Privacy Policy

1. Introduction

Welcome to XAM ("we," "our," or "us"), an AI-native assessment workspace for teachers operated by Superlearn. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

By accessing or using XAM, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our service.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you create an account, we collect your name, email address, and authentication credentials through our authentication provider, Clerk.
• Profile Information: Any additional profile information you choose to provide, such as your organization name or role.
• Assessment Data: Tests, quizzes, assignments, questions, rubrics, and other educational content you create using our platform.
• Student Data: Information about students that you input into the system, including names, email addresses, and assessment submissions.
• Payment Information: When you subscribe to a paid plan, payment information is processed securely through Polar.sh. We do not store your full payment card details on our servers.
• Communications: Any messages, feedback, or correspondence you send to us.

2.2 Automatically Collected Information

• Usage Data: Information about how you interact with our service, including pages visited, features used, and time spent on the platform.
• Device Information: Browser type, device type, operating system, IP address, and other technical information.
• Log Data: Server logs, error reports, and diagnostic information collected through Sentry for error tracking and debugging.
• Analytics Data: We use DataBuddy and Vercel Analytics to understand how users interact with our platform, including page views, user flows, and feature usage.

2.3 AI-Generated Content

When you use our AI-assisted features, we may process your content through OpenAI's services to generate questions, rubrics, and other educational materials. This content is processed in accordance with OpenAI's privacy policies and our data processing agreements.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve our service
• To process your subscriptions and manage billing through Polar.sh
• To authenticate your identity and secure your account through Clerk
• To store and manage your assessments and data using Convex
• To provide AI-powered features and generate educational content
• To send you service-related communications, including updates, security alerts, and support messages
• To analyze usage patterns and improve our platform's functionality
• To detect, prevent, and address technical issues and security threats
• To comply with legal obligations and enforce our Terms of Service
• To personalize your experience and provide relevant features

4. Third-Party Services

We use several third-party services to provide our platform. Each service has its own privacy policy governing how they handle your data:

4.1 Authentication (Clerk)

We use Clerk for user authentication and account management. Clerk processes your authentication credentials and profile information. Please review Clerk's Privacy Policy at https://clerk.com/privacy.

4.2 Database and Backend (Convex)

We use Convex to store and manage your assessments, user data, and application information. Please review Convex's Privacy Policy at https://www.convex.dev/privacy.

4.3 Payments (Polar.sh)

We use Polar.sh to process subscription payments and manage billing. Payment information is handled securely by Polar.sh. Please review Polar.sh's Privacy Policy at https://polar.sh/privacy.

4.4 AI Services (Vercel & xAI)

We use Vercel as our AI provider, and xAI models for our AI-assisted features. Please review Vercel's Privacy Policy at https://vercel.com/legal/privacy-policy.

4.5 Analytics (DataBuddy & Vercel Analytics)

We use DataBuddy and Vercel Analytics to understand how users interact with our platform. These services collect usage data to help us improve our service. Please review their privacy policies:

• DataBuddy: https://www.databuddy.cc/privacy
• Vercel Analytics: https://vercel.com/legal/privacy-policy

4.6 Error Tracking (Sentry)

We use Sentry to track and diagnose errors in our application. Sentry may collect error logs and diagnostic information. Please review Sentry's Privacy Policy at https://sentry.io/privacy.

5. Data Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL
• Secure authentication and authorization mechanisms
• Regular security assessments and updates
• Access controls and authentication requirements
• Secure data storage through our third-party providers

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal, regulatory, or legitimate business purposes.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

• Access: You can access and review your personal information through your account settings
• Correction: You can update or correct your information at any time through your account settings
• Deletion: You can request deletion of your account and associated data by contacting us
• Data Portability: You can export your assessment data through our platform
• Opt-Out: You can opt out of certain analytics and marketing communications
• Objection: You can object to certain processing of your information

To exercise these rights, please contact us at the email address provided in the "Contact Us" section below.

8. Children's Privacy

XAM is designed for use by educators and educational institutions. While our platform may be used to manage student information, we do not knowingly collect personal information directly from children under the age of 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately so we can delete such information.

Educational institutions using our platform are responsible for ensuring compliance with applicable laws, including the Family Educational Rights and Privacy Act (FERPA) and the Children's Online Privacy Protection Act (COPPA).

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using our service, you consent to the transfer of your information to these countries. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Superlearn
Support Email: support@superlearn.cc
Privacy Email: privacy@superlearn.com
Website: https://superlearn.cc