Privacy Policy

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address
• Name (if provided)
• Organization/school name
• Authentication credentials (managed by our authentication provider)

1.2 Documents and Content

When you use our Service, you may upload:

• School documents (reports, policies, assessments, etc.)
• Images and supporting materials
• Any other files you choose to submit for analysis

1.3 Google Drive Data

If you connect your Google Drive account, we access:

• Only files you explicitly select through the Google Picker interface
• We use the drive.file scope, which limits access to files you choose
• We do not access, browse, or read any other files in your Google Drive

1.4 Usage Information

We automatically collect:

• Log data (IP address, browser type, access times)
• Device information
• Pages visited and features used

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Process and analyze your uploaded documents using AI
• Generate school quality reports and assessments
• Communicate with you about your account and the Service
• Respond to your requests and support inquiries
• Detect and prevent fraud or abuse
• Comply with legal obligations

3. AI Processing

Our Service uses artificial intelligence to analyze documents and generate reports. Specifically:

• Your documents are processed by our AI provider (Anthropic Claude)
• Document content is sent to these providers for analysis
• AI-generated assessments are stored in association with your account
• We do not use your documents to train AI models

4. Information Sharing

We do not sell your personal information. We may share information with:

• Service Providers: Third parties that help us operate the Service (cloud hosting, AI processing, payment processing, authentication)
• Legal Requirements: When required by law, regulation, or legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize sharing

4.1 Third-Party Services We Use

• Google Cloud Platform (hosting and document extraction)
• Anthropic (AI analysis and assessment)
• Clerk (authentication)
• Stripe (payment processing)
• Google Drive API (optional file import)

5. Data Retention

• Active Accounts: We retain your data for as long as your account is active
• Deleted Accounts: Upon account deletion, we retain your data for 30 days to allow for recovery, after which it is permanently deleted
• Documents: You may delete individual documents at any time; deleted documents are removed within 30 days
• Backups: Backup copies may persist for up to 90 days before being purged

6. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption in transit (TLS/HTTPS)
• Encryption at rest for stored documents
• Access controls and authentication
• Regular security assessments

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Your Rights and Choices

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Export: Download your documents and reports
• Disconnect: Revoke Google Drive access at any time

To exercise these rights, contact us at the address below.

8. Children's Privacy

Our Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

9. California Privacy Rights

California residents have additional rights under the CCPA, including the right to know what personal information is collected, request deletion, and opt out of sales (we do not sell personal information).

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the effective date. Your continued use of the Service after changes constitutes acceptance of the updated policy.