Privacy Policy

This policy describes how Discel handles account information and student education records. It is written for the school-official framework under FERPA: a school or professor may share education records with a provider that the institution controls, for a listed purpose, without redisclosure.

What we store

Account name, university email, student ID, class enrollment, assignment files, scores, feedback, and a support snapshot of each new grading run. We do not ask for a Social Security number, date of birth, or home address.

How we use it

Education records are used to operate the class, grade the workbook, show the student their result, and support a professor who asks what a run did. They are not sold and are not used to train a public model. Grading calls to the model send redacted check context, not a request to retain student files for advertising.

Who else processes it

Subprocessors are Supabase (database and file storage), Vercel (application hosting), and OpenAI (grading model calls). Each processes data only to provide that part of the service.

Retention and deletion

Education records stay until the professor deletes the class or the institution asks for deletion. This draft does not set a multi-year purge clock. Counsel and the institution set that period. Deleting a class removes its roster, submissions, scores, and grading snapshots from the database, and removes stored class files from private storage.

Institutional control

The contracting professor or school can export the class education records and can delete them. Discel does not redisclose those records to another school or to a student who is not the subject of the record.