Privacy Policy

Our Commitment to Your Privacy

Graider is designed with privacy as a core principle. We understand that educators handle sensitive student information, and we've built our platform with multiple layers of protection to keep student data safe and support FERPA compliance.

How Graider Works

Graider is a cloud-based web application hosted on secure infrastructure. Here's what this means for your data:

• Student Name Stripping: Student names and identifiers are automatically removed from typed work before the text is sent to AI providers for grading; photo and image submissions are not yet auto-de-identified
• Encrypted Data: All data is encrypted in transit (TLS/HTTPS) and at rest on our servers
• Student Records Protected: Student records you or your school provide — rosters and submissions — are stored securely and access-controlled, and names are stripped from typed work before it is sent to AI providers for grading
• Secure Authentication: Teacher dashboards require an authenticated account; students reach assignments only through class logins or teacher-issued join codes
• Teacher Review Built In: AI-generated grades are suggestions — you can review, adjust, and approve them from your dashboard before exporting or entering grades in another system; portal release of results to students is controlled by separate settings

Data We Collect

Beta Signup Information

When you sign up for our beta program through our website, we collect:

• Your first and last name
• Your email address

This information is used to create your account, provide access to Graider, send updates about the platform, and occasional product announcements. You can unsubscribe from communications at any time.

What We Do NOT Collect or Retain

• Student identifiers inside AI grading requests — names are stripped from typed work before the text leaves for the AI provider (image uploads are not yet auto-de-identified)
• Teacher-uploaded assignment files beyond what is needed to grade and show you results (student portal submissions are kept as part of the class record until you delete them)
• AI provider API responses beyond what is needed to display results to you

AI Processing & Student Privacy

When Graider sends content to AI providers (OpenAI, Anthropic, or Google, plus Mathpix for OCR of handwritten and math work) for grading, when it screens submitted answers for safety, and when you use the Graider Assistant:

• Student names are stripped for grading: We automatically remove student names and identifiers from typed work before the text is sent to the AI for grading. This removal is heuristic and best-effort, and it is not applied to the automated safety screen described below
• De-identified content for grading: For typed work sent for grading, AI providers receive the student work content without names, along with your rubric and grading instructions
• An automated safety screen, which does not use name stripping: Separately from grading, the text of answers that students submit through the student portal is sent to OpenAI's content moderation service to check for categories such as self-harm, violence, and sexual content involving minors. This check is advisory: it never blocks a submission and never changes a grade, and its result is recorded alongside the submission. Because removing words can remove the very evidence a safety check is looking for, the name-stripping described above is deliberately not applied to this text. That means answer text reaches this service as the student wrote it, including any name the student typed into an answer. We would rather state this plainly than let it be assumed
• Photos of student work are masked, and a teacher approves each one: Before any photograph is sent, the top band of the image is permanently filled in to cover the name line, and all image metadata is stripped. A teacher then reviews that masked image and must approve it; without an approval, nothing is sent and the work is routed to manual grading. To be clear about the limits: masking covers the name band. It does not remove a student's handwriting or the content of their answers, and it will not cover a name written in a margin or at the foot of the page
• Photos are treated differently from text for retention: We have asked OpenAI for Zero Data Retention, under which inputs are discarded rather than stored. That request is pending, and under OpenAI's terms it would apply to text inputs only: image inputs are expressly excluded and may be retained by OpenAI as part of safety classification. We would rather state this plainly than let it be assumed. A school or district that does not want student photographs transmitted can ask us to disable image-based grading, in which case photographed submissions are routed to manual grading; please note this setting applies to an entire Graider deployment rather than to a single district, and it also stops images uploaded to our document text-extraction tool from being sent. Images uploaded to that tool are limited to instructional materials (teachers confirm this when uploading), must be a standard PNG or JPEG of 10 MB or less, and are stripped of metadata before being sent
• The Graider Assistant, a chat tool for teachers: The Assistant answers questions about your classes using your own Graider data, such as grades, assignments, rosters, accommodations and documents you upload. Only teachers can use it; students never interact with it. Each time you send a message, the conversation and any data the Assistant looks up for you are sent to Anthropic's Claude, the only AI provider the Assistant uses. Before sending, Graider replaces the names of students and parents on your roster, and any email addresses and phone numbers, with placeholder codes, and restores them only in the answer shown to you. If your roster cannot be loaded, nothing is sent. This replacement is best-effort: a name that is not on your roster, such as a nickname, is not replaced. Grades, accommodation details and the text of uploaded PDF and Word documents are sent alongside those codes. Images are never sent from the Assistant. Graider keeps a copy of each conversation on its servers for up to 24 hours so a conversation can resume after a restart, and only you can continue or clear it; your browser keeps a copy until you clear the chat or sign out. Facts you ask the Assistant to remember are stored in your account until you ask us to delete them. Operational logs may contain short excerpts of replies in their coded form. Our request for Zero Data Retention applies to OpenAI, which the Assistant does not use; Anthropic processes and retains Assistant requests under its commercial API terms, linked below
• Encrypted transmission: All communication between Graider's servers and AI providers occurs over encrypted connections (TLS/HTTPS)
• No AI training: The AI providers we use state that they do not train their models on API data by default under their commercial API terms; Google's free-tier Gemini terms differ — see each provider's policy below
• AI provider policies apply: Please review OpenAI's Privacy Policy, Anthropic's Privacy Policy, Google's Privacy Policy, and Mathpix's Privacy Policy (used for OCR of handwritten and math work) for how they handle API requests

