 80715, 75334 PARIS CEDEX 07
- By telephone: 01 53 73 22 22
For more information on the procedures or to lodge a complaint, you can consult the CNIL website.
Recipients of your personal data
Your Personal Data is intended for the authorised departments of PyxiScience, for the purpose of managing the purposes described above. It is processed using secure IT tools.
PyxiScience may also transmit your Personal data to partners acting as data processors, who process this Personal data on behalf of and according to the instructions of PyxiScience. In this context, PyxiScience ensures that its data processors provide sufficient guarantees as to the implementation of appropriate technical and organisational measures to ensure the security and confidentiality of your Personal data.
PyxiScience uses the following Data Processors for the following operations :
- Automated correction of handwritten answers using AI software : Anthropic, Google, Mistral, Open AI
- Data hosting : Amazon Web Services
- Customer relationship management : Monday, Crisp
- User support (monitoring of product feedback/suggestions) : Productboard
- Monitoring of actions performed by Users on the Platform : Amplitude
Finally, PyxiScience may be required to transmit your Personal data at the request of a judicial authority or any administrative authority empowered by law, requesting the communication of this information in accordance with the legislative and regulatory provisions in force.
Transfer of Personal Data outside the EU
For certain operations, certain data processors and/or PyxiScience may be required to transfer your Personal data to countries located outside the European Union. In this case, PyxiScience ensures the security of these data transfers by its data processors, in particular on the basis of contractual protections.
In this respect, any transfer of your data outside the EU is carried out with appropriate guarantees that comply with the applicable Regulations in this area, either because the recipient countries benefit from an adequacy decision, or because these transfers are governed by the implementation of Standard Contractual Clauses approved by the European Commission.
Transfers outside the European Union may be carried out by PyxiScience's data processors, in particular in the context of the following activities :
| Processing operation | Destination country | Framework for the transfer |
|---|---|---|
| Automated correction of handwritten answers using AI software | United States | Standard contractual clauses |
| Analysis of user behaviour on the platform by the Amplitude software | United States | Standard contractual clauses |
Retention of Personal Data
In accordance with the Regulations, the Personal data that PyxiScience collects is used to fulfil the purposes for which it was collected, for the period strictly necessary to achieve the objectives of the processing. This retention period depends on the nature of the processing and its purposes.
At the end of the retention periods, PyxiScience deletes your personal data, with the exception of data that PyxiScience is legally required to retain or that is necessary to safeguard its rights, which is kept in an archive database for the periods necessary to comply with PyxiScience's legal obligations and to safeguard its rights, and then deleted at the end of these periods.
PyxiScience applies specific policies and procedures for the management of your Personal data, which is deleted at the end of the period defined according to the following retention criteria :
- PyxiScience retains your data for as long as it maintains an ongoing business relationship with you
- PyxiScience retains your data for as long as necessary to provide you with its services
- PyxiScience retains your data for as long as necessary to comply with its legal and contractual obligations
Certain Personal Data may be retained for a commercially reasonable period for backup, archiving or audit purposes. The mandatory retention period is notably ten (10) years for invoices.
The retention periods used are as follows :
| Purpose | Retention period in active database | Retention period in intermediate database |
|---|---|---|
| Creation and management of User accounts on the Platform (Learners and Teachers) | Data is retained until the User account is deleted. | 2 years from the account's inactivity or its deletion, or its suspension in the event that it has been suspended or blocked. |
| Management of Subscription contracts (with Learners and/or Partners financing the Subscription on behalf of Learners) | Duration of the contractual relationship | 5 years from the end of the contractual relationship |
| Administrative and educational management of Learners (civil status, educational monitoring with the Teacher) | Duration of the contractual relationship | Data relating to the educational monitoring of Students is retained for 5 years. |
| Analysis of the Learner's level (progression on the Platform, monitoring of Courses, results of completed Exercises, grading of handwritten answers). | Duration of the contractual relationship | Data relating to the educational monitoring of Students is retained for 5 years. |
| Management of Content consulted and/or published on the Platform (Courses, Exercises, Past papers, videoconferences) | Duration of the contractual relationship | Data relating to Content consulted and/or published on the Platform is retained for 5 years. |
| Management of the communication channels made available on the Platform (messaging, chatbot, forum) | Duration of the contractual relationship | Data relating to the management of the communication channels made available on the Platform is retained for 5 years. |
| Assessment and grading of Learners (correction of Exercises completed by Students and of Students' handwritten answers) | Duration of the contractual relationship | Data relating to the assessment and grading of Students is retained for 5 years. |
| Monitoring of exchanges with customer service | Duration of the contractual relationship | Data relating to the monitoring of exchanges with customer service is retained for 5 years. |
| Management of payment and billing operations (with Learners and/or the Partner financing the Subscription on behalf of its Learners) | Duration of the contractual relationship | 10 years from the issue of the invoice. |
| Management of requests to exercise individual rights and, where applicable, management of data breaches | Data is retained for the time necessary to process the request of the person concerned | Data is retained for litigation purposes for 5 years from PyxiScience's response to the request. |
| Sending personalised communications by email, SMS, on social media or any other medium | Duration of the contractual relationship with Users of the Platform / or 3 years after the last contact from the prospect. | N/A |
| Analysing user behaviour on the platform (tracking cookies) | 12 months from the placement of the cookie on the User's device. | N/A |
Security of the Personal Data collected
PyxiScience applies organisational, physical and technical security measures to all Personal Data that it processes. PyxiScience has put in place appropriate protocols and control measures as well as policies, procedures and guidelines to ensure the proper application of these provisions, taking into account the risks associated with the different categories of Personal data and their processing. When developing and designing, or when selecting and using the various tools that enable the processing of Personal data, PyxiScience ensures that they provide an optimal level of protection for the Personal data processed. This is why PyxiScience implements all appropriate measures to prevent, as far as possible, any alteration or loss of your Personal data or any unauthorised access to it. PyxiScience thus implements measures that respect the principles of data protection by design and by default for the Personal data processed. When PyxiScience uses a trusted service provider, it only communicates Personal data to it after having obtained a commitment and guarantees from the latter regarding its ability to meet these security and confidentiality requirements, in compliance with the applicable Regulations.
