Elma AI, Inc. ("Elma", "we", "us", or "our") is committed to protecting the personal information of the educational institutions, staff, students, and parents who use our platform.

1. Information We Collect

We collect information you provide directly to us when you register, create an institution account, or use our platform features. This may include names, email addresses, institutional affiliations, student records, and usage data.

2. How We Use Information

We use the information we collect to provide, maintain, and improve the Elma platform; to communicate with you about your account; to comply with legal obligations; and to generate anonymized analytics to improve our services.

3. Data Sharing

We do not sell your personal data. We may share data with trusted service providers who help us deliver the platform, subject to strict confidentiality agreements. We may disclose data when required by law.

4. Data Security

We implement industry-standard security measures including encryption at rest and in transit, role-based access controls, and regular security audits. We are SOC 2 Type II certified.

5. Data Retention

We retain institution and student data for the duration of your subscription and for up to 90 days following account termination, after which it is permanently deleted from our systems.

6. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or export your personal data. Please contact us at privacy@elma.ai to exercise these rights.

7. GDPR Compliance

Elma is fully GDPR compliant. Data processing agreements (DPAs) are available for EU-based institutions upon request.

8. Contact

For privacy questions, contact us at privacy@elma.ai.

Privacy Policy