Skip to main content

Edugator

Privacy Policy

Last Updated August 18, 2026 · Version 2.0

This Privacy Policy explains what personal information Edugator ("Edugator", "we", "us") collects, why we collect it, who we share it with, how long we keep it, and the choices you have. It covers the https://edugator.app/ website, the Edugator learning platform, and our related services (together, the "Service").

Edugator is used for coursework, so much of the information we hold is created in the ordinary course of teaching and learning: enrollments, code submissions, grades, and questions asked of the AI tutor. We treat that information as confidential. We do not sell personal information, we do not use student data for advertising, and we do not use your content to train artificial intelligence models.

This Policy is incorporated into our Terms of Use. Our handling of student Education Records is described in more detail in our FERPA Addendum.

Who Is Responsible for Your Information

Who controls your information depends on how you use Edugator.

  • When you use Edugator through a course at a school, college, or university, your institution decides what data goes into the Service and how it is used. Edugator acts as a service provider — a "school official" with a legitimate educational interest, as described in our FERPA Addendum — and processes that data on the institution's behalf and under its instructions. If your institution has a separate agreement with us, that agreement governs our handling of institutional data where it conflicts with this Policy.
  • When you sign up on your own — for example, an instructor creating an account to evaluate Edugator, or a visitor browsing our website — we determine how that information is handled, and this Policy applies directly.

If you are a student and want an Education Record corrected or removed, your institution normally controls that record, so we may need to direct your request to them. We explain this in "Your Rights and Choices" below.

Information We Collect

Information you give us

  • Account information: your name, email address, and password. Authentication is handled by our provider Clerk; where your institution uses single sign-on, we receive your identity from your institution's identity provider instead of a password.
  • Course participation: the courses you join, your role (student, teaching assistant, instructor), enrollment status, and invitations sent to or from your email address.
  • Work you submit: code submissions, exam and assessment responses, lesson answers, uploaded files, and problem or lesson content you author as an instructor.
  • AI conversations: messages you send to the AI tutor, together with a snapshot of the code in your editor at the time, so the conversation makes sense when you return to it.
  • Communications: messages you send to support, bug reports, feature requests, and accessibility reports.

Information created by your use of the Service

  • Assessment results: automated test-case results, scores, grades, submission history, and timestamps.
  • Progress and activity: lessons and problems viewed or completed, and activity within a course used for the instructor gradebook and analytics.
  • Technical and log data: IP address, browser type and version, device and operating system, referring pages, and timestamps, collected by our systems and providers for security, debugging, and reliability. When an error occurs, our error-monitoring provider records diagnostic details of the failure.

Information from others

  • Your institution: roster, enrollment, and role information, including through learning management system integrations such as Canvas (LTI).
  • Payment information: where a fee applies, our payment processor Stripe tells us that a payment succeeded and associates it with your account. We never receive or store your full payment card number.

How We Use Information

We use personal information to:

  • provide the Service — create and secure your account, enroll you in courses, run and grade your code, record progress, and show instructors their gradebook and analytics;
  • provide AI Features, as described in the section below;
  • process payments and issue refunds, and keep the transaction records we are required to keep;
  • communicate with you — send account, enrollment, exam, and support messages, and respond when you contact us (transactional email is delivered through Amazon SES);
  • keep the Service secure and reliable — detect and investigate fraud, abuse, security incidents, and technical failures, and enforce our Terms of Use;
  • maintain and improve the Service — understand which features are used and where people encounter problems, fix defects, and improve performance and accessibility, using aggregated or de-identified information where practicable; and
  • comply with law, including responding to valid legal process.

If you are in the European Economic Area or the United Kingdom, our legal bases are: performance of a contract with you (providing the Service), our legitimate interests (security, service improvement, and product analytics), compliance with legal obligations (tax and record-keeping), and your consent where we ask for it. Where we act on our legitimate interests, you may object as described below.

