Privacy Policy

Last updated: March 16, 2026

Gradeflow ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application at gradeflow.xyz (the "Service").

1. Information We Collect

1.1 Information You Provide

Account information — name, email address, and password when you create an account.
Assignment & submission data — assignments you create, rubrics, deliverables, student submissions, and any files uploaded.
Feedback content — voice recordings, transcripts, and written feedback you provide for student work.
Communications — any messages you send us through support or email.

1.2 Information Collected Automatically

Usage data — pages visited, features used, timestamps, and referring URLs.
Device information — browser type, operating system, and screen resolution.
Analytics — we use Vercel Analytics to collect anonymized performance and usage metrics.

2. How We Use Your Information

Provide, operate, and maintain the Service.
Process and store assignments, submissions, and feedback.
Generate AI-powered transcript summaries from your voice recordings.
Send transactional emails such as email verification, password resets, and submission notifications.
Improve, personalize, and expand the Service.
Monitor and analyze usage trends to improve user experience.
Detect, prevent, and address technical issues or abuse.

3. Third-Party Services

We use the following third-party services to operate Gradeflow:

Firebase (Google) — authentication, database, and hosting.
AssemblyAI — audio transcription and AI-powered summarization.
Vercel — hosting and analytics.

These providers have their own privacy policies governing how they handle your data. We only share the minimum information necessary for each service to function.

4. Data Storage & Security

Your data is stored in Firebase (Google Cloud) servers. We use industry-standard security measures including encrypted connections (HTTPS/TLS), Firebase Authentication, and Firestore Security Rules to protect your information. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your account and assignment data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance purposes.

6. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data.
Object to or restrict processing of your data.
Request a portable copy of your data.

To exercise any of these rights, contact us at privacy@gradeflow.xyz.

7. Children's Privacy

Gradeflow is intended for use by educators and students aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will delete it promptly.

8. Cookies

We use essential cookies and local storage required for authentication and session management. We do not use advertising or third-party tracking cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at privacy@gradeflow.xyz.