Privacy Policy

We collect information in three ways:

• Account information you provide directly — name, email address, institution name, and role (admin, teacher, or student) — when you sign up or are invited.
• Academic content created while using Facultify — tests, questions, student submissions, grades, and analytics generated from that data.
• Usage data collected automatically — pages visited, actions taken, browser type, and timestamps — used to keep the service reliable and secure.

We use collected information to operate the platform: authenticating accounts, isolating each institution's data from every other institution, auto-grading submissions, generating analytics, sending transactional emails (invites, confirmations), and improving product reliability. We do not sell personal information, and we do not use one institution's data to benefit another.

Facultify is multi-tenant software: many institutions share the same infrastructure, but data is isolated at the database level using row-level security. A teacher or admin at one institution cannot query or view another institution's students, tests, or results — this is enforced by the database itself, not just the application layer.

We rely on a small number of infrastructure providers to operate Facultify:

• Supabase — hosts our database, authentication, and file storage.
• Resend — delivers transactional emails, such as teacher and student invitations.
• An AI model provider, used only to draft AI-generated test questions from a topic a teacher supplies — never with student submission data.

Each provider is contractually restricted to processing data solely to provide their service to us.

We retain institution data for as long as an institution's account remains active. If an institution closes its account, we delete or anonymize associated data within a reasonable period, except where retention is required to comply with legal obligations.

Facultify is provided to educational institutions, which act as the data controller for their students, including any students under 18. Institutions are responsible for obtaining any consent required under applicable education-privacy laws (such as FERPA) before adding student accounts. We process student data solely on the institution's instructions and for the purpose of delivering the assessment platform.

We use industry-standard safeguards, including encrypted connections, hashed credentials, and database-level access rules. No system is perfectly secure, and we continuously review our practices as the platform grows.

Depending on your role and jurisdiction, you may have the right to access, correct, orrequest deletion of your personal information. Students and teachers should generally contact their institution's admin first, since institutions control their own account data; admins can reach us directly at privacy@facultify.com.

We may update this policy as the product evolves. Material changes will be reflected here with an updated revision date.