Privacy policy
Effective: August 20, 2026. Last updated: October 17, 2026.
SuperSchool helps educators use the school and classroom context they choose to share. This policy explains what we collect, how we use it, who helps us process it, and the controls available to educators and schools.
SuperSchool's educator application is intended for verified adult educators and education professionals in the United States. Students may open private feedback links provided by their teacher and sign in with Google to verify access, without creating a SuperSchool account. Student information in instructional resources, recordings, responses, and feedback remains protected Student Data.
1. Who we are
SuperSchool is operated by:
Deepak Joy Cheenath, operating as SuperSchool, 2375 E. 104th Ave., Bldg. 4, Apt. 203, Thornton, CO 80233, United States
Questions and requests may be sent to legal@superschool.us.
2. Our role for school data
An educator or school chooses which information to provide and which optional features to use. The Customer remains in control of its school and classroom data.
For Customer Data covered by our U.S. K-12 terms and U.S. K-12 data processing addendum, SuperSchool processes the data on the customer's instructions. Where the data is an education record under FERPA, SuperSchool acts as a school official with a legitimate educational interest, is subject to the school's direct control, and uses the data only for the authorized educational purpose.
A separate agreement or data processing addendum signed with a school or district controls if it conflicts with this policy.
3. Information we process
The information we process depends on what an educator or school chooses to share.
Account and contact information
We process an educator's name, school email address, school or organization, role, authentication identifier, settings, and communications with us. We also process session, device, diagnostic, and security records needed to operate and protect the service.
Instructional materials
Educators may upload lesson plans, curriculum, rubrics, assignments, slides, worksheets, scanned student submissions, work samples, and other instructional resources. A resource that contains information about a student remains protected as Customer Data and, where applicable, Student Data.
School resources
Educators or schools may provide calendars, timetables, instructional guidance, approved-tools lists, and similar operational resources. SuperSchool does not automatically index an entire school system or connected drive. We process only the resources an authorized user selects or an integration is configured to provide.
Classroom recordings and transcripts
When classroom capture is authorized and enabled, SuperSchool stores audio recordings or recording segments in private cloud storage and sends audio to OpenAI for transcription. Authorized users can play back supported recordings or segments. Stored audio follows the Customer Data retention and deletion rules in Section 7. OpenAI's approved zero-retention arrangement for audio processing is separate from SuperSchool's storage of the recording.
The resulting transcript is retained in the Customer's account because it is needed to provide the service. It may contain names or other student information. SuperSchool does not treat classroom transcripts as anonymous and protects them as Customer Data and, where applicable, Student Data.
Tool integrations
An educator or school may connect an approved third-party tool. We process authentication information and the data needed to perform the requested integration. Integrations are off until an authorized user connects them and can be disconnected. The third party may separately process information under its own terms.
For browser-assisted tasks, Browserbase hosts a remote browser that can receive the pages, files, and information needed for your requested task. Connected-tool profiles can retain cookies and other sign-in state so you do not have to sign in for every task. Separate sign-in sessions disable Browserbase session recording and logging; ordinary task sessions can have session recordings and logs. This is distinct from classroom audio recording. Information you direct SuperSchool to submit to a connected website is also received by that website.
Generated and usage information
SuperSchool may create summaries, drafts, class-level metrics, and other educator-facing materials from the selected context. We also process service usage, diagnostics, and security events needed to provide and protect the service.
Google account and Workspace data
Google sign-in provides your account identifier, verified email address, name, and profile picture. Optional integrations request additional permissions when you connect them. Drive reads teaching resources you explicitly select. Docs, Slides, and Forms create or edit files for exports you request.
Classroom imports selected classes, assignments, materials, topics, announcements, dates, and attachment links. Teacher-requested Classroom features may also read class rosters, rubric definitions, submission status, text answers, and grades, and make reviewed changes to assignments, materials, topics, announcements, rubrics, and eligible student grades. Classroom rosters are read using student names and Google identifiers; this integration does not request student email addresses. Classroom access alone does not download private attached files.
Feedback is delivered as private PDF links on individual Classroom submissions. A student opening a feedback link signs in with Google to verify their identifier, without creating a SuperSchool account or providing an email address. SuperSchool does not send direct feedback emails to students.
New teaching files posted through SuperSchool are attached using Google Classroom's native view-only Drive attachments, with Google managing attachment permissions. SuperSchool does not grant individual Drive permissions using student email addresses. For Google Forms, the educator publishes the form and manages responder access in Google Forms; SuperSchool uses the student response link and does not verify each student's responder access.
