Privacy Policy

• Name and email address when you register
• Password (stored as a one-way encrypted hash ; we never store your plaintext password)
• Lesson plans, student rosters, grades, class notes, and other educational content you create
• Payment information (processed securely by Stripe ; we do not store card numbers)

If you sign in with Google, we receive your name, email address, and profile picture. We use this only to create and identify your WiseBoard account. We do not access your Google Drive, Gmail, or Google Classroom unless you explicitly grant additional permissions.

• Log data (IP address, browser type, pages visited, timestamps)
• Session cookies to keep you logged in

Before any prompt leaves WiseBoard's servers, it passes through a three-tier minimization layer that runs inside our API service:

• Tier 1 ; Pattern scrubbing. Every prompt is regex-scanned and the following patterns are replaced with placeholders before the request is sent to the AI provider: email addresses ([EMAIL_REMOVED]), North-American phone numbers ([PHONE_REMOVED]), Social Security numbers ([SSN_REMOVED]), US street addresses ([ADDRESS_REMOVED]), medical record numbers ([MRN_REMOVED]), and dates of birth ([DOB_REMOVED]). Placeholders are not reversible.
• Tier 2 ; Pseudonymization. For features where WiseBoard knows the student/parent/school names involved (report cards, progress reports, recommendation letters, parent newsletters, AI feedback on student work, classroom comments), each name is replaced with an opaque, per-request token such as STUDENT_1, PARENT_2, SCHOOL_1. The mapping lives only in server memory for the duration of the request and is never logged or persisted.
• Tier 3 ; Restoration. The model's reply is post-processed inside WiseBoard before it reaches the teacher: tokens are swapped back to the original names so the user-facing experience is unchanged. The AI provider only ever sees the redacted form.

Only the specific prompt text needed to fulfill your request ; minus the patterns and names removed by the minimization layer above. For interactive Pip chat where the teacher explicitly asks Pip about their roster ("how is my class doing?"), the system context may include a list of class names and student first names so Pip can personalize the answer; this context is loaded only for that turn and inherits the same Tier 1 pattern scrubbing.

• Student or parent email addresses, phone numbers, street addresses, SSNs, dates of birth, or medical record numbers (Tier 1 strips these even from free-text fields like pasted student work)
• Student last names or full parent names in report cards, progress reports, recommendation letters, parent newsletters, or AI feedback on student work (Tier 2 pseudonymizes these)
• Student photos, avatars, audio recordings, or video
• Freeform accommodation descriptions, IEP/504/ELL plan details, or any individualized health or disability information
• Account credentials, payment information, or session tokens

WiseBoard uses OpenAI's zero-retention enterprise API tier. Under our agreement, OpenAI: (a) does not use prompts or completions submitted through WiseBoard to train or improve its models, (b) does not retain prompt or completion data beyond what is needed to return the response, and (c) processes the data solely as a subprocessor on WiseBoard's behalf under written contract. We will not change AI providers, or change to a non-zero-retention tier, without first updating this Policy and giving subscribed districts the 30-day notice described in Section 5.

AI output may be inaccurate, incomplete, biased, or unsuitable for your specific classroom. Treat every AI-generated draft as a starting point, not a finished product. You are solely responsible for reviewing AI output before relying on it, sharing it with students or parents, recording it in a permanent record, or making any decision based on it. We do not guarantee that AI output is free from error or bias and we disclaim warranties to the maximum extent permitted by law (see our Terms of Service).

You can avoid using Pip entirely; AI features are optional and never the sole path to perform a core task. If your district's policies or Data Privacy Agreement require AI features to be disabled, contact us at info@mywiseboardclassroom.com and we will turn them off for the district's accounts.

If a teacher enables Pip's Study Hall, students enrolled in that class can chat with Pip about the subjects the teacher allows. The teacher controls whether Study Hall is on, the allowed topics, banned keywords, daily question cap per student, and whether Pip guides or gives answers. Every student message and every Pip reply is stored in WiseBoard so the teacher can review the full exchange in an in-app monitoring feed; teacher views of that feed are written to an immutable audit log. Outbound prompts sent to OpenAI inherit the same Tier 1 / Tier 2 minimization described above, with the student's first name pseudonymized as STUDENT_1. WiseBoard runs an automated distress detector on every student message; if a self-harm, abuse, or crisis signal is matched, Pip stops the AI conversation, returns a supportive trusted-adult / crisis-hotline response, and emails the class teacher an alert (the alert email contains the student name and class only, never the message body). WiseBoard is not a substitute for professional mental-health response; if a student is in immediate danger, contact emergency services or the district's crisis team.