What We Never Do

  • We do not sell personal information, and we do not share it for cross-context behavioral advertising.
  • We do not use student data for advertising or marketing, and we do not serve third-party advertising on the Service.
  • We do not use your content — submissions, exam responses, AI prompts, or instructor course materials — to train general-purpose artificial intelligence models. Our AI provider is contractually prohibited from using it to train theirs. If this ever changes, we will update this Policy and the Terms of Use first and obtain any authorization required from the applicable rights holder and institution.
  • We do not disclose Education Records to third parties except as directed by your institution, to the service providers listed below acting on our behalf, or where required by law.

AI Features

When you use an AI Feature — such as the Bloom tutor chatbot, or AI-assisted authoring tools — the content needed for that feature is sent to our AI provider, currently OpenAI. That content is limited to what the feature requires: the relevant problem statement, your code, test cases, and the messages you write.

We do not intentionally include your name, email address, or student identifier in these requests. However, the content itself can still identify you — code, comments, file names, and what you write are all sent as part of the prompt — so please do not type personal information about yourself or others into an AI Feature.

Our AI provider processes this content only to return a response, is contractually prohibited from using it for model training, and may retain it for a limited period for abuse monitoring under its own published policies. Your chat conversations and the code snapshots attached to them are stored within Edugator as part of your course activity, and you can delete a conversation at any time from within the Service. Instructors control whether AI Features are available in their course at all.

Service Providers

We share personal information with providers who process it on our behalf, under contracts that require confidentiality, appropriate security, and use only for the purposes we specify:

  • Amazon Web Services — cloud hosting, file and video storage, and transactional email (Amazon SES). Data is hosted in the United States.
  • Clerk — account authentication and sign-in.
  • Stripe — payment processing. Stripe receives your email address and an internal reference to your account and course invitation; we do not receive your card details.
  • OpenAI — the models powering AI Features, as described above.
  • PostHog — product analytics, including your user identifier, email address, and name.
  • Sentry — error monitoring and performance diagnostics. When something goes wrong, Sentry receives technical details of the failure, which can include the page or request involved, your IP address, and browser information.

We may also disclose information: to your educational institution and its authorized officials, consistent with the FERPA Addendum; where required by law or valid legal process; to protect the rights, safety, or property of Edugator, our users, or the public; and to a successor entity in connection with a merger, acquisition, or sale of assets, in which case we will require the recipient to honor this Policy or give you notice and a choice where the law requires it.

Our website may link to sites we do not operate. We are not responsible for their privacy practices, and we encourage you to read their policies.

Cookies and Local Storage

We use cookies and browser storage to operate the Service, not to advertise to you:

  • Necessary: session and authentication cookies set by us and by Clerk to keep you signed in, security cookies, and the signed cookies used by LTI launches from your learning management system. The Service cannot function without these.
  • Preferences and drafts: browser local storage holds your session token, interface preferences such as theme, and unsaved drafts of lessons you are authoring, so work is not lost.
  • Analytics: PostHog sets cookies or storage to measure feature usage and page views.

You can clear or block cookies in your browser settings, but blocking necessary cookies will prevent sign-in and course access from working. Because there is still no common standard for handling them, we do not currently respond to browser "Do Not Track" signals; we do honor Global Privacy Control signals where the law requires it.

How Long We Keep Information

We keep personal information only as long as it serves the purpose it was collected for, and then delete or de-identify it. Where your institution directs a different retention period for its records, the institution's instruction governs.

  • Course data — submissions, grades, progress, and AI conversations: for the duration of the course and 12 months afterward, so that grade disputes, incompletes, and appeals can be resolved. Then deleted or de-identified, unless your institution directs otherwise.
  • Account profile: until you delete your account, or after 24 months of inactivity, whichever comes first. We email you before deleting an inactive account.
  • Payment and transaction records: 7 years, to meet tax, accounting, and audit requirements. These survive account deletion.
  • Support and accessibility correspondence: 24 months after the matter is resolved.
  • Security and access logs: 12 months, so we can investigate incidents.
  • Backups: deleted data persists in encrypted backups for up to 90 days, until those backups are overwritten in the ordinary course.