The Classroom reading connection also requests read-only permissions for Google Docs, Sheets, Slides, and Forms, including Forms responses you are permitted to view. These permissions cover those file types across your Google account, including shared files; they do not allow editing or deleting Google files and do not grant permission to list or search your entire Drive. After you authorize this integration, syncing imports published teaching posts and linked materials in active classes, including their previous published history. You can choose which active classes to sync or pause syncing. Archived Google Classroom classes are excluded from this sync. When automatic sync is enabled, SuperSchool periodically checks the selected classes for new posts and linked materials. The current schedule is shown in your sync settings. Existing connections are not automatically opted into this expanded import. Student submissions and Forms responses are accessed only when you request a specific chat task involving them, rather than proactively ingested into the Library.
Imported Classroom content and task-specific student responses are private to the connecting educator in SuperSchool; another educator or school administrator does not gain access simply by belonging to the same school. Task reads are processed in the teacher's conversation without creating Library items or maintained student profiles. Forms responses may span several classes when a form is reused. SuperSchool does not request the respondent-email field through its Forms response reader or guess student identity from matching names. Response text can still contain personal information provided in answers.
SuperSchool analyzes available teaching-document images to create descriptions for search and chat. Private image derivatives retain their source document and location and may appear in an optional image gallery and picker. Student files read for a chat task do not populate that gallery. Turning off the gallery does not remove image descriptions from the teaching documents. The integration retains details about content it could not read, such as unsupported visual formats or private external services.
File selection and Docs, Slides, and Forms creation use the separate per-file Drive permission for individual files you select or files created by SuperSchool. This permission does not grant access to your entire Drive. Automatic folder discovery and whole-Drive syncing have been retired. New connections do not request broad Drive access. Resources imported under an earlier folder-sync connection may remain in SuperSchool until deleted under the retention and deletion rules below; the retired connection does not discover or sync new files.
SuperSchool stores encrypted integration credentials and, for approved resources, file metadata, extracted text, previews, summaries, and search representations used to find relevant teaching resources. Our hosting provider AWS stores this data. Relevant file content and metadata are sent to OpenAI to prepare searchable resources and generate educator-facing answers and materials, when you select resources, enable a configured Classroom sync, or request these features.
SuperSchool also sends AI conversation and tool-execution traces to Langfuse. These traces can contain prompts, model answers, tool inputs and results, retrieved Google file content, and student responses used in a requested task, together with account and conversation identifiers. They are used to diagnose failures and maintain the operation of existing AI features. These traces are protected Customer Data, not anonymous analytics. The Google human-access restrictions in Section 6 apply to them. See our service providers for their roles and retention practices.
You can review Classroom reading and writing permissions through Settings → Connectors → Google Classroom → Edit settings. Writing supports assignments, teaching materials, topics, announcements, rubrics, and eligible grades; it does not request permission to modify classes or enrollment. Disconnecting Google Classroom removes its stored shared Google connection credentials and stops future syncs. You can also revoke SuperSchool's Google authorization in your Google Account connections. Classroom, Docs, Slides, and Forms share a connection in SuperSchool, so disconnecting or revoking that shared authorization can stop access across those features. Revocation does not delete previously imported or generated materials; they remain subject to Section 7. To request deletion, email legal@superschool.us from your account email and identify the account, class, or resources concerned. Deleting a SuperSchool copy does not delete the original Google file or Classroom post.
SuperSchool's use of Google API data follows the Google API Services User Data Policy and the Google Workspace user data and developer policy, including their Limited Use requirements. These restrictions also apply to derived data and to our personnel and service providers. We use this data only for the visible educational features you authorize. We do not sell it, use it for advertising or credit decisions, or train or improve AI models with it.
Google Workspace API data is not used to develop, improve, or train generalized or non-personalized AI or machine-learning models. SuperSchool and its providers do not use this data or its derivatives for model training or fine-tuning, including personalized model training.
4. How we use Customer Data
We use Customer Data only to:
- provide, operate, maintain, secure, and support the service;
- respond to the customer and its authorized users;
- verify or maintain the quality, security, and integrity of the service;
- debug to identify and repair errors that impair existing intended functionality;
- follow the customer's lawful instructions and enforce our agreements; and
- comply with applicable law.
We do not use Customer Data for advertising, sell it, or use it to build advertising profiles. We do not use Customer Data for general product research or to develop new products or features.
Customer Data is not used to train AI models. Our service providers are also prohibited from using Customer Data to train or improve their AI models.
5. When service providers receive information
We use providers for hosting, transcription, AI-assisted generation, authentication, transactional email, browser-assisted tasks, AI execution diagnostics, account analytics, and support. These include AWS, OpenAI, Google, Resend, Browserbase, Langfuse, PostHog, and Crisp. The current list, including what each provider receives and why, is available on our service-provider page.
