Privacy Notice
Last updated: January 2024
Who we are
Vexlore Companion is an AI-powered academic tool provided to students and teachers by your educational institution. It is operated in accordance with applicable federal and state law, including the Family Educational Rights and Privacy Act (FERPA), 20 U.S.C. § 1232g.
What data we collect
We collect your school email address, display name, and role (student or teacher) when you sign in. We log which AI tools you use, when you use them, and the length of your input and response. We do not store the actual text of your AI conversations.
How we use your data
Usage logs are used solely to provide teachers and administrators with aggregate activity reports, to monitor for misuse, and to improve the service. We do not sell, share, or use your data for advertising purposes.
FERPA rights
Vexlore Companion operates as a "school official" under FERPA, using student data only for educational purposes on behalf of your institution. Parents of minor students and eligible students have the right to inspect, review, and request correction of education records maintained by their institution. Contact your school administrator to exercise these rights.
Data retention
Usage logs are automatically deleted after 365 days. Your account information is retained for as long as you have an active relationship with your institution. You may request deletion of your account by contacting your school administrator.
Data security
All data is stored in Supabase with encryption at rest and in transit (TLS 1.2+). Access is restricted to authenticated users and school administrators. API keys and secrets are never exposed to the client.
Third-party services
AI responses are generated by Anthropic's Claude API. Your input text is sent to Anthropic for processing and is subject to Anthropic's usage policies. Anthropic does not use API inputs to train their models. Authentication is handled by Google OAuth via NextAuth.js. No other third parties receive your personal data.
Contact
Questions about this privacy notice should be directed to your school or district technology coordinator.