Privacy Protection and Law 25 Compliance

Privacy Protection and Law 25 Compliance

Edited in March 2026

1. Our commitment

Scolaro is built for the Quebec education sector. We structure the platform to align with the applicable requirements of Law 25 and major Quebec and Canadian privacy laws.

For any request related to personal information protection, use the contact form and specify the nature of your request.

Scolaro never replaces the teacher. AI is used as a pedagogical support tool, and final decisions remain in human hands.

2. Shared responsibilities

Role of the educational establishment
  • The school or school service centre remains responsible for student records.
  • The establishment decides which digital tools are used in class and under what conditions.
  • The establishment may manage access, retention, and requests related to privacy rights.
Role of Scolaro
  • Scolaro acts as a service provider and processes personal information only to deliver the agreed pedagogical features.
  • We may enter into written agreements with schools to clarify confidentiality, security, and retention obligations.
  • We limit our processing to what is necessary for the platform: generation, assisted grading, pedagogical follow-up, and technical support.

3. How Law 25 is applied in practice

Data minimization and purpose
  • We collect only the data that is necessary, such as name, email, role, classes, results, and submitted work.
  • This data is used only to provide the platform, generate or grade evaluations, and improve the service through aggregated or anonymized analysis where possible.
  • We do not resell data and do not use it for advertising purposes.
Consent and minor students
  • For students under 14 years old, Scolaro must be authorized according to the framework required by Law 25.
  • A clear notice should explain what data is collected, why it is collected, and which providers may receive it.
  • Scolaro can support institutions with notice templates or parent-facing communication materials.
Hosting, restricted access, and deletion
  • Data is hosted on secure infrastructure with encryption in transit and at rest.
  • Access is role-based: students see their own data, teachers see their own groups, and administrators have limited access.
  • Technical logs and access controls help limit and trace access to personal information.
  • When legally permitted, we can delete an account, anonymize specific datasets, or provide a structured copy of the data.
Transfers outside Quebec and AI providers
  • Some features may require sending content to technology providers such as OpenAI.
  • We limit these transfers to what is strictly necessary and try to remove direct identifiers before sending data.
  • Before any transfer outside Quebec, Scolaro performs a privacy impact assessment and implements the required safeguards.
  • Whenever possible, we disable the use of transferred data for general external model training.

4. AI and automated decisions

What AI does in Scolaro
  • AI can suggest questions, propose feedback, recommend an initial score, and help identify recurring difficulties.
  • These features are decision-support tools, not final decisions.
  • The teacher's professional judgment remains central at every stage.
Transparency and human review
  • When a result or feedback comes from automated processing, that context may be indicated depending on the use case.
  • Teachers can modify, validate, or reject AI suggestions at any time.
  • Where a decision is based exclusively on automated processing, affected people may request an explanation and human review in accordance with the applicable framework.

5. Your rights

Users, and parents of minor students when relevant, notably have the following rights:

  • the right to be informed;
  • the right of access;
  • the right to correction;
  • the right to portability where applicable;
  • the right to withdraw consent within the limits established by law;
  • the right to file a complaint with the school, Scolaro, or the Commission d'acces a l'information du Quebec.

Privacy officer

To exercise your rights, use the contact form and mention “Personal Information Protection” in the subject line.

6. Important notice

This page is an informative summary of our approach. It does not replace legal advice, and each educational establishment remains responsible for its own legal obligations.

Scolaro continuously adapts its practices to follow evolving laws, guidance from Quebec's privacy regulator, and current privacy best practices.

For more information about Law 25, consult the Commission d'acces a l'information du Quebec.