Privacy Policy — Eduwand

Eduwand ("we", "us") provides AI-powered classroom tools for K-12 teachers, schools, and districts. We take privacy — especially of children — seriously. This policy explains what we collect, how we use it, who we share it with, and the rights you have over your data.

This policy is provided as-is and is not legal advice. If you operate in a regulated jurisdiction (US/COPPA/FERPA, EU/GDPR, UK, UAE PDPL, etc.) you should have your counsel review the final terms before deployment.

1. Information we collect

From teachers:

Account info: name, email, school name, subjects/grades you teach.
Authentication via Clerk (we never see your password).
Lessons, homework, and other content you create.
Usage telemetry: features used, AI generation counts, billing events.
Optional payment information (processed by Stripe — we do not store card numbers).

From students:

For live sessions: a name (which can be a nickname) and per-question responses. No accounts required.
For homework: a name they enter at the start, and per-question responses.
For practice/parent reports: name + assessment scores imported by the teacher.
We do not collect student emails, addresses, or government IDs.

From parents:

If a teacher generates a parent report link, the parent only views the report — we do not collect identifying info from parents who follow the link.

2. How we use information

To deliver the service: generate lessons, run sessions, store homework, calibrate practice, render parent reports.
To send service emails (account, billing, important platform changes).
To improve the AI models we route to. Lesson content sent to AI providers (Anthropic, OpenAI, Google) is governed by their respective enterprise terms — Eduwand does not allow them to use it for general model training.
To detect abuse, fraud, or violations of these Terms.
For aggregate analytics that informs product decisions. Aggregate data is never personally identifiable.

3. K-12 student data — FERPA & COPPA stance

When deployed in a US school, Eduwand acts as a school official with a legitimate educational interest under FERPA. Schools are the data controller; we are the processor. We do not sell, advertise to, or behaviorally profile students. We do not show ads in the product.

For students under 13, we rely on the school to provide consent under COPPA on behalf of parents. Direct-to-parent consent is required if a teacher invites students outside an institutional context.

4. Sub-processors

We use these third-party services to operate Eduwand. Each is bound by a data processing agreement.

Supabase (database, file storage)
Vercel (hosting)
Clerk (authentication)
Stripe (payments)
Anthropic, OpenAI, Google (AI lesson + image generation)
Sentry (error monitoring; PII-redacted)
Upstash (rate limiting)

5. Data retention

Lessons, homework, and student responses are retained while your account is active.
If you cancel, your content remains read-only and is purged 90 days after subscription end unless you re-activate.
Audit logs (security events) are retained for 12 months.
Backups are retained for 30 days.

6. Your rights

You can request access, correction, export, or deletion of your data by emailing privacy@eduwand.com. We respond within 30 days.

For schools and districts: you can export all your data at any time and have it deleted within 30 days of contract end.

7. Security

TLS in transit, AES-256 at rest.
Row-level security on multi-tenant data (Postgres RLS).
Mandatory MFA available via Clerk.
Annual penetration tests + ongoing dependency scanning.

8. Cookies

We use only essential cookies (session, CSRF, preferences). We do not use advertising or cross-site tracking cookies.

9. Changes to this policy

Material changes will be announced by email at least 30 days before they take effect. Minor edits (typos, clarifications) are made silently with the "Last updated" date refreshed at the top.

10. Contact

Privacy questions: privacy@eduwand.com
General: hello@eduwand.com