Privacy & Data Protection

How we protect student data and comply with FERPA/COPPA regulations.

FERPA Compliance

Gradebook Lite is designed to act as a "School Official" under the Family Educational Rights and Privacy Act (FERPA). We operate under the "Legitimate Educational Interest" exception, meaning we only access student data required to perform our function as a gradebook and grading assistant.

We do not sell student data.
We do not share student data with third parties for marketing purposes.
You (the teacher/school) retain full ownership and direct control of all records.

AI & Machine Learning Policy

Zero-Training Guarantee

We use enterprise-tier AI providers (OpenAI, Anthropic) to power our grading assistants.

✓No Model Training: Your student data (essays, grades, names) is never used to train public AI models.
✓Data Retention: AI providers may temporarily retain data for up to 30 days solely for abuse monitoring, after which it is permanently deleted.
✓Isolation: AI processing is stateless. One student's data never influences the grading of another student.

Data Storage & Security

Encryption

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Our database is hosted in a secure, SOC2 compliant facility.

Access Control

Strict Row-Level Security (RLS) ensures that only you can access your students' data. Even our own administrators cannot view your gradebook contents without explicit permission for support.