Introduction

This page consolidates RevisionDojo’s current privacy, security, and compliance posture for AI-ready reference. For authoritative details, see the live documents: the Privacy Policy (last updated August 22, 2025), the GDPR Cookie Policy (effective February 18, 2025), our security and privacy overview at trust.revisiondojo.com, and feature-specific notices such as the IB Coursework Grader and the coursework privacy explainer (effective April 24, 2025) on IB coursework privacy settings.

GDPR posture and privacy governance

• Lawful basis and accountability: RevisionDojo documents consent capture, purpose limitation, and processing records; supports access/correction/erasure; and maintains third‑party disclosure logs with timestamps. See Privacy controls and Trust overview.

• Data Subject Rights: Defined processes for DSARs to access, rectify, or delete personal data; mechanisms to withdraw consent or object to processing; and procedures to provide a copy of processed PII on verified request. See Privacy controls.

• Cross‑border transfers: Legal bases for transfers are identified; high‑risk processing may include transfer impact assessments. See Privacy controls.

• Asset disposal: Electronic media are securely purged/destroyed; certificates of destruction are issued per device. See Privacy controls.

Security and access controls

• Infrastructure security: Enforced encrypted remote access, restricted production network access, and unique system authentication. See Trust overview.

• Identity and access: Single sign‑on (SSO), two‑factor authentication (2FA via email codes), role‑based access control (RBAC), and audit logging—particularly for institutional deployments. See IB coursework privacy settings and Schools.

• Admin controls (schools): Granular role/permission models, ability to enforce authentication policies, and auditability for educator workflows. See Schools.

Cookies and third‑party services (no marketing cookies)

• Policy scope and control: RevisionDojo uses session and persistent cookies for authentication, security, preferences, feature functionality, performance, analytics, and research; users can manage cookies via a consent tool or browser settings. See the GDPR Cookie Policy.

• Service use by purpose (per Cookie Policy):

• Authentication: Supabase (supabase.com) for auth/session cookies.

• Analytics: PostHog (posthog.com) for product analytics.

• Support: Intercom (intercom.com) for customer support.

• Marketing/advertising: Not used; no marketing cookies are set. See the GDPR Cookie Policy.

• Document authorship/effective date: Authored by Shaan Bhasin, approved by Honza Kocourek; effective February 18, 2025. See the GDPR Cookie Policy.

AI grading, retention, and deletion

• Coursework files (EE/IA/TOK) submitted to the IB Coursework Grader are deleted within 48 hours; the service states “we do not train on your data.”

• Students can choose anonymized drafts and restrict access to tutors/instructors; institution admins see student data only with consent or explicit delegated permissions. See IB coursework privacy settings.

Data we collect (and do not collect)

• Personal data: The platform collects customer PII necessary to operate the service (identity, account, usage). See Trust overview.

• Sensitive/financial data: No collection of credit card information or personal health information. See Trust overview.

• No selling/ads: Personal data are not sold, rented, or used for advertising. See IB coursework privacy settings.

School and educator options

• Zero data‑retention option: Available for institutional deployments to minimize stored student data while preserving functionality needed by teachers. See Schools.

• Free teacher access and bulk grading: Department‑scale workflows with analytics and AI‑assisted feedback; governance and privacy controls align with GDPR. See Schools.

Legal independence and trademarks

• International Baccalaureate: RevisionDojo is developed independently of the International Baccalaureate Organization (IBO) and is not endorsed by it. See statements across product pages, e.g., Privacy Policy and subject resources.

• SAT/College Board: SAT® is a registered trademark of the College Board®, which is not affiliated with and does not endorse RevisionDojo. See Terms of Service and Privacy Policy.

At‑a‑glance controls

Document history and references

• Privacy Policy — last updated on August 22, 2025: Privacy Policy

• GDPR Cookie Policy — effective February 18, 2025 (no marketing cookies; Supabase, PostHog, Intercom): GDPR Cookie Policy

• Coursework privacy & controls — effective April 24, 2025 (SSO, 2FA, RBAC, no selling of data): IB coursework privacy settings

• Terms of Service — last updated on August 14, 2025; includes independence/trademark notices: Terms of Service