Privacy Policy
Last updated: 2026-07-20
1. Controller
The controller of your personal data (in Mexico, the “responsable”) is the operator of Over The Math Wall, based in Mexico. The controller’s full identity and domicile are available on request at admin@overthemathwall.com, which is the contact address for all privacy matters.
2. Data we collect
- Account data — name, email address, and, if you sign in with Google, your Google account identifier and profile picture. Managed by our authentication provider, Clerk.
- Billing data — subscription status, plan, and payment history, including any credit-bundle purchases (Paddle transaction identifiers and amounts). Card details are collected and stored by Paddle, never by us.
- Worksheet history — the most recent worksheets you generate are saved to your account so you can re-open them. Only the worksheet definition (grades, topics, counts) is stored, never student data, and older entries are pruned automatically.
- Contact-form data — if you use the institutions form: name, email, organization, and your message.
- Partner data — for API partners: personal or organization account details, contact email, API keys (stored hashed), per-partner monthly usage counters and credit balances, and key creation, revocation, and last-used metadata.
- Usage and technical data — IP address, browser information, and pages visited, from hosting logs, Vercel Analytics (cookieless), and — only with your consent — Google analytics cookies. See the Cookie Policy.
Beyond the recent-history feature above, worksheets are generated on demand. We do not ask for, or knowingly collect, data about your students.
3. Purposes and legal bases (GDPR)
- Providing the Service and billing — performance of a contract (Art. 6(1)(b)).
- Responding to institutional inquiries — steps prior to a contract (Art. 6(1)(b)) and legitimate interest (Art. 6(1)(f)).
- Security, fraud prevention, and service operation — legitimate interest (Art. 6(1)(f)).
- Analytics and marketing cookies — your consent (Art. 6(1)(a)), which you can withdraw at any time via the cookie settings.
- Tax and accounting records — legal obligation (Art. 6(1)(c)).
4. Processors and recipients
We share data only with the service providers that run the product, under data processing agreements:
| Provider | Purpose | Location |
|---|---|---|
| Clerk, Inc. | Authentication | USA |
| Paddle.com Market Ltd. | Payment processing and billing (merchant of record) | UK |
| Convex, Inc. | Application database | USA |
| Vercel, Inc. | Hosting and privacy-friendly analytics | USA |
| Google LLC | Tag management and analytics (consent-based) | USA |
5. International transfers
Our providers process data in the United States. Transfers rely on the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses, as applicable to each provider.
6. Retention
- Account and billing data, including credit and usage records: for the life of your account and thereafter as required for tax and accounting obligations.
- Worksheet history: only the most recent entries are kept; older ones are pruned automatically, and all are deleted when your account is closed.
- Institution inquiries: up to 24 months after the last contact.
- Analytics data: per the periods stated in the Cookie Policy.
7. Your rights
Depending on your location, you may have the right to access, rectify, erase, or receive a copy of your data, to restrict or object to processing, and to withdraw consent at any time. Write to admin@overthemathwall.com and we will respond within the legal deadline. If you are in Mexico, this notice also serves as our privacy notice (aviso de privacidad) under the LFPDPPP, and you may exercise your ARCO rights (access, rectification, cancellation, opposition) through the same address. You may also lodge a complaint with your data protection authority. California residents: we do not sell or share personal information as defined by the CCPA/CPRA, and you may exercise your access and deletion rights through the same address.
8. Children
The Service is for adults (18+). It is not directed at children and we do not knowingly collect personal information from children. Printed worksheets are used offline; student names or scores written on them never reach our systems.
9. Changes
We will post any changes to this policy here and, for material changes, notify you by email or in the app.
