Privacy Policy

Who We Are

RCNR AI Solutions LLC is an EdTech company building AI-powered tools for K-12 teachers. We are based in Utah. Questions about this policy: [email protected]

What Data We Collect

Teacher accounts (via Clerk):

• Email address
• Name
• Payment information (processed by LemonSqueezy — we do not store card numbers)

Students using Blue Book, ProveIt, Draft Coach, or TestHub:

• First name (self-reported, like entering a name in Kahoot — no account created)
• Written work submitted during the session
• Session access code used to enter

We do not collect student email addresses, birthdates, student ID numbers, or any other identifying information beyond a self-reported first name.

Canvas LMS integration (Canvas Creator and future Canvas tools):

Teachers who connect their Canvas account provide a Canvas API token. This token is encrypted at rest using the same application-level encryption as all other sensitive data. We use this token only to perform actions the teacher explicitly requests (creating content, managing dates, auditing courses). We do not store Canvas student records, grades, or roster data on our servers. Canvas data is fetched live when needed and is not persisted beyond the active request.

How We Use Student Data

Student data is used only to:

• Deliver written feedback through our AI tools
• Display student submissions to the teacher who created the session

Student data is never:

• Sold to third parties
• Used for advertising
• Used to train AI models
• Stored longer than 30 days

AI Processing: Student writing is processed by the Anthropic Claude API to generate feedback. We do not include student names in API calls — only the writing itself is sent. Anthropic retains API data for a maximum of 7 days per their commercial data retention policy, and does not use API data for model training.

Data Retention

Student data is automatically and permanently deleted 30 days after the teacher closes the assignment. Teachers may also delete student data at any time, or request early deletion by contacting [email protected].

Third-Party Services (Subprocessors)

We use the following services to operate our platform:

Each subprocessor operates under their own data processing agreements. Anthropic's commercial API terms explicitly prohibit using customer data for model training.

FERPA

When schools use our tools, we operate as a “school official” under FERPA (20 U.S.C. § 1232g). We use student education records only to provide the services requested by the teacher.

We do not share student records with third parties except as listed in the subprocessors table above, and only to the extent necessary to provide the service.

COPPA

Our student-facing tools do not require students to create accounts, provide email addresses, or submit any information beyond a first name and written work. Teachers are responsible for obtaining any required parental consent before using our tools with students under 13, consistent with COPPA's “school official” exception.

Your Rights

Teachers and students (or their parents/guardians) may request:

• Access to data we hold
• Deletion of data before the automatic 30-day window
• A copy of their data

To make a request, contact [email protected]. We will respond to data requests within 30 days.

Changes to This Policy

We will update the “Last updated” date at the top of this page when changes are made. Continued use of our tools after changes constitutes acceptance of the updated policy.