Privacy Policy

1. Introduction

AfterZero ("we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our educational assessment platform.

We comply with the General Data Protection Regulation (GDPR), India's Digital Personal Data Protection Act (DPDP), and the Children's Online Privacy Protection Act (COPPA).

2. Information We Collect

2.1 Personal Information

We collect the following personal information:

• Name and email address
• Role (student, teacher, parent, or principal)
• School/organization affiliation
• User-generated content (quiz responses, performance data)
• Parent-student relationship information

2.2 Automatically Collected Information

• Usage data (quiz submissions, login times, feature usage)
• Device information (browser type, operating system)
• IP address and location data
• Cookies and similar tracking technologies

2.3 Educational Records

• Quiz scores and performance metrics
• Learning progress and analytics
• AI-generated assessments and grading data
• Teacher feedback and annotations

3. How We Use Your Information

We use collected information for:

• Providing and maintaining the platform
• Creating and grading quizzes using AI technology
• Generating performance analytics and insights
• Communicating important updates and notifications
• Improving our services and user experience
• Ensuring platform security and preventing fraud
• Complying with legal obligations

4. Data Sharing and Disclosure

4.1 Within Your Organization

Student data is shared with teachers and principals within your school organization. Parents can view their children's performance data.

4.2 Third-Party Service Providers

We share data with trusted service providers:

• Supabase: Database and authentication services
• OpenAI: AI-powered quiz generation and grading
• Vercel: Hosting and deployment
• Resend: Email communications

4.3 Legal Requirements

We may disclose information when required by law, court order, or to protect our rights and safety.

5. Children's Privacy (COPPA Compliance)

We take special care to protect children's privacy:

• We collect minimal information from students under 13
• School authorization is required for student accounts
• Parents can review and request deletion of their child's data
• Student data is never sold or used for advertising
• AI processing of student data is limited to educational purposes

6. Data Security

We implement industry-standard security measures:

• TLS 1.3 encryption for data in transit
• Encryption at rest for all stored data
• Row-level security (RLS) policies in our database
• Regular security audits and updates
• Multi-factor authentication for sensitive accounts
• Restricted access to personal data

7. Your Rights

Under GDPR and DPDP, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate information
• Erasure: Request deletion of your data
• Portability: Export your data in a machine-readable format
• Objection: Object to certain data processing
• Restriction: Limit how we use your data
• Withdraw Consent: Revoke consent at any time

To exercise these rights, contact us at info@afterzero.app

8. Data Retention

We retain analytics data for 1 year for educational purposes. Account data is retained while your account is active. Upon deletion request, data is removed within 30 days, except where required by law.

9. International Data Transfers

Your data may be transferred to and processed in countries outside your residence. We ensure adequate safeguards are in place for international transfers.

10. Cookies and Tracking

We use cookies for:

• Authentication and session management
• User preferences and settings
• Analytics and platform improvements

You can control cookies through your browser settings. See our Cookie Policy for details.

11. Updates to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. Continued use of the platform constitutes acceptance of the updated policy.

12. Contact Us

For questions about this Privacy Policy or to exercise your rights, contact us: