Edura Privacy Policy

1. Overview

Edura ("we," "our," or "us") provides an educational platform that enables teachers to create interactive, AI-assisted assignments for their students. This Privacy Policy describes how we collect, use, and protect personal information when students and teachers use Edura.

2. Information We Collect

We collect only the minimum information necessary to operate Edura effectively:

• Teacher Information: Name, email address, school affiliation, and class details.
• Student Information: Name, email address (if applicable), date of birth (for age verification), class code, assignment interactions (text responses, scores, and feedback).
• Technical Information: Browser type, device type, and limited log data for performance and security.

We do not collect biometric, location, or advertising data. We do not collect information from children under 13 years of age.

3. How We Use Information

We use collected information to:

• Provide and improve Edura's features;
• Support classroom instruction and grading;
• Maintain system security;
• Conduct anonymized analytics to improve learning outcomes.

We do not sell or use data for targeted advertising.

4. Legal Basis and Compliance (FERPA, COPPA, SOPIPA)

FERPA Compliance: Edura acts as a School Official under the Family Educational Rights and Privacy Act (FERPA) (20 U.S.C. § 1232g; 34 CFR Part 99). We use student data solely for authorized educational purposes and comply with all FERPA requirements, including:

• Using student data only for educational purposes
• Not selling or disclosing student data to third parties
• Providing students with the right to access and export their educational records
• Deleting student data upon request from schools or students
• Maintaining appropriate security measures to protect student data

COPPA Compliance: Edura complies with the Children's Online Privacy Protection Act (COPPA). We do not collect information from children under 13 years of age. Users must be 13 years or older to create an account. This policy is in place to protect the privacy of children online. If you are under 13, please contact your teacher or parent for assistance.

Age Verification: During account creation, we collect and verify your date of birth to ensure you meet the age requirement. This information is stored securely and used solely for age verification purposes.

SOPIPA Compliance: Edura complies with the Student Online Personal Information Protection Act (SOPIPA) (California Business and Professions Code § 22584). We:

• Do not sell student information
• Do not use student information for targeted advertising
• Do not create profiles of students for advertising purposes
• Only disclose student information as necessary for educational purposes or as required by law
• Implement and maintain reasonable security procedures to protect student information
• Delete student information upon request from schools or districts

Data Use Restrictions: Across all compliance frameworks, Edura commits to using student data exclusively for educational purposes. We do not sell, rent, or trade student information, and we do not use student data for any commercial purpose unrelated to the provision of educational services.

5. Data Retention and Deletion

We retain student data only for the duration of an active class or assignment. Teachers or schools may request deletion at any time. After a pilot or course ends, student data is deleted or anonymized within 30 days.

6. Data Security

All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). We use Supabase and Vercel as secure infrastructure providers with built-in encryption and access controls.

Access to personal information is limited to authorized personnel and restricted by role.

7. Data Sharing

We do not sell, rent, or trade student information. We do not share personal information with third parties except:

• When required by law (e.g., court orders);
• When necessary for platform hosting and infrastructure (e.g., Supabase for database and authentication, Vercel for application hosting), under strict data processing agreements that ensure FERPA, COPPA, and SOPIPA compliance;
• When necessary for AI services (e.g., OpenAI for AI-powered conversations and grading), under strict data privacy agreements that protect student information (see Section 7.1 below);
• For educational research purposes, using only de-identified and aggregated data (as permitted by SOPIPA).

We have executed Supabase's General Data Processing Agreement, which governs how Supabase processes personal data on our behalf. The DPA incorporates Standard Contractual Clauses and Supabase's security commitments, ensuring that student and teacher information remains protected when stored in Supabase services.

No Targeted Advertising: We do not use student information for targeted advertising, and we do not allow third parties to use student information for advertising purposes.

7.1 AI Service Provider Data Handling (OpenAI)

Edura uses OpenAI's API services to power AI-assisted conversations and automated grading features. OpenAI's data handling practices for API customers include strong privacy protections:

OpenAI Privacy Policy: For more information about OpenAI's data handling practices, please review OpenAI's Privacy Policy.

Our Commitment: While we use OpenAI's services to provide AI-powered educational features, we maintain our commitment to student privacy by ensuring that data sharing with OpenAI is limited to what is necessary for providing the Service, and that OpenAI's strong privacy protections for API customers are in place.

8. Rights and Choices

Teachers, students, and parents may:

• Request access to data: Students can export all their data including profile information, published grades, and conversation transcripts (FERPA right to inspect records). This feature is available in the student profile page.
• Request deletion of data: Students can delete their own accounts and all associated data at any time. Teachers can remove students from their classes.
• Review this policy at any time;
• Contact us with privacy questions.

FERPA Rights: Under FERPA, students have the right to inspect and review their educational records. Our data export feature allows students to download all their personal information and published educational records in a machine-readable format.

9. Accessibility

Edura is designed in alignment with WCAG 2.1 AA accessibility standards.