Privacy Policy · EduPedian

The short version

We collect only what EduPedian needs to work for students, teachers, families and schools.
We never sell personal information, and we never use student information for advertising.
Students never see ads. The free teacher plan may show a teacher an ad before some AI features.
Schools control student records. Parents can ask their school (or us) to see, correct or delete their child’s information.
We don’t use student content to train AI models.

1. Information we collect

Information you or your school give us:

Account details: name, email address, password (stored only in scrambled form), account type, and an optional profile picture.
School information: schools, districts, classes, rosters and roles.
Schoolwork: lessons, assignments, tests, answers, grades, feedback, rubrics, files and attendance, behavior and other class records teachers keep.
Communication: messages, announcements, support requests and reports.
Payment details for paid plans, collected and stored by Stripe. We receive only limited details such as the card brand, last four digits and billing status.

Information collected as EduPedian is used:

Assessment activity a teacher chooses to record during tests, such as when answers are saved, time on a question and whether the page was left.
Whether you’re online, if you leave online status turned on, and when you opened assignments.
Technical information such as IP address, browser and device type, and logs of sign-ins and important actions, used for security and to fix problems.
Cookies needed to keep you signed in and secure. We don’t use advertising or cross-site tracking cookies for students.

2. How we use information

To provide EduPedian: show work to the right teachers, grade tests, send notifications and emails you’ve chosen, and so on.
To keep people safe: flag messages for review, investigate reports, and prevent fraud, abuse and cheating.
To secure accounts, including two-step verification.
To support you when you contact us.
To improve EduPedian using information about how features are used. Where possible this is aggregated or de-identified.
To process payments and meet legal, tax and accounting duties.

We do not sell personal information, build advertising profiles of students, or use student information for any purpose other than providing EduPedian to their school or for things the school or parent has asked for.

Inside EduPedian: students’ work and records are visible to their teachers and to authorized school or district staff. Verified parents and guardians see their own student’s released grades and related information. Students don’t see other students’ records or profile pictures.
EduPedian staff see personal information only when needed to support, secure or moderate the service. Viewing private messages requires a recorded reason and is logged.
Service providers who run parts of EduPedian for us under contracts that limit what they can do with the information: for example, hosting and database (Supabase, Vercel), email delivery (Resend), payments (Stripe), and AI features used by teachers.
The law: we may share information when required by law, or to protect someone’s safety. Where allowed, we’ll tell the affected school first.
Business changes: if EduPedian is sold or merged, information stays protected by this policy, and we’ll give notice before it’s covered by a different policy.

4. Children and students

Children under 13 use EduPedian only through their school. The school gives consent for educational use on behalf of parents, as COPPA allows, and we use children’s information only for that school’s educational purposes.

Under FERPA, schools control students’ education records. We process them for the school as a “school official” and follow the school’s instructions.

Parents can review their child’s information, ask for corrections, or ask us to delete it and stop collecting more. Please contact the school first; you can also email us at [contact email, e.g. support@edupedian.com], and we’ll work with the school to respond.

We also follow state student-privacy laws that apply to us, such as California’s Student Online Personal Information Protection Act (SOPIPA).

5. How long we keep information

We keep information while an account or school uses EduPedian. Schools and districts can set how long assessment activity logs are kept. When an account is closed, or a school asks us to, we delete or de-identify personal information within a reasonable time, except for what we must keep by law (such as payment records), records needed to resolve disputes or safety matters, and copies in backups, which are overwritten on a regular schedule.

6. Security

We protect information with encryption in transit, access rules enforced in the database, two-step verification for teachers and staff, private file storage with short-lived links, and logs of sensitive actions. No system is perfectly secure. If a breach affects your information, we’ll notify you and your school as the law requires.

7. Your choices and rights

Update your name, picture, online status and email settings in Settings.
Ask for a copy of your information, a correction, or deletion. Requests for school-managed accounts go through the school.
Depending on where you live, you may have more rights under state law. We won’t treat you differently for using them.

To make a request, use Settings or email [contact email, e.g. support@edupedian.com]. We may need to confirm your identity first.

8. Where information is stored

EduPedian is run from the United States, and our service providers may store information in the United States. If you use EduPedian from elsewhere, your information will be transferred to and processed in the United States.

9. Changes to this policy

If we make a significant change, we’ll tell you in EduPedian before it takes effect and ask you to review it. We won’t make a significant change to how we use student information already collected without the required notice and consent.

10. Contact

Questions or requests: [contact email, e.g. support@edupedian.com], or [Company legal name], [Mailing address].