Privacy Policy

1. Introduction

Welcome to EduVerseAI Technologies LLC ("EduVerseAI", "we", "us", or "our"). EduVerseAI is an educational technology platform serving K–12 students, teachers, and homeschoolers in the United States. We respect your privacy and are committed to protecting the data we collect.

This Privacy Policy describes how we collect, use, disclose, and protect information, as well as your rights and choices regarding that information. Because we serve children under age 13 and handle educational data, this policy is designed to comply with the COPPA (Children's Online Privacy Protection Act) and FERPA (Family Educational Rights and Privacy Act).

By using or accessing our services, you agree to the terms of this Privacy Policy.

2. Scope & Who This Policy Covers

This policy applies to personal and educational data collected through our websites, applications, APIs, and related services ("Services"). It applies to all users, including students (including under-13), teachers, homeschool parents, school administrators, and others engaging with EduVerseAI in the K–12 context.

When a school or district uses EduVerseAI for its students, that school acts as the data controller under FERPA, and EduVerseAI acts as a service provider (or "school official") under FERPA when providing the Services.

3. Information We Collect & Why

We follow a principle of data minimization, collecting only what is necessary to provide our services. Below is a summary of data categories we collect and their purposes:

We do not collect sensitive personal information (e.g. full names, home addresses, Social Security numbers, financial data) by default. If any such data is required, additional consent or contract terms will apply.

4. How We Use & Share Information

Use by EduVerseAI

We use data to:

• Provide core platform functionality: generate lessons, quizzes, assignments, analytics
• Personalize learning experiences and adapt content for students
• Monitor system health, detect misuse, ensure security
• Conduct internal research and improvements on anonymized data
• Support customer service (e.g. technical support, issue resolution)

Sharing & Disclosure

We share data under limited, controlled circumstances:

• With Schools / Districts: Performance data and course data is shared with the school using EduVerseAI, as they "own" the student records.
• Service Providers: Third-party vendors (hosting, analytics, support services) may access data solely to support EduVerseAI's operations. They are contractually obligated to confidentiality and use restrictions.
• Legal / Safety Reasons: We may disclose data when required by law (e.g. subpoenas) or to protect safety (e.g. imminent harm).
• Business Transfers: In case of merger, acquisition, or sale, user data may be transferred to the successor, who will remain bound by privacy obligations.

We do not sell student or teacher data nor use it for targeted advertising.

5. Parental & Student Rights (COPPA / Children's Privacy)

Because we serve users under age 13, we comply with COPPA:

• For direct-to-consumer accounts, we require verifiable parental consent before collecting personal information from children under 13, unless the school acts as agent.
• When schools use the service, the school may provide consent on behalf of parents (only if properly informed and in educational context).
• Parents have the right to review, access, or delete their child's personal data. They may also withdraw consent at any time.
• We do not require children to provide more data than necessary, nor condition participation on disclosing more information.

6. FERPA & Our Role as School Official

Under FERPA, student education records are protected. EduVerseAI acts in a "school official" role:

• We enter contracts with schools stating: (a) we perform educational services, (b) the school retains control of data, (c) we use student data only under school direction, (d) we do not re-disclose PII without authorization.
• We do not claim ownership of student records – schools retain control.
• Schools handle parental requests to review or correct records; we support them in fulfilling those requests.
• We abide by the school's retention/deletion instructions for student data and content.

7. Data Retention & Deletion

We retain student/course data for as long as needed to provide the service or as required by contract. If an account becomes inactive or a school discontinues use, we will delete or anonymize data after a defined period (e.g. 12–24 months), unless the school requests otherwise. Teachers and schools may request deletion of content or accounts, and we will comply in coordination with the school.

8. Security Measures & Breach Notification

We implement industry-standard safeguards, such as:

• Encryption of data in transit and at rest
• Role-based access control (least privilege)
• Authentication, logging, and audit trails
• Regular security assessments and vulnerability testing
• Secure backups and recovery systems

In the event of a breach involving sensitive student data, we will:

1. Notify affected school(s) promptly
2. Assist with parent and regulatory notifications
3. Contain, investigate, remediate the breach
4. Review and strengthen security practices thereafter

9. Policy Updates & Notices

We may update this Privacy Policy over time. For material changes, we will:

• Provide prominent notice via email or in-app alerts
• Update the "Last Updated" date
• Not reduce protections for student data retroactively without additional consent if required

Continued use of the Services after updates constitutes acceptance of the revised policy.

10. Contact & Requests

If you have questions, concerns, or wish to exercise data rights (access, correction, deletion), contact:

We will coordinate with your school/district to fulfill your request according to COPPA, FERPA, and applicable laws.