EduEducator Privacy Policy

Effective Date: April 10, 2026

1. Information We Collect

We collect only the data necessary to provide our Services:

• Names: Teacher and student names as entered by users.
• Email Addresses: For account creation, authentication, and communication.
• Assignments and Student Work: Text, files, and grading inputs submitted by teachers and students.

We do not collect unnecessary personal data.

2. How We Use Your Information

We use the collected information to:

• Provide grading services through AI.
• Allow teachers to manage classes, assignments, and grading records.
• Authenticate users via Google OAuth (when chosen).
• Respond to support requests and improve our Services.

Assignments and student work are transmitted to Google Vertex AI for grading and feedback. This processing is automated and used only to deliver results back to the teacher. We do not sell, rent, or share personal data for advertising purposes.

3. Google User Data and OAuth Compliance

EduEducator’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only request the minimum scopes required to provide grading and file access functionality.

• We do not use Google user data for advertising.
• We do not transfer Google user data to third parties except as necessary to provide Services (for example, Google Vertex AI processing of assignments).

4. FERPA and School Official Designation

When EduEducator is used by a school, district, or teacher for educational purposes, we act as a “school official” with a legitimate educational interest under FERPA, and we process student education records solely on behalf of, and at the direction of, the Local Educational Agency (LEA)/School. We:

• Use student records only to provide and improve the educational services requested by the LEA/School.
• Do not disclose student education records to third parties except as authorized by the LEA/School, or as required by law.
• Limit access to student records to authorized personnel with a need to know, using role-based access controls.
• Enable the LEA/School to access, correct, export, and delete student records on request.

5. COPPA and Student Accounts

EduEducator supports compliance with the Children’s Online Privacy Protection Act (COPPA):

• We do not allow children under 13 to create accounts for general use without verifiable parental consent.
• For school-directed use, we rely on the LEA/School to provide consent and authorization on behalf of parents and to serve as the point of contact for parental rights, consistent with FTC guidance.
• Parents may request to review or delete their child’s personal information and may refuse further collection by contacting their child’s school or us via the contact information below.
• We collect only information reasonably necessary for the educational purpose and do not use children’s data for advertising or marketing.

6. Google Classroom and Integrations

When you connect Google Classroom or Drive, we request only the minimum scopes necessary to enable assignment sync, roster association, and file access as directed by the teacher or school. We may store limited metadata (such as course IDs, assignment IDs, student roster identifiers, and file references) to provide the integration. You can disconnect the integration at any time, and previously stored tokens will be revoked.

7. Analytics and Learning Tools

We may collect product analytics (for example, feature usage and performance metrics) to operate, maintain, and improve the Services, and to develop learning tools. Where feasible, analytics are aggregated or de-identified. We do not build profiles for non-educational purposes, do not sell data, and do not use or permit third parties to use student data for targeted advertising. Schools may request additional analytics controls or opt-outs.

8. Data Sharing and Disclosure

We may share information only in these cases:

• With Service Providers: Such as Google Vertex AI (and other providers) which process assignments to generate grades and feedback.
• With Vendors: Infrastructure providers (e.g., hosting, authentication, storage) such as Google Cloud.
• For Legal Reasons: If required by law, regulation, or government request.

9. Data Retention

• Names and Emails: Retained for as long as your account is active.
• Assignments and Student Work: Retained only as long as necessary to provide grading and reporting services. Teachers or authorized school officials may request deletion at any time. Unless otherwise directed by the LEA/School, student work associated with inactive classes may be deleted after 12 months.
• Deletion Requests: Upon a verified request from a teacher, parent (via the school), or authorized school official, we will delete student personal information within 30 days and purge backups within 90 days, subject to legal obligations.
• Google OAuth Tokens: Stored securely and may be revoked at any time through your Google Account settings.

10. Security

We use industry-standard safeguards to protect your information, including encryption in transit and at rest, secure authentication, and limited access controls. While we take strong measures, no system is completely secure.

Breach Notification: In the event of unauthorized access to student education records, we will notify the affected LEA/School without unreasonable delay and consistent with applicable law.

11. Your Privacy Rights & State Student Data Laws

Depending on your location, you may have rights under privacy laws such as:

• FERPA (Family Educational Rights and Privacy Act) – protects student education records.
• CCPA (California Consumer Privacy Act) – California residents may request access to or deletion of their data.

California AB 1584 & SOPIPA Compliance

EduEducator is committed to protecting student data in accordance with California law, including AB 1584 and the Student Online Personal Information Protection Act (SOPIPA):

• Data Ownership: Student records remain the property of and under the control of the Local Educational Agency (LEA)/School District. EduEducator does not own student data.
• No Targeted Advertising: We do not use student data for targeted advertising, nor do we create student profiles for non-educational purposes.
• Possession of Work: Students may maintain possession and control of their own work by downloading individual submissions and feedback at any time through the student dashboard.
• Data Breaches: In the event of an unauthorized disclosure of student records, EduEducator will notify the affected LEA/School District without unreasonable delay.
• Deletion Requests: Parents or students wishing to delete or inspect records must coordinate through their school district. EduEducator will honor deletion requests from authorized school officials.

You can exercise your rights or ask questions at any time by contacting us at edueducatorcentral@gmail.com.

12. Third-Party Services

Our Services rely on third parties, including the Google platform, Vertex AI, and MongoDB for assignment grading and storage. This Privacy Policy does not govern third-party practices, but we only work with providers who meet strict privacy and security standards.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be posted on our website with a revised “Effective Date.”

14. Contact Us

If you have questions or concerns about this Privacy Policy, please contact: