Privacy Policy

1. Introduction

This Privacy Policy describes how imaginX collects, uses, and protects information in connection with our platform, including any features powered by Artificial Intelligence (AI). We are committed to protecting institutional data and maintaining compliance with applicable laws including FERPA, GDPR, HIPAA, and CCPA, as relevant.

2. Scope of the Policy

This policy applies to all services offered by our platform, including AI-powered modules, and covers data collection, processing, and storage practices where applicable.

3. Data We Do Not Collect

By default, our platform does not collect or store personally identifiable information (PII), protected health information (PHI), or education records unless explicitly authorized by a formal agreement with the institution.

4. AI and Data Security Practices

- AI interactions are stateless and do not store or use personal data for model training.
- No user input into AI modules is stored, retained, or reused without institutional consent.
- AI outputs are generated in real time without linking to user identity.
- AI features are monitored with audit logs to ensure compliance and transparency.

5. FERPA Compliance

Where applicable, we operate as a 'school official' under FERPA, acting under the direct control of the educational institution with respect to the use and maintenance of education records. Institutions retain full ownership and control of all student data.

6. Data Security Measures

- All data in transit is encrypted using TLS 1.2 or higher.
- All data at rest is encrypted using AES-256 encryption.
- Role-based access controls and multifactor authentication are enforced for administrative access.
- Regular vulnerability scans and third-party security assessments are conducted.

7. User Rights and Institutional Control

- Institutions have the right to access, correct, export, or delete any data they submit.
- Institutions can configure platform settings to disable AI features if preferred.
- We will cooperate fully with any data access or deletion requests forwarded through the institution.

8. Updates to Privacy Policy

We may update this Privacy Policy periodically to reflect changes in technology, legal requirements, or platform features. Institutions will be notified of material changes and may request updated documentation at any time.

9. Contact Information

  1. For questions about this Privacy Policy or to request further documentation:
    Privacy Contact: Tyler Pitts
    Email: tylerp@imaginxavr.com