Legal
Privacy Policy
Version 2026.07 · Effective July 26, 2026
This document is a working draft pending review by legal counsel. It is provided for transparency and is not yet a binding agreement.
In plain language
What student and account data we collect, why, how long we keep it, and the rights you have over it.
This policy explains what Scoraide (operated by Venakan Info Solutions) collects from families, tutoring agencies, and schools, how we use it, how long we keep it, and the choices and rights you have. Student data belongs to the family, agency, or school that owns the account. Each organization is isolated at the database level, and staff only see the students they are assigned to.
Information we collect
- Account details you enter: name, email, role, and organization.
- Student profile details: grade level, target score, chosen exam, and official test date, entered by the student or by a parent, tutor, or administrator.
- Practice activity: the tests we generate for each student, their responses (including written/essay responses for the optional ACT Writing section), time spent per question, and the resulting scores, analysis, and reports.
- Limited technical data needed to run the service securely (for example, IP address in server logs and an essential session cookie).
- Support chat: if you use the assistant on our marketing pages, the messages you send are processed to answer you. Please do not enter sensitive personal information there.
- Messages you send us: if you use the contact form or email us, we receive your name, email, role, and message. We use them only to reply and do not store contact-form submissions in our database.
We do not knowingly collect more student data than is needed to deliver practice tests and reports. We do not use student responses to advertise, and we do not sell personal data.
How we use information
To generate and deliver practice tests, score them, produce per-question analysis and study plans, show progress to the parents/tutors/administrators entitled to see it, operate and secure the service, and communicate about the account. AI question generation and analysis are performed by our processor (see the Subprocessors page); student responses are not used to train third-party models. Our marketing support chat is also powered by that AI provider (Anthropic): your conversation content is sent to them to generate replies and is not used to train their models.
How long we keep it (retention schedule)
We keep personal data only as long as needed for the purposes above, then delete or de-identify it. Approximate schedule by category:
| Data category | Retention |
|---|---|
| Account details (name, email, role) | While the account is active; deleted within 90 days of account closure. |
| Student profile (grade, target score, test date) | While the student is active in the organization; deleted with the student record. |
| Practice tests, responses, and timing | While the account is active; deleted within 90 days of account or student deletion. |
| Scores, analysis, and reports | While the account is active; deleted within 90 days of account or student deletion. |
| Support messages | Up to 24 months from the last message. |
| Billing records (organizations) | Up to 7 years, where required for tax and accounting. |
| Server and security logs | Up to 90 days. |
Sharing
We share personal data only with the infrastructure vendors that process it on our behalf under contract (listed on the Subprocessors page), and where required by law. We do not sell personal data and do not share it for cross-context behavioral advertising.
A parent, guardian, or administrator can also choose to share a student's score report with someone they trust by sending a secure, read-only link to an email address they enter. These links expire automatically after 30 days, can be turned off at any time, and reveal only the student's first name and score report — never their login, email, or account details. Students cannot create these links.
Your rights and choices
You can request access to, a copy of, correction of, or deletion of a student's data. Organization administrators can also export or delete data from within the app. To make a request, write to support@venakaninfo.com. We will verify the request against the account before acting on it.
California and other state privacy rights
Where state law applies (for example the California Consumer Privacy Act, as amended), you have the right to know what personal information we collect, to access and delete it, to correct it, and to not be discriminated against for exercising these rights. We do not sell personal information or share it for cross-context behavioral advertising, so no opt-out of sale is needed. For a known minor under 16, we do not sell or share personal information.
Consistent with student-data-privacy laws such as California's SOPIPA and similar state laws, we commit that student personal information is used only to provide the service to the school, agency, or family; is never sold; is never used for targeted advertising; is not used to build a non-educational profile of a student; and is deleted on the account owner's request. For school and agency customers, the Data Processing Addendum governs and controls over this policy where they conflict.
Children
Scoraide is used by students, some of whom are under 13. We rely on the school or the parent to authorize an account and act as a service provider to them. See the Children's Privacy notice for details on consent and parental rights.
Security, changes, and contact
We use row-level database isolation per organization, encryption in transit, and least-privilege access to protect data. No system is perfectly secure; we work to protect data and to notify affected account owners of a material breach as required by law. If we make a material change to this policy we will update the version and notify account owners, and where the change affects an agreement you accepted we will ask you to review it again. Questions: support@venakaninfo.com.