What Data We Collect
We collect the personal information you provide when creating an account, including your name and email address. When you use ScholarStack, we also collect usage data such as chat messages with AI tutors, course interactions, session analytics, and document uploads. Technical data including IP addresses and browser information is collected automatically for security and service improvement.
How We Use Your Data
Your data is used to provide and improve the ScholarStack educational platform, including powering AI-assisted learning features, generating session analytics for instructors, and personalizing your learning experience. We also use data for account management, communication about the service, and ensuring platform security.
AI Processing and Third-Party Providers
Chat messages and document content may be processed by third-party AI providers (such as OpenAI, Anthropic, and Google) to generate responses and learning analytics. We send only the data necessary for these features. We contract with providers under enterprise data processing terms that prohibit the use of your data to train their general-purpose models. A current list of subprocessors is available on request.
Analytics and Tracking
We use Microsoft Clarity and Google Analytics to understand how users interact with our platform. Clarity captures anonymized usage data such as clicks, scrolls, and page navigation through session recordings and heatmaps. Google Analytics collects aggregated usage data such as pages visited, session duration, device and browser type, and approximate geographic region to help us measure traffic and improve the service. Both tools may use cookies or similar technologies to distinguish unique users. We do not share personally identifiable information with Microsoft or Google through these tools. For more information, see Microsoft's privacy statement at https://privacy.microsoft.com and Google's privacy policy at https://policies.google.com/privacy.
Data Retention
Personal data and AI interaction history are retained for the duration of your account and enrollment, plus a limited window afterward to support legitimate business and legal needs. Session analytics are retained to support instructor reporting. Organization administrators can export or delete student data at any time through the compliance tools. When data is deleted, it is permanently removed from our active systems and purged from backups on the next backup rotation.
Your Rights
You have the right to access, correct, and request deletion of your personal data. Residents of California and other U.S. states with comprehensive privacy laws (including CCPA/CPRA) additionally have the right to know what categories of personal information we collect, to opt out of any sale or sharing of personal information (we do not sell or share personal information as defined by these laws), and to non-discrimination for exercising these rights. For students at educational institutions, FERPA provides additional protections for education records. Organization administrators can export a complete copy of student data or perform permanent deletion through the platform's compliance features. To exercise your rights, contact your organization administrator or email us directly; we respond within 45 days.
Children's Privacy
ScholarStack is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. When ScholarStack is used in a K-12 setting, we act as a school service provider under FERPA and require the educational institution to obtain any consents required by COPPA before students access the service. If you believe a child under 13 has provided personal information without proper consent, please contact us so we can delete it.
Security
We protect your data with encryption in transit and at rest, server-side session management, automatic session timeouts, and audit logging of administrative actions. Access to student data is restricted by role-based permissions within each organization.
Contact Us
For privacy-related inquiries, please contact your organization administrator or email us at privacy@scholarstackai.com.