Privacy Policy

1. Introduction

Paper AI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-assisted writing assessment platform (the "Service"). This policy applies to all users, including students, instructors, and administrators.

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us, including:

• Account information: name, email address, password, and role (student, instructor, or administrator)
• Profile information: institutional affiliation, course enrollment information
• Contact information: email addresses and any other information you choose to provide

2.2 Educational Records

As an educational platform, we collect and process educational records, including:

• Assignment submissions: written work, drafts, and final submissions
• AI interactions: prompts sent to AI models, AI responses, and usage patterns
• Edit history: text edits, revisions, paste events, and writing process data
• Reflections: text, audio, or video reflections submitted by students
• Grades and feedback: instructor assessments and rubric scores
• Analytics data: time on task, revision depth, engagement metrics, and process analytics

2.3 Automatically Collected Information

We automatically collect certain information when you use our Service:

• Usage data: pages visited, features used, and interaction patterns
• Device information: browser type, operating system, and device identifiers
• Log data: IP addresses, access times, and error logs
• Cookies and tracking technologies: to maintain session state and improve user experience

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Provision: To provide, maintain, and improve our Service, including AI assistance features, assignment management, and grading tools
• Educational Assessment: To enable instructors to assess student work, track AI usage patterns, and evaluate learning outcomes
• Analytics and Reporting: To generate insights about writing processes, AI usage patterns, and academic performance for instructors and institutions
• Communication: To send you service-related notifications, updates, and respond to your inquiries
• Security: To detect, prevent, and address technical issues, fraud, and unauthorized access
• Compliance: To comply with legal obligations, including FERPA (Family Educational Rights and Privacy Act) and other applicable educational privacy laws

4. FERPA Compliance

Paper AI is designed to comply with the Family Educational Rights and Privacy Act (FERPA). We treat all student educational records as confidential and protected information. We:

• Only access educational records as necessary to provide our Service
• Do not sell or rent student educational records to third parties
• Maintain appropriate security measures to protect educational records
• Provide institutions with tools to manage student data in compliance with FERPA
• Allow authorized school officials to access records as permitted by FERPA

If you are a student, you have the right to access your educational records and request corrections through your institution or directly through our Service.

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

5.1 With Your Institution

We share educational records with authorized personnel at your educational institution (instructors, administrators) as necessary to provide the Service and in compliance with FERPA.

5.2 Service Providers

We may share information with third-party service providers who perform services on our behalf, such as:

• Cloud hosting providers (Supabase) for data storage and processing
• AI service providers (OpenAI, Anthropic, Google) to provide AI assistance features
• Analytics providers to help us understand usage patterns

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

5.3 Legal Requirements

We may disclose information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

6. Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security assessments and updates
• Limited access to personal information on a need-to-know basis
• Secure data centers with physical and digital safeguards

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

7. Your Rights and Choices

You have certain rights regarding your personal information:

• Access: You can access and review your personal information and educational records through your account
• Correction: You can update or correct your personal information through your account settings
• Deletion: You may request deletion of your account and associated data, subject to legal and institutional retention requirements
• Data Portability: You can request a copy of your data in a portable format
• Opt-Out: You can opt out of certain communications, though service-related communications may still be sent

To exercise these rights, please contact us using the information provided in the "Contact Us" section below. Note that some requests may be subject to verification and institutional policies.

8. Data Retention

We retain your information for as long as necessary to provide our Service and comply with legal obligations. Educational records may be retained in accordance with your institution's policies and applicable laws, including FERPA. When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal or institutional purposes.

9. Children's Privacy

Our Service is designed for use by educational institutions and is intended for users who are at least 13 years old. We comply with the Children's Online Privacy Protection Act (COPPA) and FERPA. If you are under 13, please do not use our Service without appropriate parental or institutional consent.

10. International Users

If you are using our Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States. By using our Service, you consent to the transfer of your information to the United States and processing in accordance with this Privacy Policy.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: