Privacy Notice

1. Controller and institutional roles

The service provider acts as controller for RealText's own account administration, security, contractual, contact, consent-management and operational processing.

Where a school, university or other institution determines why and how student, course, assignment and assessment data are used, that institution may act as controller and RealText processes the educational data on its documented instructions under the applicable agreement.

• Name: FERENCZI SZABOLCS-NORBERT II
• Registered office: Odorheiu Secuiesc, Intrarea Tineretului, block no. 4, apartment 4, Harghita County, Romania
• CUI / CIF: 53152662
• Registration number: F2025052110008
• Email: info@dreamdev.hu
• Website: https://realtext.eu

2. Categories of personal data

• Account and authentication data: name, email address, profile image, verified Google account details, roles and secure-session identifiers.
• Institutional and educational data: institution, course membership, assignments, submissions, grades, teacher feedback and inline comments.
• Writing-process telemetry: typing, editing, deletion, paste, cut, copy, selection, cursor movement, focus, tab visibility, click, scrolling, formatting, undo and redo events; timestamps; active time; session and submission identifiers; document positions; transaction-step data; word-level timing; and text fragments required for writing-process replay and analysis.
• Contact and quote-request data: name, email address, optional phone number, organisation, inquiry type, message, interface language, privacy acknowledgement and a temporary rate-limit identifier derived from the connection address or email.
• Notification data: notification preferences, email queue status, delivery attempts and the content needed to send requested notifications.
• Security and audit data: administrative actions, user agent, technical errors and consent-history records.
• Uploaded content: images and other files intentionally submitted through supported upload functions.

3. Purposes and legal bases

• Providing accounts, courses, assignments, editing, submission and assessment functions: performance of the service agreement or steps requested before entering into it.
• Security, abuse prevention, session integrity, auditability and service reliability: legitimate interests and, where applicable, legal obligations.
• Optional email notifications: consent or an explicitly enabled user preference, depending on the notification and contractual context.
• Contact and quote requests: taking requested pre-contractual steps, responding to the inquiry and protecting the form against abuse.
• Optional behavioural analytics: consent. No analytics processing starts before affirmative consent.
• Accounting, contractual and regulatory records: compliance with applicable legal obligations.

4. Writing telemetry, cursor and selection logging

RealText records the development of a submission so authorised teachers can understand how the text was produced. Cursor movement and actual text selection are stored as distinct events together with document positions, timestamps, submission identifiers and editing-session identifiers.

Replay may require transaction-step data and limited text fragments representing inserted, deleted, pasted, copied, cut or selected content. Word-level timing may contain the completed word and its document position.

Telemetry supports replay, factual statistics, educational feedback and aggregated course analysis. It does not independently establish misconduct and does not automatically determine a grade or disciplinary outcome.

5. No AI-based or automated evaluation

RealText does not use artificial intelligence to classify users, determine whether a text was generated by AI, calculate an AI-risk score, assign grades or initiate disciplinary consequences.

Displayed statistics and writing-process review signals are deterministic summaries produced from recorded writing events and transparent rules. They are not AI probabilities or findings of misconduct. Decisions concerning assessment, feedback or academic-integrity procedures are made by authorised instructors or institutions rather than by the software.

6. Recipients, processors and infrastructure

• The application, PostgreSQL and ClickHouse databases, Hungarian spell checking and English-language checking operate in the service provider's server environment on OVHcloud VPS infrastructure.
• OVH HEBERGEMENT INC, 1801 McGill College Ave., Suite 800, Montreal, Quebec H3A 2N4, Canada, is the declared OVHcloud contracting entity. The active hosting agreement, selected data-centre region and processing terms determine whether third-country access or transfer occurs and which safeguards apply.
• Rackhost Zrt., 6722 Szeged, Tisza Lajos körút 41., Hungary, company registration number 06-10-000489, tax number 25333572-2-06, provides domain-registration and related technical services. Providing infrastructure does not by itself make Rackhost the controller of RealText's educational processing.
• Hungarian spelling checks are performed by Hunspell and a locally loaded Hungarian dictionary within the RealText server environment.
• English spelling, grammar and style checks are performed by a locally hosted LanguageTool service running in a separate Docker container within the RealText infrastructure.
• Checked Hungarian or English text is not sent to the public LanguageTool API or another external spelling or grammar-checking provider.
• Google may process authentication information when the user chooses Google sign-in.
• Email delivery providers may process the minimum information necessary to send enabled transactional or optional notifications.
• Authorised institution administrators, instructors and technical operators receive only the access necessary for their role.

7. Students and institutional responsibility

RealText is primarily provided through authorised educators and institutions rather than being offered directly to children as an independent consumer service.

The institution is responsible for ensuring a lawful basis for enrolling students, providing age-appropriate information and obtaining parental or guardian authorisation where applicable. RealText must process institutional educational data only within the documented purpose and access rules.

8. Retention schedule

• Account and contractual data are retained for the duration of the service relationship and for any additional statutory accounting, tax or limitation period.
• Course content, submissions and related writing telemetry are retained for the active course period and normally for no longer than 24 months after the course is archived. Courses archived for at least 24 months may be deleted automatically unless the institution requests a shorter period or a documented legal, contractual, institutional or claims-related retention hold requires a longer period.
• Completed or failed email-queue records are intended to be removed or anonymised within 90 days after final delivery status unless needed for incident investigation.
• Routine technical and security logs are intended to be retained for no more than 90 days, while incident-related evidence may be kept longer when necessary.
• Consent audit events may be retained for up to five years after the last recorded choice where required to demonstrate compliance or defend claims.
• Data is deleted or anonymised earlier when it is no longer necessary and no overriding legal obligation applies.

9. Data-subject rights

• Access to personal data and information about processing.
• Correction of inaccurate or incomplete data.
• Erasure where the legal conditions are met.
• Restriction of processing and objection to processing based on legitimate interests.
• Data portability where processing is based on consent or contract and carried out by automated means.
• Withdrawal of consent at any time without affecting processing performed before withdrawal.
• The right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal, ANSPDCP) or to seek judicial remedy.

10. Withdrawing consent and managing preferences

Cookie consent can be changed from the Cookie settings link in the footer. Email-notification preferences can be changed in the user's settings where the function is available.

Signed-in users can request a machine-readable copy of their personal data or submit an account-erasure request from the Data and account section of their settings. An erasure request immediately suspends account access while institutional ownership, lawful retention and anonymisation requirements are reviewed.

Requests concerning correction, restriction, objection or other privacy rights can also be sent to info@dreamdev.hu. Identity verification may be requested where necessary to protect the account and other users.

11. Security and international transfers

RealText uses role-based access, secure authentication, audit logging and separated PostgreSQL and ClickHouse storage according to the type of data.

If a processor transfers personal data outside the European Economic Area, an applicable transfer mechanism and supplementary safeguards must be used.

12. Changes to this notice

Material changes will be communicated through the service or by another appropriate channel. A new consent-policy version may require the user to make a fresh optional-cookie choice.