Plain-language summary: We collect only what we need to run the platform. We don't sell your data. Student data is handled with extra care under FERPA. You can request deletion of your data at any time.
When you create an account, we collect:
When you use the platform, we collect:
When students interact with Textonic content through an LMS (such as Canvas), we may receive:
We use the data we collect to:
What we do NOT do with your data:
Textonic is designed to be used by educational institutions. We understand that student data — particularly data received through LMS integrations — may constitute "education records" protected under the Family Educational Rights and Privacy Act (FERPA).
When Textonic receives student data from an institution through an LTI integration, Textonic acts as a "school official" with a legitimate educational interest under FERPA, and as a data processor under the institution's direction. The institution remains the data controller responsible for compliance with FERPA.
Institutions that require a formal FERPA-compliant Data Processing Agreement (DPA) may contact us at support@textonic.app.
Textonic's primary users are educators (18+). However, we acknowledge that K-12 educators may use Textonic to create content for students who include children under 13.
Student interaction with Textonic occurs through their institution's LMS, under the supervision of the educator. We do not knowingly collect personal information directly from children under 13 outside of LMS-mediated educational contexts.
If you are an educator at a K-12 institution using Textonic with students under 13:
If you believe we have inadvertently collected personal information from a child under 13 without proper authorization, please contact us immediately at support@textonic.app.
We share data only in these limited circumstances:
We use third-party vendors to operate the platform, including cloud hosting, database, and AI inference providers. These vendors process data only under our instructions and are contractually prohibited from using it for their own purposes.
Comprehension scores and assessment results may be sent back to your institution's LMS gradebook at your direction. This is controlled by you as the educator.
We may disclose data when required by law, court order, or lawful government request. We will notify you of such requests where legally permitted.
If Textonic is acquired or merged, your data may transfer to the acquiring entity. We will notify you and ensure the new entity honors this Privacy Policy.
Textonic uses cookies and similar technologies for the following purposes:
Required to operate the platform — session management, authentication tokens, and security measures. These cannot be disabled.
We use privacy-respecting analytics to understand aggregate usage patterns (page views, feature adoption). We do not use third-party advertising trackers (Google Ads, Meta Pixel, etc.).
Used to remember your settings and personalization preferences (e.g., subject defaults, display preferences).
You can manage cookies through your browser settings, but disabling essential cookies will prevent the platform from functioning correctly.
We retain your data for as long as your account is active and as needed to provide the Service.
When you delete your account, we will:
Student data received via LTI integrations will be deleted within 90 days of the institution's account termination, or sooner upon written request.
To request deletion of your data, email support@textonic.app with the subject line "Data Deletion Request." We will confirm within 5 business days and complete deletion within the timelines above.
We implement industry-standard security measures, including:
No system is 100% secure. If you discover a security vulnerability, please report it responsibly to support@textonic.app.
Depending on your location, you may have the following rights regarding your personal data:
To exercise any of these rights, email support@textonic.app. We will respond within 30 days.
Textonic is hosted in the United States. If you access the Service from outside the US, your data will be transferred to and processed in the US. By using the Service, you consent to this transfer.
For European users, we rely on Standard Contractual Clauses (SCCs) where applicable for data transfers. Contact us for details.
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on the platform at least 14 days before they take effect. Your continued use of the Service after the effective date constitutes acceptance.
Privacy questions, data requests, or concerns: