Skip to main content
Privacy and Data Protection

This article explains how Smowl protects the privacy and security of user data.

J
Written by Jorge Vea
Updated over a month ago

At Smowltech, data privacy is a top priority. We know your personal information is important and we want you to have complete confidence in how we protect it.

In this article, we explain:

  • What data we collect and why.

  • How we guarantee your privacy and security.

  • What your rights are as a user.

1. Our commitment to your privacy

  • Your data is yours: we never sell or share your information with third parties.

  • We only collect what is necessary: we use the least amount of data possible to provide you with a safe and reliable service.

  • Data is deleted according to the deadlines established in the agreements with your institution.

  • We comply with all privacy regulations such as the GDPR (EU General Data Protection Regulation) and FERPA (Family Educational Rights and Privacy Act).

It is important to know that your identity is always protected. Instead of names or emails, we use a user code generated by your institution.

2. What data Smowl collects

The data that will be collected will depend on the type of service required by the client. Smowltech has defined a modular service that allows the minimum data to be collected to meet the client's needs, so Smowltech always works in proportion to the client's requirements and the data to be collected. Therefore, we will never ask users for additional information to that previously agreed upon by contract with the client.

In order to obtain the minimum amount of data possible and always maintain the privacy and anonymity of the user, we link the data collected from users to a user code they have on the platform, instead of using names, surnames, emails, etc.

3. How long is the data kept

The data storage period is determined by your institution and defined in the service contract. Once the deadline has passed, the data is securely deleted.

4. How Smowl complies with the GDPR

The GDPR is the European regulation that protects your privacy. As a Spanish company, at Smowltech:

  • We only collect the data strictly necessary.

  • We do not transfer data outside the European Union.

  • We use secure AWS (Amazon) servers in the EU and data is storage is encrypted via AES-256 encryption using the services AWS provides.

  • We guarantee that you can access, rectify or delete your data whenever you need it.

If you have any questions or want to exercise your rights, you can contact our data protection officer at dpo@smowltech.com

5. Data protection for students

FERPA (United States)

If you study at an institution in the US, your academic information is protected by FERPA, a law that guarantees the privacy of your educational records.

CCPA (California)

If you study in California, we also comply with the CCPA, which gives you the right to know what data is collected and how it is used.

In all regulations, the principle is the same: your privacy comes first and only your institution can access the data collected.

6. Your rights as a user

As a Smowl user, you have the right to:

  • Access your data and know what information has been collected.

  • Request corrections if any data is incorrect.

  • Export or delete your personal information, according to applicable regulations.

  • Withdraw your consent for data processing at any time.

To exercise these rights, contact your institution, which will manage the request with our privacy team.

7. Information on minors

If you are under 16 years of age, the use of Smowl requires the consent of your parents or guardians.

  • We do not collect information from minors without authorization.

  • If data from a minor is accidentally stored without permission, it will be deleted immediately.

If you are a parent and have questions about your child's privacy, you can contact us at dpo@smowltech.com

8. Our privacy principles

  • Collect only the necessary personal information, which is not excessive or kept longer than necessary to provide the service.

  • Ensure that information is processed fairly and lawfully.

  • Provide transparency with the information collected only for specific and lawful purposes.

  • Constantly work to make products and services more secure.

  • Provide communication channels to contact us easily.

  • Anonymize data before making secondary use in statistics.

  • Ensure that information is kept secure and inaccessible to those who do not have the right to access it

  • We will never store, export or sell personal information for any other purpose.

9. Conclusion and more information

At Smowltech we are committed to:

  • Guarantee the privacy and security of all student data

  • Comply with all international data protection regulations.

  • Offer full transparency on how data is collected and stored.

If you have questions about privacy in Smowltech, contact your institution or review our privacy policy.

Did this answer your question?