Privacy policy
How we plan to protect student, teacher, and school information.
Version 3 · Effective July 15, 2026
Student Privacy
Student information should be used only to provide teacher-directed educational services.
Student accounts are created and supervised by an authorized teacher. Breezy TA does not require a student email address, legal name, birth date, home address, or payment information. Teachers and students should not enter unnecessary identifying, medical, disability, disciplinary, or other sensitive information.
We plan to use student information to provide teacher-approved tools, save student work, enforce access and safety rules, support the service, and protect account security. Student information will not be sold or used for behavioral advertising.
Authorized teachers can review and manage linked student accounts, projects, conversations, uploads, generated work, usage, and safety information. Student access remains under teacher and school supervision. State Staff status alone does not provide access to teacher-managed student records.
Only the information needed to complete an authorized request should be sent to approved service providers. Private student files will not be added to shared AI knowledge bases. Provider contracts, retention limits, and school authorization must be reviewed before real student use.
Teacher Privacy
Teachers should understand what the service stores and remain in control of their work.
We may collect a teacher’s email, sign-in identity, school and teaching profile, preferences, projects, prompts, files, generated materials, feedback, usage, billing references, and security events.
We plan to use this information to authenticate accounts, personalize tools, create and save materials, manage classes and subscriptions, send service messages, respond to support requests, prevent misuse, and improve reliability.
Teacher work is available only to the teacher and other specifically authorized users or support personnel with a documented need. Teachers can manage projects and profiles and may request an export, correction, or account deletion through a verified process.
Stripe processes payments; Breezy TA does not store full payment-card numbers. Public-site analytics are kept separate from authenticated teacher work and are not intended to receive prompts, files, student records, or account content.
School Privacy
Schools need clear authority, controls, and accountability before authorizing student use.
A school or district should decide whether Breezy TA is appropriate for student use and who may authorize accounts. A teacher should not be treated as the school’s privacy or consent authority unless the school has given that authority.
Breezy TA plans to support school-authorized access, review, correction, export, and deletion requests for linked student information. Access must follow assigned roles and school relationships rather than broad organization or State Staff status.
Before real student deployment, Breezy TA and the school should document the educational purpose, information collected, approved providers, permitted uses, security measures, retention and deletion, incident response, parent notices, and each party’s responsibilities.
Schools and teachers should provide only the minimum information necessary for the authorized educational purpose. Breezy TA will not claim ownership of school or student records and will not use them for unrelated commercial purposes.
Third-party services
Each provider should receive only the information reasonably necessary to perform its assigned service.
Voiceflow hosts conversational agents and related session data. OpenAI may process authorized prompts, uploaded content, instructional materials, and generated responses when its models are selected. Private user files are not placed in shared Voiceflow knowledge bases.
GoDaddy provides production hosting and server infrastructure. Cloudflare provides encrypted backup storage and may provide DNS, security, routing, or performance services. Infrastructure providers used by these companies may process limited service data under their own subprocessor arrangements.
Google supports sign-in and public-site analytics. Stripe processes subscriptions, payments, invoices, refunds, billing details, and transaction records. HubSpot receives limited business contact and customer-relationship information such as name, business email, phone, title, organization, lead source, account role, seat count, and subscription status; Breezy does not send student information, passwords, payment-card data, conversations, instructional materials, uploads, or enriched teaching-profile data to HubSpot. Postmark delivers transactional email. Microsoft may process business communications and support messages handled through Microsoft 365 or Outlook.
Sentry receives privacy-minimized error and performance information. Namecheap, Amazon Web Services, Microsoft Azure, Google Cloud, Anthropic, Google Gemini, marketing platforms, support platforms, or other providers may be involved directly or through a primary provider only when the applicable service is enabled. Listing a provider does not mean it receives every category of information.
Across the service
Information remains in active storage for up to 30 days and may then move to protected archive storage. Archived information is permanently deleted no later than one year after its original collection or creation. Billing, tax, fraud, security, audit, litigation-hold, and other records that law requires us to preserve follow the applicable required schedule and are restricted to that purpose.
Planned safeguards include encryption in transit, password hashing, secure sessions, administrator MFA, centralized authorization, private file storage, audit records, dependency review, encrypted backups, monitoring, and recovery testing. No system can guarantee perfect security.
Send a privacy or accessibility complaint to breezy@breezyta.com with enough non-sensitive detail to identify the issue and requested resolution. We will acknowledge it within five business days, verify identity or authority when necessary, investigate, and provide a written decision within 30 calendar days. If more time is reasonably needed, we will explain why and provide a new target date.
A requester may appeal within 30 calendar days by replying to the decision or emailing the same address with “Appeal” in the subject line and the reason reconsideration is requested. The appeal receives a fresh review of the record and any new information, with a written response targeted within 30 calendar days. School-controlled student-data matters will be coordinated with the applicable school or district privacy authority.
Jason Peake is the accessibility contact. Verified requests for access, correction, export, deletion, or an accessible alternative format may be sent to breezy@breezyta.com. We must confirm the requester’s identity and authority before releasing or changing information.
Each school or district must independently review and authorize Breezy TA before real student use. A prior review by one district does not approve the service for another district. FERPA, COPPA, state student-privacy laws, school policy, contracts, and consent requirements may apply differently to each deployment.