Some Pip features (lesson plan drafting, quiz generation, sub plans) accept teacher-supplied reference URLs ; for example, a chapter from a publisher's site or a state-standards page. WiseBoard's API server fetches those URLs from our infrastructure (not the AI provider's) with strict timeouts and per-fetch byte caps, then injects the resulting text into the prompt as a reference block delimited by sentinels with explicit anti-prompt-injection instructions. We do not fetch authentication-protected URLs and we do not retain fetched reference content beyond the request. You are responsible for ensuring you have the right to use any URL you supply.

• Identifiers entered by the teacher ; first name, optional last name (or anonymous code), student ID, grade, optional photo or avatar.
• Educational records entered by the teacher ; attendance, behavior level changes (e.g., "Ready to Learn"), classwork completion, assignment scores, teacher comments, accommodation flags, parent-contact log entries.
• Activity data automatically generated ; timestamps when a teacher acts on the child's record (e.g., marked present at 8:14 a.m.).

We do not collect persistent identifiers from a child for any non-educational purpose, do not collect geolocation, do not collect audio or video of children, and do not enable behavioral advertising or build profiles for advertising.

WiseBoard is offered to educators for use solely in the school context and for educational purposes. Consistent with FTC guidance and 16 C.F.R. § 312.5(c) (the "school authorization" framework), the school or school district acts as the parent's agent for the limited purpose of authorizing WiseBoard to collect personal information from students under 13 for the use and benefit of the school, and for no other commercial purpose. The school district is in the best position to evaluate WiseBoard on the parent's behalf and to obtain any direct parental notice or consent that local law requires.

Schools that contract with WiseBoard are encouraged to provide parents with notice of WiseBoard's use, and we make this Policy and our FERPA Compliance Statement available to support that notice. We will provide direct parental notice and obtain verifiable parental consent ourselves only if a school requests it or applicable law requires it.

Personal information collected from or about a child under 13 is used only to (a) provide and improve the educational service requested by the school, (b) maintain the security and integrity of the Service, and (c) meet our legal obligations. We do not use children's personal information for marketing or advertising; we do not sell or share it for cross-context behavioral advertising; we do not condition a child's participation in any activity on disclosing more information than is reasonably necessary; and we do not disclose it to third parties except to the limited subprocessors listed in Section 5 acting on our behalf.

Parents and legal guardians of a student under 13 may at any time, through the child's school: (i) review the personal information we have collected from or about the child, (ii) request that we delete it, and (iii) refuse to permit further collection. Because the school is the records controller under FERPA, parents should direct these requests to the child's teacher or the district's data privacy officer; the school will then forward the request to us, and we will respond to the school within 30 days.

Teachers who do not have a District-signed Data Privacy Agreement in place are encouraged to use WiseBoard's Anonymous Code or Student-ID mode, which never sends a student's name or identifying information to our servers. See the FERPA Compliance tab for details.

WiseBoard, LLC (operator) ; info@mywiseboardclassroom.com · P.O. Box 152, Strasburg, PA 17579. We are the only operator of the Service for COPPA purposes; the subprocessors listed in Section 5 act on our behalf under written agreements that prohibit them from using the data for any purpose other than to provide their service to us.

• Identifiers ; name, email address, account ID, IP address.
• Customer records (Cal. Civ. Code § 1798.80(e)) ; billing name and address (held by Stripe).
• Commercial information ; subscription plan, billing history.
• Internet/network activity ; pages visited within the Service, log data, session timestamps.
• Professional / employment information ; school name, grade taught, role (teacher / admin), if voluntarily provided.
• Education information (FERPA-covered) ; only when entered by a teacher; see Sections 3 and 7 above and our FERPA Compliance tab.
• Inferences ; none for advertising or profiling purposes.

We collect the categories above directly from you, automatically from your use of the Service, and from optional integrations you initiate (Google Sign-In, LMS imports). We use them to provide the Service, process payments, send transactional emails, secure the platform, and meet legal obligations. We disclose these categories only to the subprocessors listed in Section 5, all of whom are contractually bound to use the data solely on our behalf.

We do not use or disclose sensitive personal information (such as account credentials) for purposes other than those permitted under Cal. Civ. Code § 1798.121(a) without offering you the right to limit such use. You may further restrict our use of sensitive personal information by contacting us at the email above.

WiseBoard does not "sell" personal information and does not "share" personal information for cross-context behavioral advertising as those terms are defined in CCPA/CPRA. We have not done so in the prior 12 months and have no plans to do so. We do not sell or share the personal information of consumers we actually know to be under 16. Because we do not engage in sale or sharing, no consumer-facing "Do Not Sell or Share My Personal Information" mechanism is required; nevertheless, we honor Global Privacy Control signals as described in Section 10.

We retain each category of personal information only for as long as necessary to provide the Service and meet our legal obligations, as detailed in Section 7.

Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and other US states with comprehensive consumer privacy laws have substantially similar rights. Use the same email address to exercise them. Where applicable state law provides for an appeal of our decision on your request, we will describe the appeal process in our written response.