Data Storage

Graider stores your account data, rubric configurations, assignment settings, grading results, and the student records you or your school provide (rosters, submissions) on secure, encrypted servers. Here's how we protect it:

• Encryption at rest: All stored data is encrypted on our servers
• Encryption in transit: All data transmitted between your browser and our servers uses TLS/HTTPS encryption
• Data isolation: Each educator's data is logically separated from other users
• Student records: Rosters and submissions you or your school provide are stored securely, access-controlled, and deleted on request; names are stripped from typed work before it is sent to AI providers for grading
• Secure hosting: Our infrastructure is hosted on Railway and our database on Supabase. Railway states it maintains SOC 2 Type 2 compliance; Supabase states it is SOC 2 Type 2 compliant and ISO 27001 certified. Graider is not itself SOC 2 certified: those are our providers' certifications, not ours

You have full control over your data. You can request deletion of your account and all associated data at any time by contacting us. For a category-by-category breakdown of what we keep and what deletes it, see our Data Retention page.

Third-Party Services

AI Providers

Graider uses multiple AI providers for grading (OpenAI, Anthropic, and Google). When you use Graider:

• De-identified typed content (student names stripped) is sent to the selected AI provider for grading. Answers submitted through the student portal are also sent, without name stripping, to an automated safety screen; see "AI Processing & Student Privacy" above. Photographs of student work are band-masked to cover the name line, stripped of metadata, and approved by a teacher before being sent; see "AI Processing & Student Privacy" above for what masking does and does not remove, and for how images are retained differently from text
• Teacher conversations with the Graider Assistant are sent to Anthropic only, with roster names and contact details replaced by placeholder codes; see "AI Processing & Student Privacy" above
• Graider manages API authentication on your behalf
• Each provider's data handling policies apply to content they process
• These providers state that they do not use API data to train their models by default under their commercial API terms; Google's free-tier Gemini terms differ — review each provider's policy for details

Document Processing

Photos of handwritten and math work may be sent to Mathpix for OCR transcription; these images are not de-identified before transcription. See Mathpix's privacy policy.

Hosting Infrastructure

Graider's backend is hosted on Railway and our database runs on Supabase. Your data is processed and stored according to their security practices and our own data protection measures.

Our marketing site uses Google Analytics with IP anonymization; the grading application does not share student data with analytics vendors.

Email Delivery

When a teacher sends grade notification emails to students, Graider uses Resend to deliver them. For that message, Resend receives the student's name, email address, score, letter grade, and written feedback. Of the vendors on this page, this is the one that does handle student PII, and we want to be direct about that. See Resend's Privacy Policy.

Error Tracking & Uptime Monitoring

Graider uses BetterStack to capture backend errors and to monitor the uptime of our health check. Error capture uses the open-source Sentry SDK as its client library, but our error-tracking DSN points at BetterStack's ingest endpoint, not at Sentry, Inc. BetterStack is the company that receives this telemetry. Before any event leaves our servers, a scrubbing step (before_send) strips student names, teacher names, request bodies, and other identifying details; what reaches BetterStack is stack traces, route names, HTTP status codes, and a hashed teacher ID, never student content. BetterStack also operates our public status page. See BetterStack's Privacy Policy.

Billing

Graider uses Stripe to process teacher subscription payments. Stripe receives the teacher's billing information (email, payment details); it does not receive student data. See Stripe's Privacy Policy.

Your Rights

You have the right to:

• Access any personal information we have about you
• Request deletion of your account and all associated data
• Export your data (rubrics, assignment configurations, grading results)
• Unsubscribe from communications at any time

Children's Privacy (COPPA)

Graider is operated by educators. Students interact with Graider only through the student portal — using a class login or a join code issued by their teacher — to complete and submit assignments; they cannot self-register, and their access is controlled by the teacher. We collect student information (names, school email addresses, and submitted work) only at the direction of the teacher or school, and use it solely to provide the grading service — never for advertising or profiling. Student names and identifiers are automatically stripped from typed work before it is sent for AI grading (image submissions are not yet auto-de-identified). Answers submitted through the student portal are separately checked by an automated safety screen, described under "AI Processing & Student Privacy" above, which receives the answer text without that name removal. The student records we store — rosters and submissions — are access-controlled and deleted on request.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

admin@graider.live

← Back to homepage