Privacy and your data

What the Class Discussion Board keeps

• Your account: your name, your email address, the classes you belong to, and either a password (stored scrambled, so nobody can read it) or your Google sign-in.
• What you write: your messages and replies, your reactions, and the files you upload.
• Scheduling: the 1-on-1 coaching slots you book and the workshop sessions you sign up for.
• Your settings: whether you want notification email immediately or once a day, the time you chose, and your time zone.
• Activity: when you signed in, and failed sign-in attempts on your address.

What the CEFR Level Checker keeps

• Your answers and your results: the level for each of the five skills, and your last ten completed assessments.
• Work in progress: a part-finished assessment, so you can stop and come back to it.
• The name or nickname you type at the start.
• Your voice is not kept. Speaking answers are sent for grading and are not stored afterwards.

Who else your data reaches

• The CEFR Level Checker sends your writing and your voice to Google's Gemini API, over an encrypted connection, to grade them. Google processes it under its terms for the Gemini API.
• The Class Discussion Board sends nothing to any AI service. What you post stays on LeadGL's own server.
• If you sign in with Google, Google confirms your identity to us. We receive your email address and name, nothing else.
• Notification email is written and sent by LeadGL's own mail server at XServer. It does not pass through any other company on the way to your inbox.
• The sign-in forms (password sign-in, password help, and the emailed sign-in link) include a "Verify you are human" check from Cloudflare Turnstile. It stops automated programs from guessing passwords or sending floods of email. While a sign-in page is open, Cloudflare receives technical information from your browser, such as your IP address and details of your browser and device. It does not receive your name, your email address or your password: our server sends Cloudflare only the one-time result of the check. Cloudflare uses this information to run the check, not for advertising. Once you are signed in, the check is not used.
• Nothing is sold, and nothing is used for advertising.

Where it is stored, and how it is protected

On a rented server in Japan at XServer, a hosting company, under LeadGL's account. Messages, accounts and bookings are in a database; uploaded files and assessment results are in folders that the web cannot reach directly.

Everything you send to and from these apps travels over an encrypted connection (HTTPS). Passwords are stored scrambled and cannot be read back, by us or by anyone else.

Your messages and files themselves are not separately encrypted on the server. They are protected by the hosting account and the database password. We tell you this plainly so you can judge what to write: see "Your company's information" below.

How long it is kept

• Two years after your course ends, LeadGL deletes everything these two apps hold about you: your messages and the files you uploaded, your CEFR results, your settings, your account, and the monthly archives of your class.
• Until then your messages and files stay where they are, and a copy is archived once a month, so your cohort can read back over the course.
• CEFR results: your ten most recent completed assessments, and in no case longer than two years. Older ones drop off as new ones are added.
• Failed sign-in attempts: 30 days.

Who can see it

• Your classmates and your coach see what you post in your class, the same way you see theirs.
• Nobody except LeadGL administrators sees anyone's email address. Students do not see other students' addresses, and coaches do not see them either.
• LeadGL administrators can see everything in the Board, including email addresses, and every completed CEFR assessment with its five levels. This is how we run your course and answer your questions.
• Your coach does not see your CEFR assessments unless you share them.

Your company's information

The Class Discussion Board is for the workshop: what you are learning, what you are trying, what worked. It is not built to hold your company's confidential information, and your messages are not separately encrypted on the server.

So please keep confidential details out of your posts. You can almost always make the same point with general terms -- "a major client" instead of a name, "about 10%" instead of the exact figure. Your company may also have rules on using AI tools and outside services; follow them.

What you can do

• You can edit or delete your own messages while your class is open.
• You can change your notification setting, or turn notification email off, at any time in Settings.
• Write to students-service@leadgl.com to ask for a copy of your data, or to ask us to delete it.

Questions

• Write to students-service@leadgl.com.