Privacy Policy
Last updated: 2026-06-10
This policy explains how Gradefeed processes personal data when a school uses it to grade and return exams. Your school is the data controller; Gradefeed is the data processor acting on the school's instructions.
Data we process
Student names and student numbers, exam paper PDFs, AI-generated grades and feedback, and parent contact emails supplied by the school.
Account data for teachers and administrators (name, email, role).
Why we process it
Solely to provide the grading service the school has asked for: extracting answers, grading against a rubric, returning results to students and listed parents, and handling objections.
Retention
Data is retained until the school deletes it, or for up to two years after the school's account is closed, whichever comes first.
Your rights
Students and parents exercise access and erasure rights through their school, which controls the data. The school can delete classes, courses, and rosters at any time.
Processors and data residency
Application data and paper PDFs are stored in the EU (Supabase, eu-central-1). Functions run in Frankfurt (Vercel, fra1). Transactional email is sent via Resend (eu-west-1). AI grading is performed by Anthropic; paper PDFs and rubric content are transmitted to Anthropic (US) during grading and are not stored outside our own infrastructure.
Contact
For any question about your data, contact your school administrator, or visit gradefeed.com/legal/privacy.