Privacy and your choices

Notice version: 3 October 2026.

Educational Assessments Corporation (EAC) operates Visual Data. This notice explains the website and app's use of personal information. Contact info@eacvisualdata.com for privacy questions or requests.

Marketing and documentation pages

Simply reading these pages does not enable optional report analytics, advertising cookies, advertising pixels or cross-site tracking. Fonts, symbols, icons, images and videos are served from this website. Our hosting providers still receive connection information such as your IP address when delivering pages and protecting the service.

Using the institutional app

Your institution supplies account, course, assessment and permission data so that we can authenticate you and provide the reports your institution authorizes. It determines the purposes and legal basis for educational records under its agreement with EAC. Contact your institution about access, correction or deletion of those records; we can help direct a request. The optional analytics choice below does not authorize educational-record processing or override your institution's instructions.

Optional report analytics

With your consent, EAC collects report types, feature choices, load times, retries and session duration to improve Visual Data. Events use coded user, institution, report and content-selection identifiers. They are pseudonymous, not anonymous. Events do not contain names, email addresses, report contents, grades, free-text labels or chat messages. They are stored through EAC's own API in Google Cloud Firestore, with a 30-day expiry and asynchronous deletion.

Analytics is off until you explicitly allow it. Refusing does not affect access to reports. In the app, open Settings → Privacy choices to allow, reject or withdraw. We ask again after 180 days or a change to the analytics notice. We do not collect this optional analytics in student or support impersonation sessions, public demos, marketing pages or documentation.

Your choice, notice version and server timestamp are saved to your account. A receipt of each choice expires after one year and is then subject to asynchronous deletion. Withdrawal stops future collection; it does not change the lawfulness of processing before withdrawal. Contact us to request deletion of previously collected personal information. If an account update fails, analytics still stops in this browser; retry to save the choice for your other devices. Global Privacy Control and Do Not Track signals disable optional analytics in the browser sending the signal, even with an earlier grant. Visual Data does not use advertising trackers or sell analytics events.

Cookies and browser storage

Privacy rules also cover local storage and IndexedDB, not only cookies. We use browser storage for authentication, security, your requested report workspace, local report data and interface settings. These functions are separate from optional analytics and cannot be switched off with its toggle.

  • Firebase keeps authentication state in this browser until sign-out or removal of site data. Tokens are sent to Google authentication services to establish or refresh a session.
  • Local report data is held in IndexedDB. A refresh button appears when a successful environment data update is newer than the cached report. Refreshing requests the data again and updates the local copy. Sign out and clear site data on shared devices.
  • Interface preferences and the browser's analytics refusal are stored locally. You can remove them through your browser's site-data controls. Removing a refusal does not itself grant analytics consent.
  • After analytics consent, a temporary retry queue may be stored for this tab. It is cleared when consent is withdrawn or the account changes; pre-consent events are not queued.
  • App chat history is scoped to the account and stored for this browser tab's session. Use the chat's delete controls to remove conversations.

Contact requests and AI help

The contact form collects your name, email and message so we can reply, through Microsoft 365. We use temporary hashed-IP submission counters to limit abuse. Do not include student records or sensitive information in a website inquiry.

When you send an AI message, your question and relevant app context are processed through our server by OpenAI and/or TypeSafe (Jev) to provide the response you requested. The app replaces supported personal identifiers with aliases before provider requests; this cannot guarantee removal of every personal detail in text you enter. Do not enter sensitive information or student identifiers. You can use reports without using AI chat.

Public help chat creates an anonymous Firebase authentication session when opened to enforce allowances. Its conversation is kept in the current page session. We maintain service allowance and abuse-prevention counters and aggregate AI cost and reliability totals. These totals exclude questions, answers and conversation histories. Full transcript logging to Firestore is disabled. AI processing and service security are separate from optional report analytics.

Providers, retention and international processing

Google/Firebase hosts the service, authentication and storage; Microsoft 365 delivers contact email; institutional data services and the AI providers described above process information needed for the functions you request. These services can process information outside your country, including in the United States. Your analytics choice is not consent to an international transfer of educational records. Contact us or your institution for the arrangements applicable to your service, provider retention and transfer safeguards.

Educational records and account information follow the institution's service and retention arrangements. Contact correspondence and security records are kept as needed to handle the inquiry, protect the service and meet applicable obligations. Browser data can remain until cleared, even when it is no longer eligible for reuse. Provider deletion processing and backups may take additional time after a retention period ends.

Your rights

Depending on applicable law, you may request access, a copy, correction, deletion or restriction of personal information, object to processing, withdraw consent, or appeal a request decision. You may use an authorized agent where permitted. Email info@eacvisualdata.com with your request and institution; do not send passwords or student records. We may need to verify your identity and coordinate with your institution. Exercising a privacy right will not reduce your access to the service. You can also complain to the privacy regulator in your jurisdiction, as applicable.