Student Privacy Pledge
Auriga OS is built for students. Protecting student privacy is not a legal checkbox — it is a core product value. This pledge summarises our commitments to students, parents, and the schools that trust us with education data.
Last updated: April 2026
Our Commitments
We never sell student data
Student education records and personal information are never sold, rented, or traded to advertisers, data brokers, or any third party for commercial purposes.
No behavioral advertising
We do not display targeted advertisements to students based on their education records or personal information collected through the platform.
Data is used only to provide the service
Student information is used solely to operate, improve, and support the Auriga platform. It is never repurposed for unrelated commercial activities.
You control your data
Students and parents have the right to access, correct, and request deletion of education records at any time through the platform or by contacting us at admin@ez-ai.io.
Encryption at rest and in transit
All data is encrypted using AES-256 at rest (Google Cloud default encryption) and TLS 1.2+ in transit. Firebase Auth provides secure, token-based authentication.
Session security
Authenticated sessions automatically expire after 30 minutes of inactivity. The platform enforces idle timeouts and supports multi-factor authentication.
Subprocessor transparency
We disclose all third-party services that process student data, including Google Cloud Platform, Firebase, and our AI providers. Schools may request a complete subprocessor list.
School control
Educational institutions retain ownership of their student data. Schools may request data export, data deletion, or termination of processing at any time under our DPA.
FERPA Compliance
The Family Educational Rights and Privacy Act (FERPA) is a federal law that protects the privacy of student education records. Auriga is designed to help educational institutions meet their FERPA obligations.
- Student education records are treated as protected education records under FERPA.
- Access to student records is restricted to authorized school officials with a legitimate educational interest.
- Auriga acts as a "school official" under the FERPA school official exception when providing services to educational institutions.
- We do not disclose education records to third parties without prior written consent, except as permitted by FERPA (e.g., school transfers, court orders, health/safety emergencies).
- Students who are 18 or older (or enrolled in a post-secondary institution) hold their own FERPA rights. Parents hold FERPA rights for students under 18.
- Eligible students and parents may submit record correction requests within the platform.
Data Deletion & Export Rights
Students and parents may request a complete export of their education records or permanent deletion of their account at any time. Deletion requests enter a 30-day grace period before permanent removal, during which the data can be restored if the request was made in error.
Schools with a signed DPA may request bulk deletion of all student data associated with their institution at contract termination. Auriga will complete the deletion within 30 days and provide written confirmation.
Contact Our Privacy Team
Questions about student privacy, data deletion requests, or FERPA inquiries can be directed to: admin@ez-ai.io
For schools: view our Data Processing Agreement template or contact schools@auriga.education to initiate a signed DPA.