Draft policy, not yet reviewed by a lawyer. Replace before relying on this for real users, especially for formal CCPA/FERPA/COPPA compliance or before onboarding a school or district.
What we collect. Your name and email (via Google sign-in), the classes/assignments/rubrics you create, essays you upload for grading, and basic usage data (pages visited, timestamps) used to operate and improve the Service.
AI processing. Essay text is sent to a single AI provider, Groq, for grading and for Calibration, on terms that do not train their models on this data and do not retain it beyond serving the request. Student essay content is never sent to any other third party, and is never used to train any AI model.
What we don't do.We don't sell your data or your students' data to anyone, for any reason. We don't run advertising, and we don't use student essay content for anything other than generating the grade and feedback you requested.
Students never create an account, log in, or interact with the Service directly. Only instructors do. Where student essays are protected education records under FERPA, we act as a "school official" with a legitimate educational interest on the instructor's (and their institution's) behalf: we use student data solely to provide the grading service the instructor requested, we don't re-purpose it for anything else, and an instructor or their institution can direct us to delete it at any time.
Because students don't interact with the Service directly, we don't knowingly collect personal information directly from children under 13 in the sense COPPA is concerned with. Where a school uses the Service with younger students, we rely on the school to obtain any consent required from parents/guardians for uploading student work, consistent with FTC guidance on schools acting as an agent for that consent in an educational context.
Schools and districts operating under state student-privacy laws (e.g., California SOPIPA, New York Ed Law 2-d, Illinois SOPPA) should contact us before onboarding to put a signed data privacy/processing agreement in place. We have not yet completed formal legal review for K-12 use and don't represent this Service as compliant with any specific state student data privacy law until that review and agreement are in place.
Your rights (including California / CCPA). You can access, export awareness of, clear, or permanently delete all of your data at any time from your Profile page, no request or waiting period required. Deleting your account removes your classes, assignments, submissions, grades, roster data, and calibration profiles.
Data retention. Data is kept until you delete it. Uploaded essay files and derived comments are deleted immediately when you delete a submission, class, or your account.
Sub-processors. We use Supabase (database, file storage, authentication) and Vercel (hosting) to run the Service, and Groq (AI inference) to generate grades and feedback. None of these process student data for any purpose other than operating the Service on our behalf.
Security incidents.If we become aware of a breach affecting your data, we'll notify affected account holders without undue delay.
Questions about this policy, or requests for a data privacy agreement, can be directed to the Service operator.