Privacy Policy

1. Introduction 

Preserving your privacy and being transparent about how we at Homeroom Hero ("Company," "we," or  "us") use your information is critical to earning your trust. This Privacy Policy (the "Policy") is intended to  inform you of our policies and procedures regarding the information we collect from you. This Policy,  together with our Terms of Service, describes how we collect, use, protect, and disclose your  information.  

By using or accessing our website, web application, smartphone applications (iOS and Android), or  desktop applications (macOS and Windows) (collectively, the "Services") in any manner, you  acknowledge that you accept the practices and requirements outlined in this Policy, and you hereby  consent that we will collect, use, and share your information in the following ways.  

2. Information We Collect 

We collect certain information in order to facilitate your use of the Services.  

Voluntarily Disclosed Information. When you use the Services, you may provide us with some  information directly.  

Account Information. To create and maintain an account for Services, users voluntarily provide  certain personal information, including full name, email address, and telephone number. We  may also collect other information you directly give us as you build your profile, such as school  affiliation and role information.  

User-Generated Content. Certain parts of the Services allow you to upload or post content.  Users may submit the following content for example: 

• Instructional Materials. Lesson plans, exit tickets, quizzes, worksheets, rubrics, and other  teacher-created or school-provided curricular materials.  

• Student Work. Images or uploads of completed exit tickets or other short-form assessments. • User-Generated Feedback. Comments, corrections, and adjustments teachers make to  answer keys, rubric definitions, grading outputs, or lesson-plan recommendations. This  content helps improve grading accuracy and personalize instructional recommendations for  that specific teacher or school. Aggregated and anonymized data may be used internally to  improve model performance and product quality.  

• Additional Information. Teacher profiles, class rosters (if provided), assignments created within  the Services, and any communication sent through the Services.

Automatically Collected Information. Whenever you interact with our Services, we automatically  receive and record information from your browser or your device which may include your IP address,  device and operating system information (e.g., browser type, iOS version, app version), "cookie"  information, the page or feature you requested, feature usage events (e.g., in-app actions), and error  logs, crash reports, and performance metrics. We use IP addresses transiently for security and reliability  purposes. We do not collect precise geolocation data (such as GPS coordinates); we may only infer  approximate location from your IP address (e.g., city, state, or country). You may be able to change the  preferences on your browser or device to prevent or limit your device's disclosure of information. 

Payment Information. We process payments through third-party payment processors (such as Stripe,  Apple Pay, and PayPal). All credit card and billing information is transmitted directly from you to the  payment processor and does not pass through our servers. We do not store credit card numbers, CVV  codes, or other sensitive payment credentials. We retain only basic transaction metadata, such as  subscription status, payment status, and transaction identifiers.  

For school or district contracts handled via invoicing, we may store non-card billing information such as  organization name, billing contact, invoice amount, and payment status, but we do not store bank  account or card credentials. As our Services evolve, we may add or change payment processors to  ensure reliability, security, and compliance with applicable financial and data protection regulations. Any  such changes will be reflected in our [Terms of Service]. 

3. Use of Collected Information 

We use information that we collect about you or that you provide to us, including any personal  information, to provide Services to you, protect the security and integrity of our sites and Services, ensure the quality of the Services, including by preventing improper activities such as those prohibited  by the Terms of Service, develop and maintain the Services, and comply with legal obligations. 

Information may be processed by our vendor AI models to generate suggested answers, grading  guidance, and instructional insights. They are stored securely and made accessible only to the  submitting user and their school or district, unless otherwise authorized. 

Student Work is used solely to generate grades, feedback, and aggregated learning insights for the  teacher and school. 

4. Our Role Under FERPA 

We provide educational products and services to schools and other educational institutions. Through  the provision of these Services, we collect personally identifiable information from or about students  (“Student Data”), which may include educational records governed by the Family Educational Rights and  Privacy Act (FERPA). We consider such Student Data to be strictly confidential and in general do not use  such data for any purpose other than improving and providing our products and services to the  educational institution or on the educational institution’s behalf. Our collection, use, and sharing of 

Student Data is governed by our contracts with the educational institutions, the provisions of FERPA and  other applicable laws that relate to the collection and use of personal information of students, but not  by the provisions contained in this Privacy Statement. If you have any questions about reviewing,  modifying, or deleting personal information of a student, please contact your educational institution  directly. 

