Privacy Policy

At GradexAI, we are committed to protecting your privacy and ensuring the security of your personal information.

Last updated: October 4, 2025

1Introduction

This policy explains how GradexAI collects, uses, and protects your personal data in accordance with GDPR and other applicable privacy laws.

2Who We Are

GradexAI is an AI-powered academic assessment platform. For privacy-related inquiries, contact us at: legal@gradexai.com

3What Data We Collect

Personal data (name, email, school affiliation)
Login credentials and account information
Device information and usage analytics
Academic documents, assessment scores, and user inputs

4How We Use Your Data

All data collected belongs to your educational institute and is processed solely for the following purposes:

AI-Powered Assessment Services: Automated grading, intelligent feedback, and exam administration for your institute
Institute Analytics: Performance metrics and academic insights displayed exclusively to your educational institute
Platform Security: Maintain service integrity, prevent fraud, and ensure secure exam environments
Consent-Based Processing: Data is processed only with your explicit consent and used strictly for educational purposes

🔒 We never sell your personal data to third parties. All data remains within your institute's control.

5Legal Basis for Processing

We process your data based on user consent, contractual necessity, legal obligations, and legitimate business interests in accordance with GDPR and applicable privacy laws.

6Data Sharing

✓ We never sell your personal data to third parties

We only share data with trusted service providers under strict contractual agreements that ensure your data remains protected and is used solely for providing our services.

7Institutional & Aggregated Analytics

📊Purpose of Processing

Aggregated statistics (e.g., total users, tests created, submissions, AI-grading accuracy) are generated to monitor and improve platform performance
Data may be displayed in dashboards for partner institutions showing their own usage only

🔢Nature of Data

Metrics are aggregated and non-identifying, derived from activity data such as logins, test creations, and submissions
No personal details (names, emails, answers, grades) are shown in aggregated summaries

👁️Grouping & Visibility

Reports may be grouped by institution or organization (e.g., school-level analytics)
Institutions see only their own data, unless they explicitly consent to public benchmarking

🛡️Safeguards & Anonymization

Small groups or low-activity institutions are masked or merged to prevent re-identification
Numbers may be rounded or displayed in ranges for privacy protection
Aggregated analytics are not used for individual profiling or targeting

⚖️Lawful Basis

This processing is based on legitimate interests in operating and improving the service, or on the institution's contract with the platform

🔐Access & Sharing

Only authorized personnel of the service provider and the respective partner institution can access institutional analytics
Data is not sold or shared with unrelated third parties

Retention

Aggregated data is retained only as long as necessary for analytics and performance tracking, after which it may be further anonymized or deleted

Consent & Opt-out

Institutions can opt out of public benchmarking at any time
Users can contact their institution or our privacy contact at legal@gradexai.com to learn more about how aggregated data is handled

9Cookies & Tracking

We use cookies and similar technologies to enhance your user experience, remember your preferences, and analyze platform usage.

💡 You can manage cookie preferences through your browser settings or our cookie preference center.

10Data Retention

We retain your data only as long as necessary for service delivery, legal compliance, or as permitted by law. You may request data deletion at any time through your account settings or by contacting us.

11Your Privacy Rights

Access, review, and correct your personal data
Request deletion of your data (right to be forgotten)
Limit or object to data processing activities
Withdraw consent and data portability rights

12Children's Privacy

⚠️ Special protections for users under 16

We do not knowingly collect personal data from children under 16 without verified parental consent or appropriate educational institution authorization.

13Data Security

🔒 Enterprise-grade security measures

We implement industry-standard security measures including encryption, secure infrastructure, continuous monitoring, and regular security audits to protect your personal information.

14Policy Updates

We may periodically update this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be communicated through email or prominent notice on our platform.

15Contact Us

Have questions about this Privacy Policy or how we handle your data? We're here to help.

Address
30 N Gould St #45505
Sheridan, WY 82801