Privacy Policy

This Privacy Policy explains how Verdical (“Verdical,” “we,” “us,” or “our”) collects, uses, discloses, and protects information through the Veridical website, applications, assignment rooms, reports, and related services (the “Service”).

When a school or district provides Veridical to students, the school generally controls the student education records and instructs us how to process them. We act as a service provider or school official for the school’s educational purposes. For direct teacher accounts and our public website, Verdical may determine the purposes described in this Policy. A school’s privacy notice and signed agreement may provide additional terms.

Account and profile information

Name, email address, account role, authentication identifiers, school or organization affiliation, and account settings. If you sign in with Google, we receive the basic account information Google makes available for authentication; we do not receive your Google password.

Classes, assignments, and education records

Class and period names, join and enrollment records, assignments, instructions, question text and images, answer choices and keys, student responses and drafts, grades, feedback, rubrics, due dates, accommodations, submission status, and teacher-student associations.

Assignment-room activity

Start and submission times, time spent, typing and revision patterns, word counts, paste and copy events, large text insertions, focus or tab changes, fullscreen exits and returns, time away, autosave status, and the activity timeline. We do not use webcams, microphones, facial recognition, biometric identification, or device-wide monitoring.

Technical and usage information

IP address, browser and device type, operating-system information, timestamps, referring pages, pages and features used, error reports, security events, approximate location inferred from IP, and cookies or similar local storage needed for login, preferences, security, and service operation.

Commercial and communications information

Subscription, transaction, plan, invoice, and seat information when paid services are available; quote-request details such as organization, contact information, estimated teachers and students, timeline, referral source, and notes; and messages sent to support or sales. Payment processors may collect payment-card details directly; we generally receive transaction status and limited billing details.

• you, when you register, submit work, create content, request a quote, or contact us;
• teachers, schools, districts, and organization administrators;
• authentication, payment, and other service providers you choose to use;
• your browser or device as you interact with the Service; and
• automated generation from activity in an assignment room, such as timestamps and integrity signals.

• provide accounts, classes, assignment rooms, autosave, submissions, grading, reports, and support;
• authenticate users, maintain sessions, remember settings, and recover accounts;
• show students their own work and activity and show authorized teachers relevant classroom records;
• calculate scores, generate activity summaries, and provide advisory integrity signals;
• process subscriptions, quote requests, organization seats, and related communications;
• secure the Service, prevent fraud and abuse, enforce limits, investigate incidents, and debug errors;
• maintain, analyze, and improve reliability, accessibility, performance, and features;
• comply with school instructions, contracts, legal process, and applicable law; and
• send service, security, support, and transactional messages. Marketing messages, if any, may be opted out of.

Where automated or AI-assisted analysis is enabled, its output is advisory. We do not permit it to make final disciplinary or other high-impact decisions about a student.

School control. Schools retain control of student education records. We use those records only to provide the contracted educational service, at the school’s direction, and for security, legal, and operational purposes consistent with that relationship. We do not sell student information, use it for targeted advertising, or create advertising profiles.

FERPA. When applicable, we receive education records as a school official performing a service for which the school would otherwise use employees, with a legitimate educational interest and under the school’s direct control concerning use and maintenance of those records. Schools remain responsible for FERPA notices, access decisions, and their own compliance duties.

Children under 13. Veridical is not offered for independent use by children under 13. Such a child may use it only when a school has authorized collection for an educational purpose and may consent on the parent’s behalf as permitted by COPPA, or when a parent or legal guardian has provided legally valid consent. We collect only information reasonably needed to provide and secure the Service. We do not condition participation on providing more information than reasonably necessary.

Parents may request to review or delete a child’s personal information or refuse further collection. For a school-managed account, contact the school first so it can verify and direct the request. Schools may review, correct, export, or request deletion of student information, subject to law and legitimate retention needs. If we learn that a child’s information was collected without required authorization, we will take reasonable steps to delete it.

We may disclose information only as described below:

• Schools and authorized users: to the school, district, teachers, students, guardians, and administrators with authorized access based on role and classroom relationship.
• Service providers: to vendors supporting hosting, storage, authentication, email, payments, monitoring, support, security, and analytics, under contractual restrictions appropriate to their work.
• Legal and safety: when reasonably necessary to comply with law or valid legal process; protect users, schools, Verdical, or the public; investigate fraud or security incidents; or enforce agreements.
• Business changes: in a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to applicable student-data restrictions and notice requirements.
• With direction or consent: when the school, account holder, parent, or other authorized person directs or consents to the disclosure.
• De-identified information: information reasonably modified so it cannot identify an individual, provided we do not attempt to re-identify it except to test safeguards.

We do not sell personal information or student data. We do not share personal information for cross-context behavioral advertising and do not display targeted advertisements based on student data.

We retain information only as long as reasonably necessary to provide the Service, fulfill school instructions and contracts, maintain security and backups, resolve disputes, enforce agreements, and satisfy legal, accounting, or records-retention duties. Retention depends on the information, account status, school direction, and applicable law.

When information is no longer needed, we take reasonable steps to delete or de-identify it. Deletion from active systems may not immediately remove limited copies from protected backups; those copies remain restricted until overwritten under ordinary backup cycles. A school may request return or deletion of student records when its relationship ends, subject to lawful retention and a reasonable processing period.

Depending on where you live and subject to legal exceptions, you may have rights to know, access, correct, delete, or obtain a copy of personal information; restrict or object to certain processing; withdraw consent; opt out of certain sales, sharing, targeted advertising, or profiling; and appeal a denied request. We do not discriminate for exercising a privacy right.

Submit a request using the contact below. We may verify identity and authority before responding. An authorized agent may submit a request where allowed by law, but we may require proof of authority. For school-managed student records, we generally coordinate with the school. You may appeal a denied request by replying with “Privacy Appeal.” You may also complain to your state attorney general or other regulator.

Browser signals such as Global Privacy Control will be honored where legally required and technically applicable. Because we do not sell personal information or use it for cross-context behavioral advertising, there may be no applicable sale or targeted-advertising activity to opt out of.

We use administrative, technical, and organizational safeguards designed to protect information, including access controls, account authentication, encrypted network transport, private storage, role-based permissions, database-level protections, rate limits, input limits, and security monitoring.

No method of transmission or storage is completely secure. Users must protect credentials and notify us promptly of suspected compromise. If a breach requires notice, we will notify affected schools, users, regulators, or others as required by applicable law and contract.

Verdical is operated for the United States. Information may be processed in the United States and other locations where our service providers operate. If the Service is offered outside the United States, we will use legally required safeguards for applicable cross-border transfers. Do not use the Service where doing so would violate local law or a school’s contractual requirements.

The Service may connect to Google sign-in, payment processors, email providers, or external links. Their handling of information outside Veridical is governed by their own privacy policies. Schools should review applicable providers and agreements before enabling optional integrations.

We may update this Policy as the Service or law changes. We will post the updated version and effective date. We will provide additional notice of material changes when required, and obtain consent when required by law. We will not materially weaken protections for previously collected student data without appropriate notice, school direction, or consent.

Verdical operates Veridical. For privacy questions, requests, COPPA inquiries, school data requests, or security concerns, email verdicalinquires@gmail.com.

Include your name, account email, relationship to the student or school, and the nature of the request. Do not send passwords, full student records, answer keys, or other sensitive content by email. Our Terms of Service also applies to use of the Service.