Last updated: October 2026
Who we are
GraidLens is operated from the Netherlands. Our database, file storage and API servers run in the European Union, so stored data is kept in Europe. For the AI features, such as grading, photos and text are sent to an AI service provider; see 'AI and student data' below.
What data we collect
Name & email address
For account registration.
Exam content
Questions, model answers, and your notes on the rubric.
Photos & scores
Student work and the AI-generated scores.
Student labels
Labels you choose, such as initials. Full names aren't needed.
How we use your data
Delivering the service
Running and improving the grading service.
Transactional email
Account confirmation and support replies.
Grading only
Photos of student work are used only to grade that one exam, then retained for appeals and audit: 3 months for a regular test, 1 year for a school exam (SE). Longer retention is available as a paid add-on.
AI and student data
Student work is processed for grading by an AI service provider that does not use submitted data to train or improve models. That processing can take place outside the European Union. Which parties process personal data on our behalf, where they do so, and which safeguards apply to transfers outside the EU is set out in the data processing agreement, which schools receive on request.
Improving handwriting recognition (opt-in)
By default, GraidLens doesn't use your data to train, fine-tune, or evaluate any AI model. There's one exception, and it's strictly opt-in: in your account settings you can consent to us retaining your transcription corrections — the pair consisting of the text the AI read from a scan and the correction you typed while grading. We use those pairs to improve and measure handwriting recognition.
- Legal basis: your consent (Art. 6(1)(a) GDPR). We record per teacher when you gave consent and which version of this text applied at the time.
- What we retain: only the two pieces of text, a reference to the scan (storage path and the answer's crop area), and technical measurements (e.g. how much the AI reading diverged). No grades, and the text is pseudonymised when recorded: email addresses, long number sequences, and names from your class list are replaced with a neutral label.
- Use: a GraidLens staff member reviews every retained record before it enters a dataset. The dataset is used only internally and offline to train or evaluate a recognition model managed by us — never shared with or used to train a third party's model.
- Retention: until you withdraw consent, and at most 24 months after recording.
- Withdrawing: turn off the setting in Settings. On save, every record retained under that consent is deleted immediately. Records already included in a completed, anonymised training dataset can't be retroactively removed from a training run that's already taken place.
Retention
Account data
Retained until you delete your account.
Submission photos
3 months after upload; 1 year for a school exam (SE), for appeals and audit. Longer retention available as a paid add-on.
Exam and answer records
Retained until you delete the exam.
Transcription corrections
Opt-in only: until withdrawal, at most 24 months.
Your rights
Under GDPR you have the right to access, correct, export, and delete your data. You can download a full export of your own data at any time from Settings, or delete your account there yourself. For any other request (correction, or a question about your data), email privacy@graidlens.eu — we respond within 30 days.
Cookies and analytics
We only use essential session cookies needed for authentication. No tracking or advertising cookies are used.For product analytics we use a cookie-less, privacy-friendly service that collects no personal data and doesn't track individuals across sites.
Contact
Questions about data protection: privacy@graidlens.eu