5. Disclosure of Information 

We employ other companies and people to perform tasks on our behalf and need to share your  information with them to provide products or services to you. Student work is never shared publicly,  never used to train public models, and never displayed to other users outside the teacher or school  context. We disclose information only as follows: 

Service Providers. We may share information that we've collected from you to third parties for business  purposes, including contractors, artificial intelligence model providers, vendors, and partners, to help us  deliver the Services to you. Any subcontractors or service providers who access Student Data on our  behalf are required to comply with confidentiality and security obligations no less protective than those  set forth in this Policy. 

This includes the use of third-party AI model providers, such as OpenAI, LLC, to process instructional  materials and student work solely for the purpose of generating grading outputs, feedback, and related  educational functionality within the Platform. Such providers process Student Data only on our behalf  and pursuant to our instructions. Student Data submitted through the Services is used exclusively to  provide services to the applicable Educational Partner and is not used to train publicly available or  general-purpose artificial intelligence models. 

Educational Partners. We disclose Student Data to the school or teachers (“Educational Partner”) that  provided the data. 

Aggregated and De-Identified Information. We may de-identify your personal information so that you  are not identified as an individual and provide that information to our partners. We may also provide  aggregate usage information to our partners for business purposes.  

Legal Compliance. We reserve the right to access, read, and disclose any information that we believe is  necessary to comply with law or court order; enforce or apply our [Terms of Service] and other  agreements; or protect the rights, property, or safety of the Company, our employees, our users, or  others.  

Change of Control. We may choose to buy or sell assets, and may share and/or transfer aggregated information in connection with the evaluation of and entry into such transactions. Also, if we (or our  assets) are acquired, or if we go out of business, enter bankruptcy, or go through some other change of  control, personal information could be one of the assets transferred to or acquired by a third party,  granting compliance with any applicable privacy law. 

6. Data Security and Storage 

We take your privacy seriously and are committed to maintaining the privacy and security of the  personal information you provide to us. We employ a variety of physical, administrative, and  technological safeguards designed to protect personal information against loss, misuse, and  unauthorized access or disclosure. 

The safety and security of your information also depend on you. Certain parts of the Services are  protected by a password, and it is your responsibility to keep that password confidential.  

In the event of a security incident affecting Student Data, we will promptly notify the affected partner  and cooperate in any required notifications to affected individuals or regulatory authorities.  

Our Services are hosted by third-party cloud infrastructure providers. These providers support our  application backend, databases, file storage, and model inference infrastructure. Our infrastructure  providers act solely as data processors on our behalf and do not own or independently use customer  data. We require that our infrastructure providers maintain privacy and data processing terms that  restrict downstream use of data and prohibit use for advertising, resale, or other secondary purposes  outside of providing the contracted services. 

Both the Company and third parties that we work with have implemented measures designed to protect  your personal information from loss, unauthorized access, and alteration. We endeavor to protect the  privacy of your account and other personal information we hold in our records and actively work to  prevent unauthorized entry or use, hardware or software failure, and other factors that could  potentially compromise security of user information.  

7. Data Retention and Deletion 

We retain Student Data only for as long as necessary to fulfill the purposes for which it was collected or  as required by our agreements with Educational Partners. Upon termination of our relationship with an  Educational Partner, or upon request, we will return or securely destroy all Student Data in our  possession within a reasonable timeframe, except as required by law to retain such data. 

You may access, and, in some cases, edit or delete your Account Information through your account  settings. The information you can view, update, and delete may change over time. You may request that  we delete your account and your data from the Company. Further, if you request removal of your  information, you may be unable to utilize the Services.  

Destruction of Student Data is performed using methods designed to render the data unreadable and  unrecoverable. 

8. Limitations on Use 

We will not: use Student Data for targeted advertising directed at students; create profiles of students  for non-educational commercial purposes; disclose Student Data except as described in this Policy; or 

use Student Data in any manner inconsistent with our [Terms of Service], contractual obligations, or  FERPA requirements. 

9. Information We Do Not Collect 

We do not collect the following categories of information: continuous or background location data;  contact lists from your device; camera, microphone, or biometric data outside of user-initiated uploads;  advertising identifiers or cross-app tracking data; or government-issued identifiers. 

10. Changes to the Policy 

It is our policy to post any changes we make to this Policy on this page. If we make material changes to  how we treat our users' personal information, we will notify you by email to the email address specified  in your account and through a notice on the Website home page. The date the Policy was last revised is  identified at the beginning of this Policy. You are responsible for ensuring we have an up-to-date active  

and deliverable email address for you. This Policy should be read in conjunction with our [Terms of  Service]. 

11. Contact Information 

For any inquiries about this Policy and our privacy practices, contact us at:  

Attn: Privacy Officer <legal@homeroomhero.ai>