Version 2026-08-08.1

Privacy & minor safety.

LyranPortal uses the minimum information needed to reconcile registration, deliver classes, provide protected coursebook workspaces, receive mathematical work, return private feedback, and coordinate optional signed-book packages. A participant's work, identity, and score are private unless that participant makes a separate, item-specific sharing request and the owner approves it.

Participant categories

A participant may describe their purpose as a learner, an educator, or an independent mathematics reader. This category personalizes the workspace; it does not change the participant's age band, paid coursebook access, or privacy protections. An educator participant is not a LyranPortal administrator and cannot see another participant's private notebooks, submissions, identity, feedback, grades, examination keys, or owner controls.

Private notebooks and optional coursebook sharing

Coursebook notebooks, notes, proofs, proposed problems, and solution drafts are private by default. They are available only to their author and Amir Parvardi as the portal owner and instructor for review, support, grading, and moderation. Private work is not automatically licensed for teaching materials, advertising, or later products.

A participant may separately request to share one frozen version with other currently entitled participants in the same Lyran masterclass. Sharing is never automatic. The owner first checks mathematical content, rights, personal information, and suitability. Approval applies only to that particular version and coursebook. This launch provides no Internet-public participant profiles or solutions.

For an approved item, the participant chooses a pseudonym, a chosen-name byline, or no byline. A chosen-name byline is a display choice, not an identity verification. A participant may request withdrawal from the shared coursebook view. Under-13 participants cannot share notebook work or appear in the Hall of Fame during this launch. Participants aged 13–17 remain subject to guardian attestation and use the more protective publication choices described in the portal.

Hall of Fame

Each coursebook's Hall of Fame is a small, owner-curated collection of approved mathematical contributions, such as an elegant proof, a clear exposition, or a useful generalization. It is not a leaderboard: it publishes no enrollment counts, class rank, private grades, or automatic score-based placement. A Hall of Fame entry can reference only a version already approved for that coursebook's protected participant view.

Services and purposes

• Setmore and its payment processor hold booking and class-payment records.
• Zoom carries the live classes. Zoom recording remains off for this launch; attendance is not consent to recording.
• Cloudflare hosts the portal, database, private files, compilation isolation, and queues.
• Resend sends transactional class-material emails and private PDF attachments after enrollment verification.
• OpenAI may process privacy-filtered proof text for Lyran Sol Review only when age and consent rules permit. It is never the official grader.
• Amazon is an optional external retailer. The portal sends no order details to Amazon; following an Amazon link is governed by Amazon's own privacy and purchase terms.

Class recordings and future packages

Live Zoom classes are not recorded in this launch. Any future Lyran package should use a separate instructor-only recording that contains no participant video, voice, chat, name, account information, notebook, submission, or feedback. Participant data or a participant-authored contribution cannot be included in a future video or sale package without a separate, specific permission and license for that exact use. Class registration, attendance, notebook review, and coursebook-only sharing do not provide that permission or license.

Live comments, aliases, and handwritten class copies

A participant may request one display alias for the 2026 program and submit short text or allowlisted LaTeX comments to a private moderation queue. Approval and public featuring are separate owner actions. Under-13 comments remain teacher-only; sharing for other minors follows the recorded consent setting. Pending, rejected, approved, featured, and withdrawn states are retained only for the class program and are purged with aliases and live pen revisions by January 31, 2027.

Identity and academic records

A participant may choose a private display name. Blind grading uses a random examination ID. Access codes are HMAC-protected at rest. The purchaser email is HMAC-indexed and AES-GCM encrypted, verified against Setmore by the owner, and used only for transactional class access and PDF delivery. A no-payment waitlist stores the private display name, age band, consent record, and an encrypted contact email; a separate HMAC prevents duplicate entries without exposing the address. Only the allowlisted owner can decrypt contact details. Download routes recheck the exact active session booking; paid materials are never public assets.

Optional signed-book packages

For an active participant requesting an author-sent package, LyranPortal stores only destination country (Canada or United States), selected coursebook codes, early-rate eligibility, fulfillment status, versions, and timestamps. Shipping addresses, package-payment credentials, and Amazon purchases are not stored in LyranPortal. Address, invoice payment, and tracking are handled through a separate private exchange with the owner. Direct Amazon orders are between the purchaser and Amazon and produce no portal academic entitlement.

Each author-handled copy may receive a random public collectible serial with a typo-detection checksum. The serial contains no name, email, address, booking number, payment reference, or sequence count. It is not a password, ebook activation code, or transferable licence, and the portal provides no public reverse lookup.

Permanent page-at-a-time web editions

An approved paid masterclass enrollment issues one permanent digital copy of the matching coursebook edition. Private object storage delivers only the currently authorized page or registered page image. The reader exposes no complete PDF, EPUB, ZIP, source TeX, object-storage key, or bulk-page endpoint. A visible random digital copy ID appears as a deterrent and recovery reference; it is not a credential.

The reader records short-lived pseudonymous device registrations, page-access events, and throttling events to enforce the three-device, request-burst, and sequential-page safeguards. These controls reduce convenient bulk extraction but cannot prevent screenshots, screen recording, developer-tool access, or deliberate page-by-page saving. Progress and bookmarks remain private to the durable library account.

No-payment waitlist

Waitlist details are used only for owner follow-up about a full or closed offering. Joining creates no booking, payment, claim, seat reservation, enrollment, or entitlement. An owner-recorded promotion is only an invitation to use the ordinary registration flow; capacity and payment are still independently checked, and promotion cannot activate access.

AI processing

The portal removes known names, email addresses, phone or payment-like numbers, booking identifiers, links, document metadata, and other detected direct identifiers before an eligible proof is sent. Participants should still avoid writing personal information in proof text. Requests use no web tools, request no retention with store:false, and carry a nonidentifying safety identifier. The feature remains disabled until its mathematical, privacy, and prompt-injection evaluation passes. Owner publication is required before any AI-assisted finding reaches a participant. A signed-in participant may opt out at any time without academic penalty.

Participants under 18

Ages 13–17 require adult purchaser or guardian attestation and the current AI disclosure. Under-13 access is guardian-managed and manually graded; under-13 notebook sharing is disabled, and no OpenAI processing occurs unless verified parental-consent compliance and Zero Data Retention are both separately established.

Retention and deletion

Class work, notebook drafts and versions, sharing and moderation records, live comments and ink, compiled files, academic access codes and sessions, signed-package selections, waitlist contacts, reader telemetry, and related temporary audit events are scheduled for purge by January 31, 2027. Pseudonymous durable library credentials, permanent digital-copy receipts, release records, progress, bookmarks, and non-PII signed-copy provenance remain until verified account deletion. The original masterclass access code continues through its separately retained keyed library credential; it is never stored in readable form. Records retained for accounting are pseudonymized while the minimum registration, enrollment, and entitlement links remain. Access, correction, withdrawal, recovery, or deletion requests require verification of the digital copy ID and original purchase evidence.

A signed-in reader can permanently delete the entire digital library account by confirming one of its visible digital copy IDs and an exact deletion phrase. That removes digital copies, durable credentials, sessions, devices, reading telemetry, progress, and bookmarks. Only an opaque account tombstone and non-PII signed physical-copy provenance remain where required to keep collectible replacement history coherent.

Contact

Use the contact method on Parvardi.ca and include the Setmore booking ID only through a private message.