Privacy Policy

1. Our role

Tutorify sells to higher-education institutions. When an institution enrolls, the institution is the controller of its data and we act as its service provider and, where applicable, a "school official" under FERPA with a legitimate educational interest, processing data only on the institution's documented instructions. Where an institution's agreement or a Data Privacy Agreement (DPA) conflicts with this policy, that agreement governs for that institution's data.

2. Information we handle

• Account and roster data — name, institutional email, role (admin/instructor/student), course enrollment, and institution identifiers, typically synced from your LMS via LTI 1.3 / OneRoster.
• Content you provide — course materials you upload (slides, readings, syllabi, transcripts), assessments, and student submissions processed for grading and feedback.
• Interaction data — questions students ask the AI assistant and the responses generated, used to deliver the Service and to show instructors course-level analytics.
• Usage and technical data — log data, device/browser info, and diagnostic data used for security and reliability.

We do not knowingly direct the Service to children under 13 and do not seek to collect their data; the Service is built for higher education.

3. How we use information

To provide and operate the Service; generate assessments, feedback, and grades for instructor review; sync approved grades to your LMS; produce analytics for the institution; provide support; maintain security; and comply with law. We do not sell personal data, use it for advertising, or use student data to train external AI models.

4. AI processing and sub-processors

Delivering the Service requires cloud infrastructure and AI model inference. Inference runs on models we operate ourselves: institutional and student data is not sent to a third-party inference provider or to a consumer AI product, and is not used to train any model.

Vendors with access to institutional data ("sub-processors") are contractually required to protect it, use it only to provide services to us, and not train models on it. A current list is published in our Trust Center and reproduced in Annex B of our DPA. We notify institutional customers before adding a sub-processor.

5. How we share information

We share information only: with sub-processors under contract; with the institution that owns the data; when required by law or to protect rights and safety; and in a business transfer (merger/acquisition), subject to this policy.

6. Security

We protect data with AES-256 encryption at rest and in transit using customer-managed keys, single sign-on from your LMS via LTI 1.3 (OpenID Connect) so that user authentication remains with your institution's identity provider, role-based access controls derived from LMS enrollment, and least-privilege internal access with logging and monitoring. No system is perfectly secure, but we maintain administrative, technical, and physical safeguards appropriate to the data. Further detail is in our Trust Center.

7. Retention and deletion

We retain institutional data for the term of the institution's agreement and delete or return it on termination as described in the DPA, subject to legal retention requirements. Institutions and users may request deletion through privacy@tutorify.ai.

8. FERPA and individual rights

Because the institution controls student education records, students (or parents/eligible students where applicable) should direct requests to access, correct, or delete records to their institution, which we support in fulfilling. Depending on location, individuals may have additional rights (access, correction, deletion, portability, objection); we honor these as directed by the controlling institution and applicable law.

9. Changes

We may update this policy and will post the revised version with a new effective date. Material changes will be communicated to institutional customers.

10. Contact

Smart Ed. LLC — privacy, data protection, and security enquiries: privacy@tutorify.ai. Contracts and legal: info@tutorify.ai.