Privacy Policy

Last updated: September 2026

This policy explains what information Elevix Assess collects and how it is used. It describes the application's actual behavior; it is not a claim of compliance with any specific regulatory framework unless stated.

Account information

When you register, we store your name, email address, a hashed (never plain-text) password, your role (teacher or student), and account status. If you sign in with Google, we store the Google account identifier needed to recognize you on future logins — never your Google password, and never an OAuth access or refresh token.

Classroom and student information

A teacher's classrooms, class membership, and invitations are stored to operate the classroom and assignment features. A student's participation is visible only to teachers who share a classroom with that student.

Assessment and result data

Questions, assessments, attempts, answers, scores, and grading records are stored to operate the platform's core assessment features. Results become visible to a student only once their teacher explicitly publishes them.

Class chat messages

Messages sent in a class chat are stored and visible to the teacher and students of that specific class only.

Uploaded files

Files you upload (such as question images, syllabus documents, chat attachments, or an institute logo) are stored with a randomly generated filename — never your original filename — after a file type and content check. Uploaded files are stored in a location configured to prevent them from being executed as code.

Notifications

We send in-app and email notifications for events relevant to your account, such as an assignment, an announcement, or a published result.

Google OAuth login

If you choose "Continue with Google," Google authenticates you and shares your name and email address with us. We do not receive or store your Google password.

Teacher-provided AI API keys

If you configure an AI provider for question generation or AI chat, your API key is encrypted before it is stored, and is only ever used to make requests to your chosen AI provider on your behalf. It is never displayed back to you in full.

AI provider interactions

When you use an AI feature, the relevant prompt content (such as a topic, a syllabus excerpt, or a submitted answer) is sent to the AI provider you configured, using your own API key. We do not control, and are not responsible for, that provider's own data handling.

Logs and security information

Application logs may record error and security-relevant events (such as a failed login) for the purpose of operating and securing the platform. We do not log passwords or full API keys.

Cookies and sessions

We use a session cookie to keep you signed in and a CSRF token to protect form submissions. We do not use third-party advertising or tracking cookies.

Data retention

We retain account and assessment data for as long as your account exists, so classes, questions, and results remain usable. You may delete your account from your profile settings; we do not currently publish a fixed automated deletion schedule beyond that.

Your responsibilities

You are responsible for the accuracy of information you provide, the security of your own account credentials and any AI API key you configure, and for using class chat and uploads appropriately.

Contact

Questions about this policy or your data can be sent to [email protected], or via our Contact page.