Privacy Policy

1. Who we are

Source Quest is a classroom tool that helps teachers turn source material into teacher-approved learning activities for their students. This policy explains what information we collect, how we use it, and the choices available to teachers and schools.

2. Information we collect

We collect different information for teachers and students:

• Teacher accounts: name, email address, hashed password, and billing identifiers managed by our payment processor. We never store full card numbers.
• Teacher content: the source material, activity drafts, and questions a teacher creates or approves.
• Student activity: a student-entered display name (not required to be a legal name), the answers a student submits, source-clue usage, and short written explanations. Students do not create accounts and we do not request student email addresses, phone numbers, or precise location.
• Technical data: log data, device/browser information, and product analytics used to operate and improve the service.

3. Students and children's privacy (COPPA / FERPA)

Source Quest is designed for use under the direction of a teacher or school. Students join an assignment with a code and a display name; they do not create accounts.

Where a school uses Source Quest with students under 13, the school or teacher directs the collection of limited student information for an educational purpose, and acts on behalf of parents for consent purposes under COPPA. Schools remain the owners of student education records under FERPA; we process that information only to provide the service and on the school's instructions.

We do not use student information to build advertising profiles or sell it. A teacher or school may request deletion of their students' activity at any time (see Data retention and deletion).

4. How we use information

• To provide the core product loop: generating drafts, teacher review and approval, publishing assignments, and recording student progress.
• To provide optional AI features (question generation) when enabled by a paying teacher account.
• To process subscriptions and prevent abuse, including rate limiting and account-level usage limits.
• To maintain security, debug issues, and improve the product.

5. AI processing

When live AI features are enabled, teacher-provided source text and question content may be sent to our AI subprocessors to generate question drafts. We instruct our AI subprocessors not to train their models on data submitted through the API, subject to their terms.

6. Service providers (subprocessors)

We rely on a small set of vendors to operate Source Quest. Current categories include:

• Payments — Stripe (subscription billing).
• AI — OpenAI and/or Together AI (text generation) when live AI is enabled.
• Email — Resend (account verification and password reset).
• Hosting & storage — our cloud host and backup storage providers.
• Monitoring & analytics — Sentry (error monitoring) and PostHog (product analytics).

7. Data retention and deletion

We retain teacher accounts and content while the account is active. Teachers can delete individual activities at any time, which removes the associated source, questions, and student attempts for that activity.

A teacher or school may request deletion of their account and associated student data by contacting us; we will delete or de-identify it within a reasonable period, except where retention is required for legal, security, or billing purposes.

8. Cookies and analytics

We use strictly necessary cookies for authentication and session management. Where product analytics are enabled, they help us understand feature usage. Depending on your region, we will present analytics/cookie choices as required by applicable law.

9. Security

We use industry-standard measures including encrypted transport, hashed passwords, scoped access controls, and regular backups. No method of transmission or storage is completely secure, but we work to protect information appropriate to its sensitivity.

10. Your rights

Depending on your location, you may have rights to access, correct, export, or delete personal information. Teachers and schools can exercise these rights, including on behalf of their students, by contacting us.

11. Changes to this policy

We may update this policy as the product evolves. Material changes will be communicated through the service or by email, and the effective date above will be updated.

12. Contact

Questions about this policy or a data request can be sent to [email protected].