Effective Date: May 17, 2023
Introduction
At SchoolAI, we are committed to protecting the privacy and security of our users' information, especially that of students and educators. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you interact with our platform ("SchoolAI", "Platform", "Service", "we", "us", or "our"). By using SchoolAI, you agree to the terms of this Privacy Policy.
Please note that our Service is designed for Educators and Educational Institutions, and as such, we adhere to applicable federal student privacy laws, including the Family Educational Rights and Privacy Act (FERPA) and the Children's Online Privacy Protection Act (COPPA).
1. Information We Collect
To provide our Service, we collect information in the following categories:
a. Account Information: When you create an account with SchoolAI, we collect your name, email address, and password. If you are an educator or administrator, we may also collect your role and the name of your educational institution.
b. Student Data: We collect information about students provided by the educational institution, educators, or students themselves. This may include student names, grades, and school-related performance data. We collect only the minimum amount of information necessary to provide our Service. We mask, hide, or disable third party tracking of student usage of the application, and we anonymize student data in cases when it is sent to a third party provider. We regularly review our application design, infrastructure, and user interface to ensure that no personally identifiable information is collected from students and transmitted to third parties.
c. User-generated Content: When you interact with the SchoolAI platform, we collect the questions you ask, the responses generated by the AI, and any feedback you provide.
d. Usage Data: We collect information about how you interact with our Service, such as the features you use, the time you spend on the platform, and the device you use to access the Service.
e. Technical Data: We collect technical data, including your IP address, browser type, device information, and operating system, to improve our Service and ensure compatibility with various devices.
2. How We Use Your Information
We use the information we collect to:
a. Provide and improve our Service, including personalizing the user experience. b. Support user accounts, authenticate users, and manage access control. c. Analyze usage patterns to enhance user experience and improve our services. d. Communicate with you about your account, updates, or customer support inquiries. e. Ensure the security of our Service, detect and prevent fraud, and enforce our Terms of Service. f. Comply with legal obligations and respond to lawful requests from authorities.
3. Information Sharing and Disclosure
We do not sell or rent your personal information to third parties. We may share your information in the following circumstances:
a. Service Providers: We may share your information with third-party service providers that help us operate and maintain our Service, such as hosting providers and security services. These providers are required to protect your information and use it only for the purposes for which it was disclosed.
b. Legal Compliance: We may disclose your information if required by law, such as in response to a subpoena, court order, or government request.
c. Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
4. Data Retention and Deletion
We retain your personal information only for as long as necessary to fulfill its intended educational purpose. You may request the deletion of your account and personal information by submitting a request on our Privacy Request page. For students, parents or guardians may request the deletion of their child's personal information by contacting the student's educational institution or us directly.
5. Security
We employ industry-standard security measures to protect your personal information, including encryption, hashing, and salting. We regularly review and update our security practices to address evolving threats and vulnerabilities.
6. Access and Control
Parents or guardians have the right to review their child's personal information collected by our Service, correct any inaccuracies, and request the deletion of information that violates privacy laws. To exercise these rights, please contact us at hello@schoolai.com or the student's educational institution.
7. Third Party Vendors
SchoolAI partners with select third-party vendors, including Amazon AWS, ElephantSQL, and OpenAI, to enhance our service offerings and infrastructure. These vendors receive limited personal information necessary for providing essential services like cloud hosting, database management, and AI-driven features. We rigorously assess these vendors to ensure they uphold stringent data protection and privacy standards, minimizing any risks associated with data handling. Your personal information is shared strictly for operational purposes and in compliance with our stringent security protocols, aligning with our commitment to safeguarding user privacy. Additionally, we ensure that OpenAI and other AI providers do not use any personally identifiable information, conversations, completions, inferences or any other data in their model training.
8. Changes to This Privacy Policy
We may update our Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. We will notify you of any material changes by posting the updated policy on our website, and we encourage you to review it periodically.
9. International Data Transfers
SchoolAI is based in the United States (US). If you are accessing our Service from outside of the US, please note that your information may be transferred to, stored, and processed in the US. By using our Service, you consent to the transfer of your information to the US and the use and disclosure of your information in accordance with this Privacy Policy.
10. Contact Us
If you have any questions, concerns, or requests related to this Privacy Policy, please contact our Data Protection Officer at: Caleb Hicks 558 North Sage Vista Drive Lehi UT 84043 caleb@schoolai.com
11. Compliance with Student Privacy Laws
We adhere to applicable federal student privacy laws, including the Family Educational Rights and Privacy Act (FERPA) and the Children's Online Privacy Protection Act (COPPA). We have implemented measures to ensure compliance with these laws, as outlined in our engineering specifications. If you believe we have not complied with these laws, please contact us at hello@schoolai.com.
12. California Privacy Rights
If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA), including the right to access, delete, and opt-out of the sale of your personal information. Since we do not sell your personal information, the right to opt-out of the sale does not apply. To exercise your right to access or delete your personal information, please contact us at hello@schoolai.com.
13. EU/EEA and UK Data Subjects
If you are a data subject in the European Union (EU), European Economic Area (EEA), or the United Kingdom (UK), you have certain rights under the General Data Protection Regulation (GDPR) or UK GDPR, including the right to access, correct, delete, restrict the processing of, or object to the processing of your personal information. To exercise these rights, please contact us at hello@schoolai.com.
Additionally, if you are an EU/EEA or UK data subject, you have the right to lodge a complaint with your local data protection authority.
14. Age Restrictions
Our Service is intended for use by educational institutions, educators, and students. If we become aware that we have collected personal information from a child under the age of 13 without verifiable parental consent, we will take steps to delete that information promptly.
15. Third-Party Links
Our Service may contain links to third-party websites, products, or services. We are not responsible for the privacy practices of these third parties, and we encourage you to review their privacy policies before providing them with your personal information.
16. Updates to Your Information
If you need to update or correct your personal information, please contact us at hello@schoolai.com or update it directly through your account settings.
By using our Service, you acknowledge and agree to the terms of this Privacy Policy. If you do not agree with any part of this Privacy Policy, you should not use our Service.
17. Data Usage Compliance (Google Single Sign On)
SchoolAI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
