Privacy policy
Last updated: 19 September 2026
Data controller
DraftMyLesson Agenda (agenda.draftmylesson.com), by Drafted By.
JEAN-DOMINIQUE MICHAEL CASANOVA Drafted_By — CEIDG, NIP: 1133212109. ul. Dęblińska 2/73, 04-187 Warszawa, Polska.
Account and Agenda data
Agenda uses the account of the parent product shown below. It processes a technical account identifier, classes, events, timetable details, tasks, teaching records, annual progressions, notification subscriptions and synchronization state to provide the service under the contract. Use student pseudonyms. Free text may still contain personal data.
Connections and independent copies
Imported sessions and annual copies remain independent of the source: deleting the source does not necessarily delete its Agenda copy. ICS calendar URLs, including shared Google Calendar feeds, can expose calendar events and must remain private. If you connect cahier.online, classes, homework, dates and source links required for synchronization are exchanged. You can revoke that connection.
Analytics and technical storage
The session cookie is necessary for authentication. PostHog EU records pageviews and product interactions using cookies and local storage, linked to a technical account identifier after sign-in. Session replay is disabled. Umami measures visits and Sentry processes diagnostics. Measurement and reliability processing are based on legitimate interest. No advertising cookies are used.
Recipients and correspondence
Private infrastructure stores Agenda data. Cloudflare handles network requests; PostHog, Umami and Sentry receive the data described above. Agenda reminder and summary emails are sent by the parent product through its email provider (Amazon SES or Cloudflare Email), which processes recipients, content and delivery metadata. MXroute stores manual correspondence. Historical Resend records are separate and not erased by the transport migration. International processing depends on provider locations and applicable transfer safeguards.
Retention and deletion
Agenda data and account-linked operational events remain until deletion by the user or deletion of the account, subject to applicable obligations. Account deletion is orchestrated by the parent product, revokes access and retries failed downstream deletions. A minimal deletion replay marker without email or content remains for 90 days. Backups follow their rotation cycle and deletions are replayed before restoration. Server log retention follows diagnostic needs and rotation settings; no general 30-day purge is promised. Correspondence follows the request, contractual obligations and disputes.
Your rights
You may request access, correction, erasure, restriction, portability where applicable, and object to processing based on legitimate interest. Contact the address below. You may complain to the competent data protection supervisory authority.