Security and data
Providers and third-party services
Which providers take part in operating LingoQuesto, what each one is used for, what data it receives and how the artificial intelligence providers handle data.
Summary
LingoQuesto relies on providers to host the platform, process voice and text with artificial intelligence, send emails and handle support. This document lists the ones involved in operating the platform.
- The artificial intelligence providers receive the practice audio and text, not the student’s name or email.
- Data retention is turned off in LingoQuesto’s account with each artificial intelligence provider, and none of them uses that data to train their models.
- The user’s browser never connects to these providers. All of that communication goes out from LingoQuesto’s servers. The only exception, which comes from the browser itself, is described in the section on Reading activities.
Infrastructure
| Provider | Used for | Data it processes | Location |
|---|---|---|---|
| DigitalOcean | Servers, database and file storage | All platform data | United States (NYC3) |
| Amazon Web Services | Serving the web application | IP address and technical data about the visit. It doesn’t store any user content | United States |
| Cloudflare | DNS and edge protection for the web application and the API | Traffic passes through its network encrypted | Global network |
| Microsoft Azure | The platform’s credential vault | No user data | — |
Artificial intelligence and voice
| Provider | Used for | What it receives |
|---|---|---|
| OpenAI | Transcribing the student’s voice. Generating the tutor’s responses and the feedback. | Student audio, practice text and content the teacher provides to create activities. |
| xAI | Tutor voice. Creating activities and courses. Moderation. Backup transcription. | Tutor text, content the teacher provides, student text and, if the primary transcription fails, the student’s audio. |
| Microsoft Azure Speech | Assessing pronunciation and fluency. It is the only pronunciation assessor. | Student audio and the reference text. |
Retention and model training
| Provider | Does it keep the data after processing it? | Does it use the data to train models? | Provider documentation |
|---|---|---|---|
| OpenAI | No. Retention is turned off. | No | Platform data controls |
| xAI | No. Retention is turned off. | No | API security |
| Microsoft Azure Speech | No. Audio is processed in memory and is not stored. | No | Data, privacy and security |
Communication and support
| Provider | Used for | What it receives |
|---|---|---|
| Resend | Sending the platform’s emails: invitations, verification and passwords | Recipient’s email address and message content |
| Crisp | Support chat inside the platform | The user’s email, name, role, campus and identifier, and the support conversation |
| Sentry | Error logging, to diagnose failures | Technical data about the error, which may include the user’s identifier and their IP address |
Sign-in
These are only involved if the person chooses that method to sign in.
| Provider | Used for | What LingoQuesto receives |
|---|---|---|
| Microsoft | Sign-in with the institutional account | Identifier, email and name |
| Sign-in with the institutional account | Identifier, email, name and photo |
Resources loaded by the browser
These services deliver public files, such as fonts or icons. They only know the IP address of the browser that requests them.
| Service | What it delivers |
|---|---|
| Google Fonts | Fonts |
| Iconify | Icons |
| DiceBear | Tutor avatar in the conversation |
| Unsplash and Pexels | Cover images |
Browser speech recognition in Reading activities
In Reading activities, the platform also uses the browser’s own speech recognition to detect when the student finishes reading. That recognition is provided by the browser vendor: in Chrome, for example, the audio is processed on Google’s servers.
LingoQuesto doesn’t control how the browser vendor handles that audio. If the browser doesn’t offer speech recognition, the Reading activity works the same way.
What is not used
- Web analytics, advertising, heat map or session recording tools.
- Native mobile apps or their tracking SDKs: the platform is web-only.
Changes to this list
When LingoQuesto adds or replaces a provider that processes user data, this document is updated. The date of the last review appears at the top.