1. Introduction
Questra is an educational communication and collaboration platform designed to facilitate interaction between schools, teachers, students, administrators, and other authorized users. This Privacy Policy explains how information is collected, used, stored, and protected when you use the Questra platform and its related services.
By using Questra, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, please do not use the platform.
This policy applies to all users of the Questra platform, including teachers, students, school administrators, and any other individuals who access or use the service through authorized accounts.
2. Information We Collect
2.1 Account Information
When you create or access a Questra account, we may collect the following information:
- Name — Your full name as provided during registration.
- Email address — Used for account identification, authentication, and communication.
- Profile information — Any additional profile details you choose to provide, such as a profile picture.
- School or organization — The educational institution or organization you are affiliated with.
- Role — Your role within the platform (e.g., Teacher, Student, Administrator).
2.2 User-Generated Content
Questra may allow you to create, submit, or store content through the platform. This may include messages, communications, educational materials, or other content you generate while using the service. You remain responsible for the content you submit.
2.3 Communication Data
When you use Questra's messaging or communication features, we process the content of those communications to deliver them to the intended recipients. This includes messages sent between users, notification content, and any data transmitted through the platform's communication tools.
2.4 Technical Information
We automatically collect certain technical data when you use Questra, including:
- Browser and device information — The type of browser, operating system, and device you use to access the platform.
- IP address — Your IP address, which may be used for security, fraud prevention, and diagnostic purposes.
- Log information — Server logs that record activity on the platform, including access times, pages viewed, and errors encountered.
- Usage data — Information about how you interact with the platform, including features used and actions taken.
2.5 Third-Party Service Data
When you choose to connect third-party services (such as your Google account) to Questra, we may receive information from those services as authorized by you through the integration process. See Section 3 for details about Google account data.
3. Google Account and Google API Data
3.1 Google Account Connection
Questra provides you with the option to connect your Google account to the platform. This integration is entirely voluntary and is initiated by you. When you choose to connect your Google account, you will be redirected to Google's authentication page where you can review the permissions being requested and choose to authorize or decline the connection.
3.2 Google Account Information Accessed
Depending on which Questra features you enable, connecting your Google account may request access to the following information:
- For Google Sign-In (Authentication): Your Google account email address, name, and profile picture. These are used solely to authenticate your identity and create or access your Questra account.
- For Gmail Integration (Communication): Permission to send emails on your behalf through the Gmail API. This allows Questra to send emails and save drafts to your Gmail account when you explicitly use the email communication feature. Questra does not read, access, or store the contents of your existing emails.
3.3 How Google Data Is Used
Information obtained from your Google account is used only for the specific purpose you authorized:
- Authentication data is used to verify your identity and manage your Questra account.
- Gmail API access is used exclusively to send emails and save drafts when you initiate those actions through the platform.
3.4 User Control and Revocation
You can disconnect your Google account from Questra at any time through your Questra profile settings. Additionally, you can revoke Questra's access to your Google account through your Google Account settings at myaccount.google.com/permissions.
Questra does not request access to Google account information beyond what is necessary to provide the functionality you have explicitly enabled.
3.5 Google API Services User Data Policy
Questra's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements where applicable.
4. How We Use Information
We use the information we collect for the following purposes:
- Providing and maintaining the service — Operating, maintaining, and improving Questra's features and functionality.
- Authentication and security — Verifying user identity, managing access controls, and protecting the platform from unauthorized access.
- Educational and communication features — Delivering the educational, communication, and collaboration features you have requested or enabled.
- Account management — Creating, updating, and managing user accounts and their associated settings.
- School communication — Facilitating communication between teachers, students, administrators, and other authorized users within educational organizations.
- Platform reliability and security — Monitoring platform performance, detecting and preventing abuse, and ensuring the security of the service.
- Support — Responding to your inquiries and providing technical support.
- Legal compliance — Meeting applicable legal obligations and responding to lawful requests.
6. Third-Party Services
Questra may integrate with third-party services when you explicitly authorize those integrations. These third-party services operate under their own privacy policies and terms of service.
When you connect a third-party service (such as Google) to Questra, you are subject to that service's privacy policy. We encourage you to review the privacy policies of any third-party services you connect to Questra.
Questra is not responsible for the privacy practices of third-party services. The integration is established at your request and under your control.
7. Data Security
We take reasonable measures to protect the information we collect from unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of sensitive data in transit and at rest.
- Access controls and authentication mechanisms.
- Regular security monitoring and assessment.
- Secure storage of authentication tokens and credentials.
However, no method of electronic transmission or storage is completely secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.
8. Data Retention
We retain your information for as long as your account is active or as needed to provide the service. We may retain certain information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
When you or your organization's administrator deletes an account, we will take reasonable steps to remove your personal data from active systems. Some information may be retained in backup or archival systems for a period of time consistent with our data retention practices.
9. User Rights and Choices
Depending on your jurisdiction, you may have certain rights regarding your personal information. These may include:
- Access and update — You can access and update your account information through your Questra profile settings.
- Disconnect integrations — You can disconnect third-party integrations, such as your Google account, at any time through your profile settings.
- Account deletion — You may request deletion of your account by contacting your school administrator or Questra support.
- Privacy questions — You can contact us with questions or concerns about your privacy by using the contact information provided in Section 12.
10. Children's Privacy
Questra is an educational platform that may be used by or on behalf of educational institutions serving students. Schools, educational organizations, and their authorized administrators are responsible for ensuring that their use of Questra complies with applicable laws and policies regarding the privacy of minors, including but not limited to the Family Educational Rights and Privacy Act (FERPA), the Children's Online Privacy Protection Act (COPPA), and other relevant regulations in your jurisdiction.
Questra relies on schools and organizations to obtain any required parental consents and to manage student accounts in compliance with applicable law. If you believe that a child's information has been collected inappropriately, please contact us immediately.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page.
We encourage you to review this Privacy Policy periodically. Continued use of Questra after any changes constitutes your acceptance of the updated policy.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Email: support@questra.app
- Contact Page: Questra Support
We will respond to your inquiry within a reasonable timeframe.