Updating the Privacy Policy
PyxiScience, as Data Controller, may modify the Privacy Policy at any time. In the event of a substantial change concerning the use of your Personal data compared to what was stipulated at the time of collection, PyxiScience will inform you in a visible manner on the Platform. Any new version of the Privacy Policy will be accessible in order to guarantee that you are informed and, where applicable, to obtain your consent where required by the Regulations.
COOKIES
This article provides certain information relating to the use of cookies by the Platform. It allows you to be informed about the origin and use of the browsing information processed during your browsing on the Platform and about your rights. In accordance with the applicable Regulations and Directive 2022/58/EC of 12 July 2020, you must be informed and give your consent prior to the insertion of cookies that are not strictly necessary for the operation of the Platform. You therefore have the option of refusing the placement of these cookies during your visit. However, it is specified that, in accordance with the applicable Regulations, certain cookies are exempt from obtaining this consent, such as cookies necessary for the operation of the Platform.
What is a cookie?
A cookie is a small text file that may be stored on the User's device (computer, tablet, smartphone, etc.) when consulting a website, reading an email, or installing or using software or an application. The PyxiScience Platform uses two types of cookies :
- Functional cookies: these cookies are necessary for the proper functioning of the site and for the provision of certain services. In particular, they allow authentication sessions to be managed and browsing to be secured.
- auth_token: used to store the authentication token of the logged-in user. It allows the session to be kept active and secure areas to be accessed. Retention period: until the user logs out or the token expires (maximum 14 days).
- crisp-client*: cookies placed by the Crisp messaging service, allowing the conversation between the user and PyxiScience support to be maintained from one page to another. Retention period: 6 months.
- Analytical and audience measurement cookies: these cookies are used to measure site traffic and improve the user experience. The data collected is aggregated and anonymised.
- Amplitude: a usage analysis tool used to measure users' interaction with the Platform's features. The data is pseudonymised. Cookie retention period: 13 months.
Why PyxiScience uses cookies
The cookies that may be placed on your device when you visit pages of the Platform are issued by PyxiScience and/or third parties. Only the issuer of a cookie is able to read or modify the information it contains. Through its Platform, PyxiScience uses the following cookies :
Technical cookies relating to the Platform's features (strictly necessary): These cookies are essential for the proper functioning of the PyxiScience Platform and are exempt from consent within the meaning of the regulations. These cookies allow you to browse the Platform, use its features and save your preferences (such as the language used and access to your account). Unless a shorter period is indicated above, cookies placed on your device and exempt from your consent are valid for a maximum period of 13 months, this period not being automatically extended upon new visits to the Platform.
Audience measurement cookies on the Platform through the Matomo tool: These cookies allow PyxiScience to produce aggregated and anonymous statistics relating to the traffic to our services (e.g. number of visits, pages viewed, time spent on the Services, connection region, type of device used, etc.). These cookies help to improve the performance, features and Services offered to you. This data does not contain and is not associated with any personally identifiable information.
Behavioural tracking cookies through the Amplitude tool: Amplitude is a product analysis tool used to track user events (clicks, navigation, interactions) for functional and product improvement purposes. Amplitude places a cookie that identifies a user pseudonymously and associates them with browsing events. Cookies placed on your device that require your consent are valid for a maximum period of 6 months. At the end of this period, your consent will need to be obtained again.
Consent management
You can manage your consent to the cookies we place or configure them by purpose by clicking here. You can disable cookies independently by adjusting your browser settings. However, by disabling certain cookies, you may not be able to use all the features of the Platform. For the management of cookies and your choices, the configuration of each browser is different and is described in the « Help » menu of your browser.
- For Firefox : http://support.mozilla.org/fr/kb/Activer et désactiver les cookies
- For Internet Explorer : http://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies
- For Safari : http://docs.info.apple.com/article.html?path=Safari/3.0/fr/9277.html
- For Chrome : http://support.google.com/chrome/bin/answer.py?hl=fr&hlrm=en&answer=95647
Date of last update of the Privacy Policy: 01/09/2025