Student Privacy Protection Policy

Student Data We Collect

Ezergrade collects only the student data needed to deliver assessments and maintain teacher-controlled grade records:

• First name and last name
• Teacher-assigned student number or classroom identifier, not a government ID or Social Security Number
• Grade level, if assigned by the teacher
• Class and group membership
• Test responses and results
• Session metadata, such as test mode, completion time, and submission status
• Integrity log data during supervised tests, such as fullscreen exits, focus loss events, and window dimension changes
• Basic usage data, such as IP address, browser type, and device type

Students do not create accounts, provide email addresses, set passwords, or receive marketing communications of any kind.

How Student Data Is Used

Student data is used only to:

• Deliver spelling assessments and play audio during test sessions
• Grade student responses and generate results for the teacher
• Maintain the teacher's grade record across all delivery modes
• Support CSV export or Google Classroom grade sync when enabled by the teacher
• Protect assessment integrity during supervised tests

Ezergrade does not use student data for advertising, behavioral profiling, cross-site tracking, or any unrelated commercial purpose.

Student Data Ownership and Control

Student data remains controlled by the teacher, school, homeschool family, co-op, or educational organization that provided it. Ezergrade does not claim ownership of student records, test responses, or assessment results.

Who Can Access Student Data

Student data is accessible only to authorized teachers, administrators, or school representatives associated with the relevant class, school, or account. Students can only access their own active test session.

AI, OCR, and Student Data

Ezergrade uses AI in optional, teacher-controlled features only. The core digital assessment workflow — test delivery, audio playback, exact-match grading, and grade record storage — does not use AI.

When optional AI feedback is enabled by a teacher, only the correct word and the student's misspelled answer are sent to an AI provider. Student names, student numbers, and all other identifying information are never included in AI feedback requests.

Paper scan grading uses AI-assisted OCR to read handwritten student answers from scanned paper tests. The OCR result is compared against the teacher's word list, and uncertain handwriting is flagged for teacher review. Ezergrade does not use AI to make subjective judgments about student performance.

Parent and Student Requests

Parents, guardians, or eligible students may request access to, correction of, or deletion of student data by:

• Contacting the relevant teacher or school directly
• Emailing support@ezergrade.com

For students whose data is controlled by a school or teacher, Ezergrade will work with the teacher or school to fulfil valid requests. Ezergrade will not unilaterally delete education records held on behalf of a school without school authorisation.

Security

Ezergrade uses reasonable technical and organisational safeguards to protect student data, including:

• Encryption in transit (TLS/HTTPS)
• Database encryption at rest
• Row Level Security policies ensuring teachers access only their own data
• Secure teacher authentication
• No student login credentials stored

Subprocessors

Ezergrade uses trusted third-party providers only as needed to operate the Service. Current subprocessors handling student data include:

• Database and authentication provider — database hosting and authentication
• Hosting and content-delivery provider — hosting, delivery, and security
• Enterprise OCR provider — OCR text extraction for Paper Mode scanning only. Ezergrade is designed for answer sheets that do not require student names. If a teacher includes a name, student number, or other identifying information on the scanned page, that information may be included in the OCR image sent for processing.
• Google Classroom APIs — roster import and grade sync when authorized by the teacher, school, or Google Workspace administrator

AI providers process only word and misspelling pairs for optional AI feedback — never student names, student numbers, or other student identifiers. A category-based subprocessor list is published in our Privacy Policy; the complete named list is provided to schools with our Data Processing Agreement, or on request at support@ezergrade.com.

Data Retention and Deletion

Student data is retained only as long as needed by the teacher, school, or organization. Teachers can delete individual students, classes, tests, and test results at any time from within the Service, and deletion takes effect immediately.

• When a teacher deletes a student, class, test, or account — the records are removed from our production systems at the time of deletion. Residual copies in our infrastructure providers' encrypted backups are overwritten as those backups age out, no later than 30 days afterwards.
• Scanned paper answer sheets — the image is never stored on Ezergrade's servers. It stays in the teacher's browser for the scan-and-review session and is passed through to the OCR provider for text extraction; ending the session discards it. Only the extracted text and the teacher's reviewed grades are saved.
• Integrity log — the record of focus-loss and fullscreen-exit events during a supervised test, retained up to 12 months for security monitoring and fault diagnosis, then deleted automatically. Network request logs are not retained at all — only aggregated traffic totals held by our hosting provider for up to 30 days. Aggregate feature-usage counts, which contain no student data, are kept while the account is active.

Upon account termination or a valid deletion request, Ezergrade will delete or return associated student data using industry-standard methods, subject to any legal retention requirements. Deletion is immediate, with backups overwritten within 30 days; a request to return data rather than delete it is completed within 60 days. Full detail is in our Privacy Policy.

Student Privacy Laws

Ezergrade is designed to support teachers, schools, and educational organizations in meeting their student privacy obligations. Ezergrade is designed to support FERPA-conscious student data practices. Ezergrade is the operator of the Service and maintains its own obligations under COPPA — notice, security, retention limits, and parental access requests — alongside applicable state and international student privacy laws.

Schools and organizations may request a Data Processing Addendum or Student Data Privacy Agreement by contacting support@ezergrade.com.

Data Breach Notification

In the event of a data breach involving student data, Ezergrade will notify affected teachers, schools, or organizations without unreasonable delay — and no later than 30 calendar days after confirming the breach, consistent with state requirements such as Illinois's SOPPA — and will provide details on the nature of the breach, data affected, and corrective actions taken.

Contact

For student privacy questions, data requests, or to request a Data Processing Addendum:

Email: support@ezergrade.com

Website: https://ezergrade.com/privacy

Ezergrade™ is committed to protecting student privacy and providing a safe, honest assessment environment.