Privacy Policy - Scholaright

Privacy Policy Summary

This summary is intended to help you quickly understand our Privacy Policy. It is not a substitute for the full Privacy Policy, which controls if there is any difference between this summary and the full policy.

At Scholaright:

You own the educational records and content you create and upload.
We collect the information needed to provide our services, including account information, educational records, and files you choose to upload.
We do not sell your personal information to advertisers or data brokers.
We use trusted service providers, including AWS for hosting, Stripe for payments, Google Analytics for usage analytics, and Google Gemini for our optional Auto Import feature.
Files submitted through Auto Import may be processed by Google Gemini to extract educational information, but Scholaright does not use customer educational records to train public AI models.
We use security measures such as encrypted connections (HTTPS/TLS), secure authentication practices, and optional multi-factor authentication.
You can share transcripts and records through Scholaright Verify using secure sharing links that you control. Shared access can be revoked, and expiration dates may be set.
If your subscription lapses, we may retain your data for a limited period to allow account restoration.
You may request account deletion by contacting us.

If you have questions about how your information is handled, please review the full Privacy Policy or contact us.

Scholaright L.L.C. ("Scholaright," "we," "our," or "us") respects your privacy and is committed to protecting the information entrusted to us.

This Privacy Policy explains what information we collect, how we use it, how we share it, and the choices available to you when using the Scholaright website, applications, and services (collectively, the "Services").

By using the Services, you agree to the practices described in this Privacy Policy.

1. Who We Are

Scholaright is an educational recordkeeping platform designed for homeschool families, co-ops, private schools, and other educational organizations.

If you have questions about this Privacy Policy, you may contact us at: support@scholaright.com

2. Information We Collect

Account Information

When you create an account, we may collect:

Name
Email address
Password (stored in encrypted form)
Multi-factor authentication (MFA) settings, if enabled
Subscription and account status information

Student and Educational Records

Users may create and store educational records including:

Student names
Birth dates
Student identification numbers
Graduation dates
Grade levels
School information and addresses
Courses and academic history
Grades and GPA (Grade Point Average) calculations
Attendance records
Standardized test results
Extracurricular activities
Journal entries
Transcript information
Other educational records entered by authorized users

Uploaded Content

Users may upload files and images including assignment attachments, academic records, report cards, school logos, transcript-related documents, and other educational materials.

Files uploaded for assignment storage may be retained within Scholaright. Files uploaded solely for import processing may be processed and discarded after the import process completes.

Communications

We may collect information you provide when contacting support, reporting issues, requesting account deletion, or otherwise communicating with us.

3. Automatically Collected Information

When you use the Services, we may automatically collect IP address, browser type, device information, operating system information, pages viewed, usage activity, session information, and error and diagnostic information.

We use cookies and similar technologies to provide functionality, maintain login sessions, and understand how the Services are used.

4. Analytics

Scholaright uses Google Analytics to understand usage patterns and improve the Services. Google Analytics may collect information such as pages visited, browser and device information, approximate geographic region, and interactions with the Services. Additional information about Google Analytics can be found through Google's privacy documentation.

5. How We Use Information

We use information to:

provide and operate the Services;
maintain educational records;
generate reports and transcripts;
process subscription payments;
authenticate users;
provide customer support;
improve functionality and performance;
detect fraud, abuse, or unauthorized activity;
maintain security;
comply with legal obligations; and
develop aggregated and anonymized analytics.

We do not sell personal information.

6. AI-Assisted Import Processing

Scholaright offers optional import features that may use artificial intelligence (AI) technologies. When users choose to use these features, uploaded files may be transmitted to Google Gemini for processing. Google Gemini extracts text from submitted files and returns the extracted information to Scholaright, which uses it to assist users in creating educational records.

Files submitted through AI-assisted import processing are not retained by Scholaright after processing is completed unless separately uploaded for storage. Users are responsible for reviewing imported information before relying upon it. Users may choose to redact personally identifiable information (PII) from documents before uploading them for AI-assisted processing.

Scholaright does not use customer educational records to train public AI models.

7. Payment Processing

Subscription payments are processed by Stripe. Scholaright does not store complete payment card numbers. We may retain subscription records, transaction references, invoice information, and related billing history necessary for customer support, accounting, fraud prevention, and legal compliance. Payment information is subject to Stripe's privacy and security practices.

8. How We Share Information

We may share information with cloud hosting providers, payment processors, email service providers, AI processing providers, analytics providers, legal authorities when required by law, and service providers necessary to operate the Services.

We do not sell, rent, or share personal information with advertisers or data brokers. We may share aggregated or anonymized information that cannot reasonably identify individuals.

9. Record Sharing and Scholaright Verify

Users may choose to share transcripts and educational records through Scholaright Verify. When a user initiates a sharing action, Scholaright generates a unique access link that allows the intended recipient to view the shared record without creating a Scholaright account.

Users control which records are shared, may set expiration dates for shared access, and may revoke access at any time. Scholaright records sharing activity, including when a record was shared, the intended recipient (when provided), and the number of times the shared record has been accessed.

10. Data Storage and Security

Scholaright stores customer data using Amazon Web Services (AWS) infrastructure located in the United States. We use security measures designed to protect information, including HTTPS/TLS (Hypertext Transfer Protocol Secure / Transport Layer Security) encryption during transmission, authenticated access controls, optional multi-factor authentication (MFA), monitoring for abuse and unauthorized activity, and security protections provided by AWS-managed services.

No method of transmission or storage can be guaranteed to be completely secure.

11. Data Retention

Educational records remain available while an account remains active and in good standing. If a subscription lapses or payment is not maintained, Scholaright may retain account data for up to six (6) months to allow account restoration. After that period, data may be permanently deleted.

Users may request account deletion by contacting support@scholaright.com. When an account deletion request is processed, production data will be removed within a reasonable period; backup copies may remain for up to seven (7) days before automatic expiration; and certain records may be retained as required for legal, tax, fraud-prevention, security, or business purposes.

Individual records deleted by users within the application are generally removed immediately from active systems.

12. Data Export

Users may export or download certain records including transcripts, co-curricular transcripts, attendance reports, gradebooks, quarterly reports, detailed grade reports, and uploaded assignment attachments. Scholaright does not currently provide a complete raw-data export feature.

13. Children's Information

Scholaright accounts may only be created by individuals who are at least 18 years old. Scholaright does not knowingly permit children under 13 to create accounts. Educational records relating to children may be stored by authorized parents, guardians, educators, or school administrators using the Services.

14. International Users

Scholaright primarily serves users in the United States and Canada. If you access the Services from another country, you understand that your information may be transferred to and processed in the United States.

15. Marketing Communications

Scholaright currently sends only operational and account-related communications. If Scholaright offers marketing communications in the future, recipients will be provided with an opportunity to opt out.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If material changes are made, we will provide reasonable notice through the Services or by other appropriate means. Continued use of the Services after revised policies become effective constitutes acceptance of the updated Privacy Policy.

17. Contact Us

Questions regarding this Privacy Policy may be directed to: support@scholaright.com