Privacy Policy

Effective Date: April 3, 2026  ·  Agoge Development LLC

1. Overview

Agoge Development LLC ("Agoge," "we," "us," "our") is committed to protecting the privacy of instructors, administrators, and students who use the Agoge Platform. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your data.

By using the Platform, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Platform.

2. What Data We Collect

2.1 Account Information

When you create an account, we collect:

• Name and email address
• Organization or institution name
• Role (instructor, administrator)
• Password (stored as a secure hash; we cannot recover your password)
• Invite code used for registration

2.2 Assignment Submissions

To use grading features, instructors upload ZIP files containing student submissions. These files may include student names, student ID numbers, and assignment content (documents, code files, workbooks, etc.). We process these files to provide grading results and generate feedback reports.

2.3 Grading Results and Rubrics

We store grading rubrics, grading configurations, and the results produced by the Platform (scores, AI-generated feedback, gradebook CSV files). These are retained to allow instructors to download results and review grading history.

2.4 Usage Data

We collect operational data to improve the Platform, including:

• Features accessed and actions performed (anonymized where possible)
• Error logs and performance data
• Session duration and access timestamps
• Browser type and operating system (from server logs)

We do not use third-party analytics services (e.g., Google Analytics) on the Platform.

3. How We Use Your Data

Purpose	Data Used
Providing the grading and content generation service	Account info, submissions, rubrics
Generating feedback reports and gradebook exports	Submissions, grading results
Authenticating users and enforcing access control	Account info, session data
Diagnosing errors and improving platform reliability	Error logs, usage data
Communicating service updates (transactional only)	Email address
Complying with legal obligations	As required by applicable law

We do not use your data for advertising, sell your data to third parties, or use student submission content to train AI models.

4. Third-Party Data Sharing

4.1 AI Providers (Anthropic, OpenAI)

When cloud AI features are used for grading or content generation, submission content is transmitted to one or more of the following providers:

• Anthropic (Claude models) — Privacy Policy
• OpenAI (GPT models) — Privacy Policy

Before transmission, the Platform strips student names and identifiers from submission content where technically feasible, replacing them with anonymized tokens. However, submission content itself (essay text, code, file contents) is transmitted.

Institutions with strict data residency requirements should use the Platform's local AI runtime option (Ollama), which processes all content on-premise. Contact [email protected] to discuss on-premise deployment.

4.2 Infrastructure Providers

The Platform is hosted on Microsoft Azure. Azure may process data as part of providing infrastructure services and is subject to Microsoft's data processing agreements and privacy commitments.

4.3 No Sale of Data

We do not sell, rent, or trade personally identifiable information or student data to any third party for commercial purposes.

5. Student Data and FERPA

We recognize that student submissions and educational records are governed by the Family Educational Rights and Privacy Act (FERPA). When processing student records on behalf of an institution:

• We act as a "school official" with a legitimate educational interest as defined by FERPA
• We do not disclose student education records to unauthorized parties
• We do not sell student data
• We do not use student data for advertising or to build profiles for non-educational purposes
• We support institutions in meeting their FERPA obligations

Institutions are responsible for ensuring they have appropriate authority under FERPA to share student records with the Platform and for notifying students as required.

6. Data Retention

We retain data for the following periods:

• Account information: Retained while your account is active, and for up to 12 months after account closure
• Grading results and rubrics: Retained while your account is active; instructors may delete individual grading sessions at any time
• Uploaded submission files: Deleted from server storage after grading results are downloaded or within 30 days of upload, whichever comes first
• Server and error logs: Retained for up to 90 days for diagnostic purposes, then automatically purged
• Backup copies: May persist for up to an additional 30 days beyond primary deletion

Data Deletion Requests

To request deletion of your account and associated data, contact [email protected] with the subject line "Data Deletion Request." We will process your request within 30 days.

7. Security Measures

We implement the following security controls to protect your data:

• Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher
• Encryption at rest: Database files and uploaded submissions are stored on encrypted Azure storage
• Access controls: Role-based access control limits data access to authorized users; administrators can only access their organization's data
• Authentication: Passwords are hashed using industry-standard algorithms (bcrypt); session tokens expire automatically
• Audit trails: Administrative actions and data access events are logged for security review
• Minimal data transmission: Student identifiers are stripped before sending submission content to AI providers

No system is perfectly secure. If you believe you have discovered a security vulnerability, please report it responsibly to [email protected].

8. Cookies and Session Management

The Platform uses cookies and browser storage solely for session management and authentication purposes. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

• Session cookies: Used to maintain your authenticated session; expire when you close your browser or after a period of inactivity
• Preference storage: Browser localStorage is used to remember UI preferences (e.g., dismissed notices); this data stays on your device

You can disable cookies in your browser settings, but doing so will prevent you from logging in to the Platform.

9. Your Rights

Depending on your location and applicable law, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (see Section 6)
• Object to or restrict certain processing activities
• Receive your data in a portable format

To exercise any of these rights, contact us at [email protected].

10. Children's Privacy

The Agoge Platform is designed for use by higher education instructors and adult users. We do not knowingly collect personal information from individuals under the age of 13. If you believe a minor has provided us with personal information without parental consent, please contact us so we can delete it.

11. Updates to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Effective Date" at the top of this page and notify active users via email or an in-platform notice. Your continued use of the Platform after changes are posted constitutes acceptance of the updated policy.

12. Contact for Privacy Concerns

For questions, concerns, or requests related to this Privacy Policy or your data, please contact us:

• Email: [email protected]
• Website: agogedev.com

For legal terms governing your use of the Platform, please review our Terms of Service.