Skip to main content
Privacy Policy summary
- We do not run ads in Gradebird, sell Student Data, or use Student Data for advertising or marketing.
- Gradebird is designed to support FERPA-compliant educational use.
- We delete or de-identify applicable hosted data on valid request, subject to reasonable constraints.
- We do not use identifiable student data to train generalized AI or machine-learning models.
Detailed privacy policy
- Information we collect: We collect account information such as name, email address, login details, and related profile information. We also collect information users choose to upload or create in Gradebird, which may include course rosters, student identifiers, exam content, rubric materials, scanned responses, assessment records, and operational metadata (collectively, “Student Data” when the information relates to a student).
- Service operator: Gradebird is operated by Avian Educational Software, Inc. This Privacy Policy describes Avian's data practices in operating Gradebird.
- Institutional terms: If you access Gradebird through an educational institution or university license, your data may also be governed by a Master Services Agreement (MSA), Data Protection Addendum (DPA), or other written agreement between Avian Educational Software, Inc. and your institution. To the extent those institutional terms conflict with this Privacy Policy, the institutional terms will control.
- How we use information: We use information to provide and secure the service, authenticate users, support printing and scan workflows, generate assessment candidates, maintain audit history, respond to support requests, prevent abuse, and evaluate and improve reliability, accuracy, and usability. This may include reviewing scanned responses and AI assessment outputs when reasonably necessary for those purposes and permitted by applicable institutional terms.
- What we do not do: We do not sell Student Data or use Student Data for advertising or marketing.
- Who can access data: Access is primarily controlled by you and the people you choose to work with in Gradebird. Limited Gradebird personnel may access data when reasonably necessary for support, product evaluation and improvement, assessment-quality review, security review, abuse prevention, incident response, or compliance with law.
- De-identified data: We treat data as de-identified only after removing or obscuring direct and indirect identifiers and making a documented, reasonable determination, taking into account other reasonably available information, that no individual student is personally identifiable. Subject to applicable institutional terms, we may retain de-identified data indefinitely and use it for analytics, research, benchmarking, service improvement, and the development, training, testing, and evaluation of generalized artificial-intelligence and machine-learning models. We will not use Student Data containing personally identifiable information to train generalized models, permit our service providers to use that information to train their own generalized models, or attempt to re-identify de-identified data.
- Retention and deletion: We retain identifiable data only for as long as reasonably necessary to provide and secure the service, preserve required records and audit history, comply with law, and fulfill applicable institutional agreements. Following a valid deletion request, or when identifiable data is no longer needed for those purposes, we will delete or de-identify applicable hosted data within a reasonable timeframe, subject to backup cycles, security logging, legal obligations, and other applicable institutional requirements. Because De-identified Data is not linked to a particular student or account, individual deletion requests do not apply to De-identified Data.
- Educational privacy: Gradebird is designed to support legitimate educational, instructional, assessment, pilot, and administrative uses involving course and assessment records.
- Security posture: We use reasonable administrative, technical, and operational measures to protect data in our systems. No internet-based service can guarantee absolute security, so you should avoid uploading information you are not authorized to process.
- Questions and deletion requests: If you need a privacy review, deletion request, or related discussion, please contact us at compliance@gradebird.com.
