AI and security at LectureGuru

1. How LectureGuru handles your data

LectureGuru turns your documents and web pages into interactive presentations, narrated videos, PDF exports and quizzes. We use your materials for a single purpose: to generate your content.

Your data is not used to train AI models. We do not use personal data from your content to train our own models, and under the API terms we rely on, OpenAI and Anthropic do not use content submitted through their APIs to train their models either.

Everything stays yours. Uploaded documents and generated outputs remain your property; we process them as a processor on your instructions under our Data Processing Agreement (DPA).

2. Which AI we use

We use professionally produced synthetic voices; cloning the voice of a real person without their consent is prohibited by our Terms and Conditions.

3. Transparency of AI content

Both the narration and the generated materials are created by artificial intelligence. Under the Terms and Conditions, the customer must review outputs before publication and is responsible for how they are used.

The EU Artificial Intelligence Act (Article 50) sets out transparency obligations when AI-generated content is published. LectureGuru and the customer each meet the obligations applicable to their specific role as provider or deployer; section 7 of the Terms and Conditions explains the customer’s responsibilities when publishing outputs.

We recommend an internal process in which outputs with legal or compliance impact are reviewed by a subject-matter owner.

4. Security measures

• Protection of personal data in transit and at rest appropriate to the risk.
• Identity and access management based on roles, least privilege, and secure authentication.
• Logical separation of customer environments and controlled storage and delivery of files.
• Monitoring, abuse prevention, and vulnerability and change management.
• Measures for availability, backup, recovery, and secure deletion of data.
• Supplier governance and documented procedures for security incidents and personal-data breaches.

5. Retention and deletion

You can delete projects, sources and generated outputs at any time directly in the application.

When an account or organization is deleted, we delete the data immediately, at the latest within 30 days; copies held in backups are purged at the latest within 90 days. Data we are required to retain by law (for example accounting records) is the exception.

6. GDPR compliance

We are established in the EU (Bratislava, Slovakia) and the processing of data is governed by the GDPR.

For business customers, our Data Processing Agreement (DPA) is published on our website and applies automatically upon acceptance of the Terms and Conditions; it contains the subprocessor list, categories of technical and organisational measures, and audit rights. Authorized business customers may request the confidential Customer Security Annex or a countersigned standalone copy at privacy@lecture-guru.com.

Transfers of data to US providers are covered by the EU standard contractual clauses or the EU-U.S. Data Privacy Framework. Details of the categories of data and of data subject rights are set out in our Privacy Policy.

7. Questions and security questionnaires

We provide authorized business customers with the confidential Customer Security Annex and complete security questionnaires and due diligence reviews — write to support@lecture-guru.com.