This Privacy Policy describes how EducAItor collects, processes, stores, and discloses personal information when you use the EducAItor application at app.educaitor.pro. By accessing or using the Service, you consent to the data practices described in here.
1. Information We Collect
Information you provide at account creation and during onboarding:
- Full name and email address
- Password — stored exclusively as a one-way cryptographic hash; we are technically incapable of reading or recovering your password
- Country and state or region
- Subjects taught, grade levels, and years of teaching experience
- Date of birth — collected solely for the purpose of sending a birthday message and stored with field-level encryption
- Profile photograph (optional)
Information generated through your use of the Service:
- Lesson plans and worksheets generated through the Service
- Grading sessions, including images of student work you upload
- Chat messages submitted to the Professional Support feature
- Usage data reflecting feature consumption within your current billing period
- Analytics data including time saved, lessons created, and papers graded
- Referral activity and earnings
Billing information:
- Stripe customer identifier and subscription identifier, used solely to manage your account status
- Payment card details are processed and stored exclusively by Stripe and are never transmitted to or stored on our systems
Technical data:
- Standard technical information including IP address, browser type, and device type, collected automatically through your use of the Service
2. Student Data
We do not collect, store, or process student personally identifiable information. This is a foundational architectural principle of the Service — not a configurable setting. You are instructed to ensure that student names and identifying information are not visible in any work uploaded for grading. The Service scans uploads for identifying information and prompts you prior to proceeding. Student work images are stored under anonymized identifiers with no association to real student identities.
3. How We Use Your Information
- To provide, operate, and personalize the Service, including generating AI-powered content tailored to your teaching profile
- To manage your subscription, enforce plan usage limits, and process billing
- To send transactional communications, including account verification, password reset, billing confirmations, usage warnings, and birthday messages
- To improve the Service through aggregated, anonymized usage data that cannot identify you individually
With respect to AI training: anonymized images of student work — from which all teacher and student identifying information has been irreversibly removed — may be retained following account deletion and used solely to improve the accuracy of our grading models. This practice is disclosed at the point of upload within the Service.
We do not sell, rent, trade, or otherwise transfer your personal information to any third party. We do not share your data with advertisers, your school, your district, or your employer under any circumstances.
4. Third-Party Data Processors
- Amazon Web Services (AWS) — database hosting, file storage, serverless computing infrastructure, transactional email delivery, and AI inference processing
- Anthropic (Claude, accessed via Amazon Bedrock) — AI model underlying lesson plan generation, grading assistance, and professional support features
- Stripe — subscription management and payment processing
- Vercel — web application hosting and content delivery
We do not engage advertising networks, social media trackers, or any third-party analytics providers beyond those listed above.
5. Data Security
- Field-level AES-256-GCM encryption applied to your email address and date of birth prior to database storage, in addition to database-level encryption at rest
- One-way bcrypt hashing of all passwords — rendering them unrecoverable by us or any third party
- TLS encryption for all data transmitted between your device and our servers
- Server-side encryption for all files stored in our storage infrastructure
- Strict access controls ensuring your data is never accessible to other users of the Service
- All API keys and credentials stored exclusively in AWS Secrets Manager — never in application code
No security system is infallible. In the event of a data breach materially affecting your personal information, we will notify you without undue delay.
6. Data Retention and Deletion
Personal data is retained for the duration of your account. Upon account deletion, all personal data — including your profile, lesson plans, grading records, and chat history — is permanently and irreversibly deleted within thirty (30) days of your deletion request. The sole exception is anonymized grading images, from which all identifying information has been removed, which may be retained for AI improvement purposes as disclosed in Section 3. Temporary grading processing records are automatically purged after thirty (30) days.
7. Your Rights
- Access and correction — you may view and update your personal information at any time through account settings
- Data portability — you may export grading results as CSV and lesson plans as PDF from within the Service
- Deletion — you may permanently delete your account and all associated personal data through account settings at any time
- Opt-out — you may unsubscribe from non-transactional communications at any time via the unsubscribe mechanism in any such communication
8. Changes to This Policy
We reserve the right to modify this Policy at any time. Material changes will be communicated to you via email to the address associated with your account. Your continued use of the Service following such notification constitutes your acceptance of the revised Policy.