Privacy Policy for IRIS Admin Console

1. Introduction

Welcome to the IRIS Admin Console (“we,” “our,” or “us”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our educational administration platform and AI-powered tutoring services.

2. Information We Collect

2.1 Personal Information

We collect the following personal information:

For Instructors/Administrators:

• First and last name
• Email address
• Google account information (when using Google OAuth authentication)
• Profile information from Google (name, email, profile picture)

For Students:

• First and last name
• Class enrollment information
• Assignment submissions and related documents
• Feedback preferences and learning thresholds

2.2 Educational Data

• Class information (names, descriptions)
• Assignment details (names, descriptions, rubric URLs)
• Student documents and submissions
• Document URLs and metadata
• Learning analytics and feedback types

2.3 Technical Information

• IP addresses
• Browser type and version
• Operating system
• Device information
• Usage patterns and interactions with the platform
• Session data and authentication tokens

2.4 AI Processing Data

• Document content processed by our AI tutoring system
• Chat conversations with the AI tutor
• Writing suggestions and feedback generated by AI
• Comments and annotations on documents

3. How We Use Your Information

3.1 Core Platform Functionality

• Provide educational administration services
• Manage classes, students, and assignments
• Enable document upload and management
• Facilitate communication between instructors and students

3.2 AI-Powered Tutoring Services

• Process student documents for AI analysis
• Generate writing suggestions and feedback
• Provide interactive chat-based tutoring
• Analyze document content for educational insights

3.3 Authentication and Security

• Verify user identities through Google OAuth
• Maintain secure sessions
• Protect against unauthorized access
• Ensure platform security and integrity

3.4 Service Improvement

• Analyze usage patterns to improve functionality
• Develop new features and capabilities
• Enhance user experience

4. Information Sharing and Disclosure

4.1 Third-Party Services

We integrate with the following third-party services:

Google Services:

• Google OAuth for authentication
• Google Drive API for document access
• Google Docs API for document processing
• Google's privacy policy applies to data shared with Google services

AI Services:

• Google Gemini AI for document analysis and tutoring
• AI-generated content and suggestions

4.2 Educational Institutions

• Student information may be shared with authorized educational institutions
• Class and assignment data accessible to registered instructors
• Document submissions shared with relevant instructors

4.3 Legal Requirements

We may disclose information when required by law, including:

• Compliance with legal obligations
• Protection of rights and safety
• Investigation of potential violations
• Response to legal requests

5. Data Storage and Security

5.1 Data Storage

• Personal and educational data stored in PostgreSQL databases
• Document URLs and metadata stored securely
• Session data managed through NextAuth.js
• Service account credentials encrypted and secured

5.2 Security Measures

• Encrypted data transmission (HTTPS)
• Secure authentication protocols
• Regular security updates and monitoring
• Access controls and user permissions
• Secure API endpoints and data validation

5.3 Data Retention

• Account data retained while accounts are active
• Educational data retained for academic purposes
• Session data automatically expired
• Deleted data permanently removed from our systems

6. Your Rights and Choices

6.1 Access and Control

• View and update your personal information
• Access your educational data and submissions
• Request deletion of your account and data

6.2 Privacy Settings

• Control visibility of your information
• Manage authentication preferences
• Opt out of certain data processing
• Configure notification preferences

6.3 Data Portability

• Export your educational data
• Transfer data to other educational platforms
• Maintain control over your information

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes through:

• Email notifications
• Platform announcements
• Updated policy posting with new effective date

9. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: mmoses1127@gmail.com

Website: https://iris-console.onrender.com/

10. Additional Information

10.1 Cookies and Tracking

We use cookies and similar technologies to:

• Maintain user sessions
• Remember user preferences
• Analyze platform usage
• Improve service functionality

10.2 AI and Machine Learning

Our AI tutoring system processes educational content to:

• Provide personalized feedback
• Generate educational insights
• Improve learning outcomes
• Enhance teaching effectiveness

10.3 Data Processing Legal Basis

We process your data based on:

• Consent for optional features
• Contract performance for core services
• Legitimate interests for service improvement
• Legal obligations for compliance