Privacy notice

What we collect

• Account: your university email address, the name you choose to display, and an optional headline, bio, photo and LinkedIn link. The profile is private unless you make it public.
• Work: the projects and files you upload, their version history, and the visibility and license choices you make, with the date and time of each choice.
• Course membership: which courses you joined and how (join code or a roster the professor imported). A roster import contains only email addresses.
• Records: an append-only log of actions on your account and your work (who changed what, when, from which network address), kept so disputes can be settled and misuse found.
• Technical: server logs with network addresses and browser type, and the strictly necessary cookies that keep you signed in and protect forms. There is no advertising, no tracking across other sites, and no analytics cookies.

What we do not do

• We do not publish grades, professor notes or anything you kept private.
• We do not sell personal data or share it with advertisers.
• We do not use your work to train or tune any AI model, and the optional assistant does nothing until you turn it on.
• We do not connect to any university system. Universities do not receive data from the service.

Why we use it

To run the service you asked for (contract), to keep it secure and to settle disputes about authorship (legitimate interest), and to publish your work when you chose to (consent, which you can withdraw by changing the visibility).

Who can see what

You see your own work. Your course professor sees the work in their course. Visitors see only what you made public or unlisted and the professor approved. Our staff see records only when needed to operate the service, investigate misuse or answer a request. Service providers that host the service process data on our instructions.

How long we keep it

Your work stays as long as your account is active and you keep it. Removed work is deleted from live storage within 30 days; backups age out within 90 days. The action log is kept for up to two years after the related account closes. Server logs are kept for 90 days. Accounts unused for two years are made dormant and then deleted after notice to the email on file.

Your choices and rights

You can change or remove your profile, your work and its visibility at any time from your dashboard. You can ask for a copy of your data, correction, or deletion of your account by writing to [email protected] from your account's email address. Students in the European Economic Area and the United Kingdom have the rights described in the GDPR, including the right to complain to a supervisory authority; the legal bases above apply.

Security

Sign-in is passwordless by email code or link. Data is encrypted in transit. Files are stored under random names and served only through the service after a permission check. Every change to published work is recorded in an append-only log.

Contact

Pretium Investments LLC, [email protected]. We may update this notice; the version date at the top changes when we do.