Data rights

Your rights over personal data under Canadian privacy law and GDPR/UK GDPR, how we handle cross-border transfers, your responsibility for uploaded materials, and how those materials power AI responses.

Last updated September 19, 2026

Who we are

Knorvex operates an AI-assisted exam preparation platform. We are based in Canada and serve a global audience.

For privacy questions, use the contact page or email support@knorvex.com. Full legal entity and registered address details will be published here when registration is complete.

We act as the organization responsible for personal information you provide when registering or using the platform. This page summarizes rights under Canadian privacy law (PIPEDA), Quebec's Law 25 where applicable, GDPR/UK GDPR for visitors in those regions, and similar frameworks.

Why we process personal information

We process your personal data on the following bases:

  • Contract / service delivery: to provide the study tools and features you signed up for.
  • Legitimate interests / appropriate purposes: to improve reliability, prevent fraud, and operate the platform securely (balanced against your privacy interests).
  • Consent: for optional features such as non-essential analytics and marketing communications, where you have explicitly opted in.
  • Legal obligation: where required by applicable law.

Canada (PIPEDA) & Quebec Law 25

As a Canadian organization, we follow PIPEDA principles for accountability, identifying purposes, consent, limiting collection, safeguards, openness, individual access, and challenging compliance.

If you are in Quebec, Law 25 may grant additional rights (including stronger consent and privacy impact expectations). Contact us to exercise access, correction, or deletion requests. We will respond within timelines required by applicable law.

This summary is not legal advice. Have a qualified professional review your obligations before relying on it.

Your rights (GDPR / UK GDPR and equivalents)

If you are located in the European Economic Area, UK, or a jurisdiction with equivalent rights, you may have the right to:

  • Access a copy of the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Request deletion ("right to be forgotten") subject to legal and contractual obligations.
  • Restrict or object to processing in certain circumstances.
  • Data portability — receive your data in a structured, machine-readable format.
  • Withdraw consent at any time for consent-based processing, without affecting prior processing.
  • Lodge a complaint with your local supervisory authority.

To exercise any of these rights, contact us through the contact page or support@knorvex.com. We aim to respond within 30 days where GDPR applies, or sooner if local law requires.

International data transfers

Knorvex uses service providers that may process data outside Canada, including the United States and the EEA. Where data is transferred internationally, we rely on contractual safeguards, adequacy decisions, or equivalent protections as required by applicable data protection law.

How your materials are used to enhance AI responses

When you upload study materials, Knorvex extracts and chunks the text content. These chunks are:

  • Stored in your private account and are not visible to other users by default.
  • Sent as context to AI providers (such as OpenRouter or OpenAI) to generate quizzes, explanations, and feedback grounded in your specific material.
  • Used to build semantic search indexes within your account so that generated content is relevant to what you are actually studying.

This is a core feature of the platform: without your material, the AI can only generate generic knowledge questions. With your material, the AI grounds every question and explanation in the specific content of your course.

We do not use your uploaded materials to train public AI foundation models. Your chunks are processed under your account and subject to the data retention terms in our Privacy Policy.

Data processing agreements

If you are an institution or business using Knorvex and require a Data Processing Agreement (DPA) or similar contract, contact us through the contact page. We will work with you to put appropriate contractual protections in place.

Complaints

If you have a concern about how we process your personal data, please contact us first and we will try to resolve the issue. In Canada you may contact the Office of the Privacy Commissioner of Canada (and, where applicable, your provincial commissioner). In the EEA/UK you may lodge a complaint with your local supervisory authority.