Compliance

Our Commitment to Compliance

TeacherCommentsGenerator is committed to complying with applicable data protection, privacy, and educational regulations. We understand the importance of protecting student and educator data, and we work diligently to ensure our practices meet or exceed regulatory requirements.

Compliance Standards

GDPR (General Data Protection Regulation)

For EU Users

If you are located in the European Union, you have the following rights under GDPR:

• Right to Access: You can request a copy of your personal data we hold.
• Right to Rectification: You can request correction of inaccurate or incomplete data.
• Right to Erasure: You can request deletion of your personal data ("right to be forgotten").
• Right to Restrict Processing: You can request limitation of how we process your data.
• Right to Data Portability: You can request your data in a structured, machine-readable format.
• Right to Object: You can object to certain types of data processing.
• Right to Withdraw Consent: You can withdraw consent for data processing at any time.

Legal Basis for Processing

We process your personal data based on the following legal bases:

• Contract Performance: To provide the Service you have requested.
• Legitimate Interests: To improve our Service, ensure security, and prevent fraud.
• Consent: Where you have provided explicit consent for specific processing activities.

Data Protection Officer

For GDPR-related inquiries, please contact our Data Protection Officer at dpo@teachercommentsgenerator.com.

FERPA (Family Educational Rights and Privacy Act)

FERPA protects the privacy of student educational records. As an educator using our Service:

• You are responsible for ensuring you have proper authorization to process student information in your educational context.
• We process student information only as necessary to provide the comment generation service.
• Student information is not permanently stored in our systems after comment generation.
• We do not share student information with third parties except as necessary to provide the Service (e.g., AI processing).
• You should obtain necessary consents from parents/guardians if required by your school or district policies.

Important: We recommend consulting with your school or district's legal counsel to ensure compliance with FERPA and other applicable educational privacy laws in your jurisdiction.

CCPA (California Consumer Privacy Act)

If you are a California resident, you have the following rights under CCPA:

• Right to Know: You can request information about the categories and specific pieces of personal information we collect, use, and disclose.
• Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out: You can opt-out of the "sale" of your personal information (we do not sell personal information).
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise your CCPA rights, please contact us at privacy@teachercommentsgenerator.com.

COPPA (Children's Online Privacy Protection Act)

Our Service is designed for educators and is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@teachercommentsgenerator.com, and we will take steps to delete such information.

Data Processing Agreements

We maintain Data Processing Agreements (DPAs) with our key service providers to ensure they handle your data in compliance with applicable regulations:

• Supabase: Our database and authentication provider maintains SOC 2 Type II compliance and GDPR compliance.
• Creem.io: Our payment processor maintains PCI DSS compliance for secure payment processing.
• Replicate: Our AI service provider processes data according to their security and privacy policies.

International Data Transfers

Your information may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) where applicable, to protect your data in accordance with applicable data protection laws.

Your Responsibilities

As an educator using our Service, you are responsible for:

• Ensuring you have proper authorization to process student information in your educational context
• Complying with all applicable educational privacy laws in your jurisdiction (FERPA, state laws, etc.)
• Obtaining necessary consents from parents/guardians if required by your school or district
• Using the Service in a manner that protects student privacy and confidentiality
• Not sharing student information inappropriately or in violation of privacy laws

Compliance Updates

We continuously monitor changes in data protection and privacy regulations and update our practices accordingly. This Compliance page will be updated to reflect any significant changes. We recommend reviewing this page periodically to stay informed about our compliance practices.

Contact Us

For compliance-related questions or to exercise your data protection rights, please contact us at:

Privacy/Compliance Email: privacy@teachercommentsgenerator.com
Data Protection Officer (GDPR): dpo@teachercommentsgenerator.com
Website: teachercommentsgenerator.com