Legal

Privacy Policy

Last updated: May 8, 2026

1. Introduction

This Privacy Policy explains what information Optimize Teacher AI ("the Service," "we," "us") collects, why we collect it, who we share it with, and the choices you have. By using the Service, you agree to the practices described here.

We are a student-built tool. We try to keep our data practices minimal and easy to understand.

2. Information We Collect

Information you provide

• Account information. Your name, email address, school, and grade level. Provided when you sign up with email and password or with Google sign-in.
• Essays and related content. The text of every essay you submit, the prompt, any rubric you attach, and any notes or settings you provide.
• Reported grades. The actual grade your teacher gave an essay, if you choose to report it back to us.
• Communications. Messages you send us (for example, support questions or deletion requests).

Information we collect automatically

• Usage data. Basic information about how you use the Service — which pages you visit, when you submit essays, and similar — used to operate and improve the Service.
• Device and log data. Standard server logs including IP address, browser type, operating system, and timestamps. We use this for security and debugging.
• Cookies. We use cookies and similar technologies that are necessary for sign-in and session management. We do not use third-party advertising or tracking cookies.

Information from third parties

• Google sign-in. If you sign in with Google, Google sends us your name, email, and Google account ID. We do not receive your password.
• Google Drive (optional). If you choose to import an essay from Google Drive, we read only the specific document you select and copy its text into your essay. We do not browse, list, or retain other files in your Drive. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. How We Use Information

We use the information we collect to:

• Provide the Service — for example, generating teacher-style feedback on essays you submit and showing your essay history on your dashboard.
• Improve grade prediction accuracy for you by comparing past predictions with the actual grades you report.
• Maintain and secure the Service, including detecting abuse and preventing fraud.
• Communicate with you about the Service, respond to support requests, and notify you of material changes.
• Comply with legal obligations.

We do not:

• Sell your personal information.
• Share your information with advertisers.
• Use your essays or other content to train any third-party AI model.
• Combine your essays with other users' content to train our own model.

4. Legal Bases for Processing (EEA / UK Users)

If you are in the European Economic Area or the United Kingdom, we process your information on the following legal bases:

• Performance of a contract — to provide the Service you signed up for.
• Legitimate interests — to operate, secure, and improve the Service, where those interests are not overridden by your rights.
• Consent — for optional features like Google Drive import. You can withdraw consent at any time.
• Legal obligation — where we must process information to comply with the law.

5. Who We Share Information With

We use a small set of trusted service providers ("subprocessors") to run the Service. Your information passes through them only to the extent needed.

Per Anthropic's API terms, prompts and outputs sent to the Claude API are not used to train Anthropic's models.

We may also share information:

• With your consent, including at your direction.
• For legal reasons, if required by law, subpoena, or other legal process, or to protect rights, property, or safety.
• In a business transfer, if the Service is acquired or merged with another entity, in which case we will notify you before your information becomes subject to a different policy.

6. How Long We Keep Information

• Account and essays: kept until you delete them or close your account.
• Backups: standard database backups are retained for up to 30 days after deletion, after which they are overwritten.
• Server logs: typically retained for up to 90 days.
• Communications: kept as long as needed to handle the matter and meet legal obligations.

You can ask us to delete your account and all associated data at any time (see "Your Rights" below). We will complete deletion within 30 days, except where we must retain information to comply with law.

7. Your Rights and Choices

Depending on where you live, you may have some or all of the following rights:

• Access and download. View and download your essays from your dashboard at any time.
• Correction. Update your account information from your settings.
• Deletion. Request deletion of your account and all associated data by emailing us.
• Portability. Request a copy of your data in a portable format.
• Object or restrict. Object to or ask us to restrict certain processing.
• Withdraw consent. Where we rely on consent, withdraw it at any time.
• Revoke Google access. Manage Google permissions at myaccount.google.com/permissions.
• Complain to a regulator. EEA, UK, and certain other users can complain to their local data protection authority.

To exercise these rights, contact us at the address below. We may need to verify your identity before acting on your request. We will not discriminate against you for exercising any right.

8. Children's Privacy

The Service is intended for students aged 13 and up. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has created an account, please contact us and we will delete the account and information promptly.

9. Schools and Educational Records

If a school or teacher directs your use of the Service, the school may have its own privacy obligations under laws like the Family Educational Rights and Privacy Act (FERPA) in the United States, New York Education Law § 2-d, or comparable laws elsewhere. We do not act as an educational agency, and we do not maintain "education records" on behalf of any school unless we have a separate written agreement with that school. Schools interested in a formal data-sharing agreement should contact us.

10. Security

We use reasonable measures to protect your information:

• All data in transit is encrypted with TLS.
• Database access is gated by Supabase row-level security, so users can only see their own essays and grades.
• We do not store your password ourselves — authentication is handled by Supabase Auth, which stores credentials in hashed form.
• Access to production systems is limited to maintainers of the Service.

No system is perfectly secure. If we learn of a breach affecting your information, we will notify you and any required regulator as the law requires.

11. International Data Transfers

The Service is operated from the United States, and our subprocessors may process data in the United States and other countries. If you use the Service from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those of your country. Where required, we rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses) for international transfers.

12. Do Not Track

Some browsers offer a "Do Not Track" signal. Because there is no common industry standard, the Service does not currently respond to these signals. We do not track you across third-party websites.

13. Changes to This Policy

We may update this policy as the Service changes. Material changes will be posted on this page with a new "last updated" date and, where reasonable, communicated through the Service. Continued use of the Service after changes take effect means you accept the updated policy.

14. Contact

Questions, deletion requests, or other privacy concerns: optimizeai@gmail.com