ShapeEd — Privacy Policy

ShapeEd (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our platform, services, and related content (collectively, the “Service”). By using the Service, you consent to the practices described in this Policy.

1. Information We Collect

Personal Data: We collect information you provide during registration, such as your name, email address, school/organization, and billing information (processed via Stripe). This data is necessary to create and manage your account.
Usage Data: We automatically collect information about your interactions with the Service, including IP address, browser type, pages viewed, features used (e.g., WIDA or dyslexia modifications), and timestamps. This helps us improve the Service and monitor usage limits.
Uploaded Assignments: You may upload documents or images (e.g., DOCX, TXT, PNG, JPG) for AI-driven modifications. We process this content solely to provide the requested adaptations and delete it immediately after processing to ensure your data privacy.

2. How We Use Your Information

Service Provision: To deliver and maintain the Service, including processing uploaded assignments for AI-driven modifications based on WIDA ELP levels or reading disability adaptations.
Communication: To respond to your inquiries, send account-related updates (e.g., subscription status), or notify you of new features and policy changes.
Analytics: To analyze usage patterns, monitor modification limits, and enhance user experience, ensuring we meet the needs of educators and schools.
Security: To detect and prevent fraudulent activities, unauthorized access, or abuse of the Service.

3. Cookies and Tracking Technologies

We use cookies and similar technologies (e.g., session cookies) to authenticate users, remember your preferences, and optimize your experience. These cookies are essential for the Service to function properly. You can configure your browser to reject cookies, but this may limit access to certain features, such as maintaining your login session.

4. Data Sharing and Disclosure

Service Providers: We share data with trusted third-party vendors who assist in operating the Service, such as Stripe for payment processing and OpenAI for AI-driven modifications. These providers are contractually obligated to maintain confidentiality and comply with data protection laws.
Legal Compliance: We may disclose information if required by law, regulation, or legal process (e.g., court order), or to protect the rights, safety, or property of ShapeEd, its users, or the public.
Business Transfers: In the event of a merger, acquisition, or sale of ShapeEd’s assets, your data may be transferred as part of the transaction. We will notify you of such changes and your choices regarding your data.

5. Data Security

We implement industry-standard security measures, such as encryption (e.g., HTTPS), secure password hashing, and access controls, to protect your data from unauthorized access, alteration, or disclosure. Uploaded files are deleted immediately after processing to minimize data retention. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this Policy or as required by law:

Account data (e.g., name, email) is retained while your account is active and for up to 1 year after account deletion to comply with legal obligations.
Usage data is retained for up to 2 years for analytics purposes, after which it is anonymized or deleted.
Uploaded assignments are deleted immediately after processing and are not stored on our servers.

7. Children’s Privacy

ShapeEd is intended for use by educators and is not directed at children under the age of 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children without appropriate parental or institutional consent, in compliance with the Children’s Online Privacy Protection Act (COPPA) and other applicable laws. If you believe we have inadvertently collected such data, please contact us immediately at shapeedllc@gmail.com to request deletion.

8. International Data Transfers

ShapeEd operates in the United States, and your information may be transferred to and processed on servers located in the U.S. or other countries where our service providers (e.g., OpenAI, Stripe) operate. We ensure that such transfers comply with applicable data protection laws, such as the EU-U.S. Data Privacy Framework for users in the European Economic Area (EEA). By using the Service, you consent to these transfers.

9. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

Access: Request a copy of the personal data we hold about you.
Correction: Request corrections to inaccurate or incomplete data.
Deletion: Request deletion of your data, subject to legal retention requirements.
Opt-Out: Opt out of communications (e.g., email updates) by clicking the “unsubscribe” link in our emails.
Data Portability: Request your data in a machine-readable format (where applicable).

To exercise these rights, including rights under the General Data Protection Regulation (GDPR) or California Consumer Privacy Act (CCPA), please contact us at shapeedllc@gmail.com. We will respond within 30 days (or as required by law).

10. Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated Policy on our website or via email (if you have an account). Your continued use of the Service after the effective date of the revised Policy constitutes acceptance of the changes.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at shapeedllc@gmail.com.