Security

We maintain administrative, technical, and physical safeguards designed to protect personal information. These include encryption of data in transit, access controls that limit staff access to what their role requires, logging and monitoring to detect unusual activity, and execution of submitted code in an isolated sandbox.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we confirm a breach affecting your personal information, we will notify you and your institution as required by law and without unreasonable delay — our FERPA Addendum describes our commitment to institutions in more detail.

Your Rights and Choices

Depending on where you live, you may have the right to: access the personal information we hold about you; correct inaccurate information; delete your information; receive a portable copy; object to or restrict certain processing; and withdraw consent where processing is based on consent. You will not be treated differently for exercising these rights.

How to exercise them. You can review and update much of your information in your account settings, and you can delete your profile and personal data from in-app settings. Otherwise, email legal@edugator.app with the subject line "Privacy Request". We respond within 30 days, or 45 days where the law allows an extension and we tell you why. We may need to verify your identity before acting, and we will not ask for more information than necessary to do so.

If you are a student at an institution. Your institution generally controls its Education Records. We will honor your deletion request except where your institution requires specific records to be retained for academic, grading, or legal compliance purposes — in that case we coordinate with the institution, and you may need to make your request to them directly. Your rights to inspect and request amendment of your Education Records come from FERPA and are exercised through your institution.

Marketing. We send very little marketing email, and any that we do send includes an unsubscribe link. Transactional messages about your account, courses, and exams are part of the Service and cannot be unsubscribed from while your account is active.

Students Under 18 and Children

You must be at least 18 to create an Edugator account on your own. A person under 18 may use Edugator only through a course offered by an authorized educational institution, with any consent required by law or institutional policy — in that case the institution, or a parent or guardian where the law requires, authorizes the use.

Edugator is not intended for independent use by children under 13. Any use by a child under 13 must be authorized and administered by an educational institution under applicable law, including the Children's Online Privacy Protection Act (COPPA), where an institution may provide consent for a strictly educational purpose. We do not knowingly collect personal information from a child under 13 outside such an arrangement. If you believe a child has provided us information outside an authorized institutional deployment, contact legal@edugator.app and we will delete it.

Users Outside the United States

Edugator is operated from the United States, and information we collect is stored and processed in the United States, which may have different data protection laws than your country. Where we transfer personal information out of the European Economic Area or the United Kingdom, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses. If you are in the EEA or UK and believe we have processed your information unlawfully, you may complain to your local supervisory authority; in Switzerland, to the Federal Data Protection and Information Commissioner.

State Privacy Rights in the United States

Residents of California, Colorado, Connecticut, Virginia, and other states with comprehensive privacy laws have the rights described in "Your Rights and Choices," including the right to know, delete, correct, and obtain a copy of personal information, and to appeal a decision we make about a request. To appeal, reply to our response or write to legal@edugator.app with the subject line "Privacy Appeal".

We do not sell personal information and do not share it for cross-context behavioral advertising, including the personal information of anyone under 16. California's "Shine the Light" law entitles California residents to request information about personal information disclosed to third parties for their direct marketing purposes; we make no such disclosures.

Student data is additionally protected by federal and state student-privacy laws, including FERPA and state laws such as California's Student Online Personal Information Protection Act (SOPIPA) and New York Education Law § 2-d. Where those laws give students and institutions greater protection than this Policy, those protections apply.

Changes to This Policy

We may update this Policy. The "Last Updated" date above reflects the most recent version. If we make a material change — for example, to the categories of information we collect, how we use them, or who we share them with — we will provide notice before it takes effect, by email, an in-product notice, or a notice on this page, and obtain your consent where the law requires it.

Contact Us

Questions, requests, or complaints about this Policy or your information:

Bloom EdTech LLC
7901 4TH ST N
STE 300
ST. PETERSBURG, FL. US 33702

If you are a student or employee at an institution, you may also raise concerns with your institution's registrar, privacy office, or student accessibility office, and we will work directly with them.