Privacy Statement

Laws we follow

• Your state's student privacy laws: we follow the student privacy laws of your school's state. For every school, whether or not it has signed anything with us, that means no sale of student information, no advertising, no profiles beyond your school's purposes, reasonable security, deletion on request, and the breach notice described below.
• FERPA: we use student information only for your school's purposes, and we never re-identify de-identified information.
• Data privacy agreement: if your district would like a signed student data privacy agreement, we'll sign one. We prefer the standard agreement your state already provides, such as the California Student Data Privacy Agreement, the Illinois National Data Privacy Agreement, the Texas National Data Privacy Agreement or the Massachusetts Student Data Privacy Agreement.

Who this covers

This statement covers the School Operator prototype: an assistant that does everyday work for you in your school's own systems. It applies to you, the staff member using it, and to the student information the assistant sees while it works.

We act at your direction, only for your work for your school. If your school or district signs a data agreement with us, we also act under its direction.

Using School Operator doesn't mean your school has approved it. Some districts require approval before staff use a tool that handles student information. Checking that, and getting any approval your district needs, is up to you. If your district would like a signed student data privacy agreement, ask us and we'll sign one, preferably the standard agreement your state already provides.

What the assistant sees and does

To do your task, the assistant uses your school's web-based systems the way you would, in a web browser of its own. It sees what you would see there, including student names, attendance, records and parent contact details.

• It can only do what your own account can do.
• It asks you before it sends anything or changes a record.
• You can watch it work and take control at any time.

What we do and don't do

We do:

• Use student information only to complete the tasks you ask for.
• Share it only with the companies listed below, under their data protection terms.
• Delete it when you or your school ask.

We don't:

• Use student information, identified or de-identified, to train AI models.
• Sell it, or use it for advertising or for profiles beyond your school's purposes.
• Store tool passwords in School Operator’s servers or chat.

Who handles your data

Four companies handle student information for us. The table names each company once; after that, we refer to them by what they do. Two others handle only your account details or masked usage data.

Provider	What it does for us	Sees student information?	How long it keeps it
AI model provider (OpenAI)	Runs the AI model that reads your school systems and decides what to do	Yes, everything the assistant sees while it works: what's on screen in your school systems, the files you give it, and your request	Up to 30 days, only to check for abuse. It isn't used to train AI models
Cloud provider (Amazon Web Services)	Runs School Operator's servers, database and storage	Yes	Kept only as long as we keep it (see below)
Browser provider (Kernel)	Runs the assistant's web browser in the United States	Yes, everything shown in the assistant's browser, and your sign-ins to your school tools	Sign-ins last only in your assistant's browser; School Operator does not save credentials or put your sign-ins in anyone else's browser. May record the assistant's browser during prototype tasks, except while you sign in (see Recordings). Browser activity logs are disabled
Website host (Vercel)	Runs the School Operator website, including your chat	Yes, chat messages passing through	Not stored. We keep message contents out of its logs, which last 1 day
Sign-in provider (WorkOS)	Signs you in to School Operator	No, your email address only	For as long as you have an account
Analytics provider (PostHog)	Measures how the product is used	No, masked usage events only	Up to 1 year

The AI model is OpenAI's. To do your task, the assistant sends OpenAI what it sees in your school systems, including student information. You sign in on the real website in your assistant's browser. During private sign-in, the assistant cannot read, screenshot or control that browser; recording stops before you enter your details. The browser provider operates the computer and processes the sign-in.

Our AI model provider, cloud provider and website host may not use student information to train AI models. One exception you should know about: our browser provider's standard terms let it use anonymized customer data to improve its services, including for machine learning. We don't train AI models on student information, and our other providers may not.

We store student information in the United States. The AI model may process it outside the United States while it works on your task.

Who at School Operator can see what

While School Operator is a prototype, our founders can see your tasks, chats and recordings, including student information, to help you and improve the product. We don't share them with anyone else.

• Supervised sessions: when you start a session with us, a founder may watch the assistant's browser live alongside you, including student information.
• Recordings: our founders may watch recordings of the assistant's browser (see Recordings).
• Your chat: you see real names in your chat.

Our providers' staff may have technical access to the systems they run for us, limited by their terms.

Recordings

While School Operator is a prototype, our browser provider may record the assistant's browser during your tasks, including after you sign in to a school tool. Recording stops before you sign in and starts again only after you click I’m signed in, so recordings don't show you entering your password. Our founders may watch recordings to help you and improve School Operator. Recordings are deleted after 30 days.

Your password and your sign-ins

You sign in directly on the website in your assistant's browser. School Operator does not offer saved passwords. Your assistant steps away while you sign in, and resumes only after you click I’m signed in and the completion check passes. The sign-in stays in your assistant's browser, which moves with you to whichever of your chats you use next, so you don't have to sign in again in a new chat. It is never saved to a shared profile or put in anyone else's browser. The browser is deleted after 24 hours with nothing happening. Recording stops while you sign in (see Recordings).

Your browser provider runs the assistant's browser, so your sign-in passes through its systems. The assistant can't see you sign in, but we can't promise the browser provider has no way to see your password. Before the assistant comes back, we check the page for password and verification-code boxes, but this check can miss them on some websites. If a website still shows your password or a code after you click I’m signed in, the assistant could see it and a recording could capture it. Never put a password in the chat or in a file you upload.

The browser provider’s privacy policy and terms describe its handling of this data.

How long we keep data

What	How long
Activity logs	30 days, then deleted automatically
Your chat history and uploaded/downloaded chat files	Deleted after 30 days of inactivity
Private working files	Deleted when the task ends; retained while it waits or resumes
Recordings of the assistant's browser	30 days, then deleted automatically
Direct sign-ins	Until your assistant's browser expires (24 hours with nothing happening) or the website ends the session

If you or your school ask, we delete everything we hold for your school within 7 days and confirm it in writing. Copies in our providers' backups are deleted on their own schedules.

If something goes wrong

If student information is exposed or accessed without permission, we'll tell you and your school within 72 hours of confirming it, and sooner where the law requires, so your school can meet its own deadlines for telling families and authorities. We'll say what happened, what information was involved, and what we're doing about it. If the problem is at one of our providers, we can only tell you once they tell us.

Contact and changes

Questions, a request to delete your data, or a request for a data agreement: support@schooloperator.com. If we change how we handle student information, we'll tell you before the change takes effect and ask you to agree again.