Privacy Policy

Overview

GradeVelocity is an AI-powered grading assistant designed to help teachers provide consistent, detailed feedback on student work. We take your privacy and the privacy of your students seriously.

Information We Collect

• Account Information: Email address and name when you create an account
• LMS Connection Data: API tokens for Canvas or Brightspace integration (stored encrypted)
• Grading Data: Assignment submissions, rubrics, and feedback you process through the service
• Billing Information: Subscription and purchase history, credit balances, and transaction records (payment card details are processed by Stripe and not stored by us)
• Usage Data: Basic analytics about how you use the service, including credit consumption patterns

How We Use Your Information

• To provide the grading assistance service
• To connect to your LMS and retrieve/submit assignments
• To generate AI-powered feedback using your configured AI provider
• To improve the service and fix issues

AI Processing

When you use GradeVelocity to grade assignments, student work is sent to your configured AI provider (Anthropic Claude, OpenAI, or Google Gemini) to generate feedback. Important points:

• We use AI APIs that do not train on your data
• Student work is processed only when you initiate grading
• You can choose which AI provider to use
• AI-generated feedback is always presented for your review before being submitted

Payment Processing

Payment processing is handled by Stripe, Inc. When you make a purchase or subscribe:

• Your payment card information is collected and processed directly by Stripe
• We do not store your full card number, CVV, or expiration date
• We receive only a tokenized reference to your payment method and transaction confirmations
• Stripe's privacy policy applies to payment data processing: stripe.com/privacy

Data Security

• LMS API tokens are encrypted using industry-standard encryption (libsodium)
• All data transmission uses HTTPS
• We do not share your data with third parties except as necessary to provide the service
• You can delete your account and associated data at any time

Data Retention

We retain your data according to the following guidelines:

• Grading data: Retained as long as your account is active. You can delete individual grading sessions at any time.
• Transaction history: Retained for 7 years for legal and tax compliance purposes, even after account deletion.
• Account data: Permanently removed when you delete your account, except for legally required records.

Your Rights (GDPR)

Under GDPR and similar privacy regulations, you have the following rights:

• Right to Access (Article 15): You can view all data we hold about you in your Account Settings
• Right to Rectification (Article 16): You can update your personal information at any time
• Right to Erasure (Article 17): You can delete your account and personal data via Account Settings
• Right to Data Portability (Article 20): You can export all your data as JSON from your Account Settings
• Right to Object (Article 21): You can object to processing by contacting us

For detailed information about account deletion and what happens to your data, see our Data Deletion Policy.

FERPA Compliance

GradeVelocity is designed to support FERPA compliance. We act as a "school official" under FERPA when processing student educational records on behalf of educational institutions. We only access and process student data as directed by you, the teacher.