Providers may process Customer Data only to perform their contracted service for SuperSchool. They may not sell it, use it for advertising, use it to train or improve AI models, or use it for another internal purpose.
Beyond these providers, we disclose Customer Data only at the customer's direction, in a corporate transaction subject to appropriate confidentiality protections, or where legally required. Unless prohibited by law, we will direct a legal demand for Customer Data to the customer or notify the customer before disclosure.
For Google user data and its derivatives, transfers are limited to providing authorized user-facing features with your consent, security purposes, legal requirements, or a merger, acquisition, or asset sale after your explicit prior consent. General descriptions of sharing elsewhere in our documents do not expand these permissions.
6. Access and control
Authorized educators can access the content made available to their account, including complete transcripts and student work.
School administrators receive aggregate usage and class-level metrics by default. They may access a complete transcript or student submission only when that access is expressly authorized under the school's agreement and access controls.
SuperSchool personnel do not routinely review classroom transcripts or instructional resources. Access is limited to authorized personnel who need it to provide support, fulfill a customer request, verify or maintain quality, security, or integrity, or repair an error that impairs existing functionality. Access is logged.
For Google user data, human access requires your documented affirmative agreement to the specific data being viewed, except where necessary for security or legal compliance, or for internal operations using aggregated, anonymized data. A general support or quality-improvement purpose alone does not authorize someone to read your Google files.
7. Retention and deletion
Instructional materials, student work, school resources, classroom audio and transcripts, generated materials, and related class-level data are scheduled for deletion at the end of the school year in which they were created and permanently purged within 30 days.
If a customer requests deletion sooner or closes its account, the affected Customer Data is made unavailable and permanently purged from active systems, processing copies, and recoverable backups within 30 days, unless the law requires a longer period. We will tell the customer if a legal obligation prevents or delays deletion.
Account information is deleted or de-identified within 30 days after account closure, except for minimal security, consent, transaction, and legal records that we must retain to protect the service, resolve disputes, or comply with law. Application security and diagnostic logs are normally retained for up to 90 days. AI conversation traces can contain classroom or Google content and must be handled as Customer Data rather than content-free operational logs. A Customer Data deletion request also covers relevant provider-held copies, including AI traces and browser-session data; it is separate from revoking Google access or archiving an item in the interface.
SuperSchool uses available resource, class, date, and other metadata to help a customer locate records relevant to a request. A customer may direct SuperSchool to provide or delete the relevant source artifact and its derived outputs where technically feasible.
8. School, parent, and eligible-student requests
The customer may request access, export, correction, or deletion of Customer Data and may close its account.
Parents and eligible students should direct requests about school-controlled information to their school. SuperSchool assists the school in responding and follows the school's lawful instructions. A person may also contact legal@superschool.us, and we will route the request to the appropriate school where applicable.
Adult users may request access to, correction of, or deletion of their own account information. We may verify a request through the account or school email address before acting on it.
9. Security
We use administrative, technical, and organizational safeguards designed to protect information. These include encryption in transit and at rest, authenticated and role-limited access, access logging, separation of production from development and testing, and review of providers before they receive Customer Data.
No system is perfectly secure. If a security incident affects Customer Data, we will investigate, take appropriate steps, and notify the affected customer as required by the U.S. K-12 data processing addendum, a separate agreement, or applicable law.
10. Cookies and website information
We use session cookies to sign users in and protect the service. In the educator application, PostHog receives account profile information such as your name, email, organization, role, and account status, together with page URLs, device and browser information, performance, errors, and operation outcomes. PostHog uses cookies and browser local storage. Automatic click capture and PostHog session recording are disabled. Classroom files, transcripts, and student answers are not intentionally included in these analytics events; separate AI conversation traces are described in Section 3.
Crisp provides the support chat and receives your adult account profile, browser and session information, and any messages or attachments you send to support. Its chat widget can use cookies and browser storage. Please avoid sending student information in support messages; if access to specific Google data is needed, Section 6 applies.
These services support account operation, reliability, and support. We do not use Customer Data for advertising and do not place third-party advertising trackers in the service.
11. Changes to this policy
We will update the date above when this policy changes. We will provide advance notice before a material change that expands how we process Student Data, Google user data, or other Customer Data, as required by our agreement or applicable law. Where a change requires new consent, we will obtain it before the new processing begins. A separate school agreement may provide additional notice or approval rights.
12. Contact
Deepak Joy Cheenath, operating as SuperSchool, 2375 E. 104th Ave., Bldg. 4, Apt. 203, Thornton, CO 80233, United States