Privacy Policy

1. Who we are

Proctor is an online homework service run by its founder and CEO ("Proctor", "we", "us"). This policy explains how we handle information when you use the Proctor website, the portal at /portal/ and the services behind them (together, the "Service"). It is part of our Terms of Service.

Questions or requests about privacy go to proctoroffical@gmail.com.

2. What we collect

Information you give us

Account details: your email address, the name you want the teachers to call you, and your password. We store your password only as a salted, one-way hash (scrypt), so we can't read it.
Your agreement: which version of the Terms of Service and this policy you agreed to, and when, together with your confirmation that you are 13 or older.
Homework and files: the classes and assignments you add (titles, instructions, due dates), files you upload (up to 10 per assignment, 20 MB each), your answers to the teachers' questions, your requests for changes, and the work Proctor makes for you.
Settings: your help level, grade level, citation style, formatting choices, AI spending cap and color theme. If you choose a heading for exported work, the name and teacher names you type for it.
Your plan: which plan your account has (Student, Autopilot or Unlimited), if it has one. Checkout isn't open yet, so every account is free and we don't ask for or collect payment details. Before anyone's first payment, we will update this policy to say what payment information is collected and who processes it.
An Anthropic API key, only if you choose to add your own. It is stored encrypted.
Messages you send us by email.

Information from school accounts you connect

Connecting a school account is optional. If you do, Proctor reads the following, and apart from the one Canvas submission described below, it only reads:

Canvas (with an access token you create, or with "Sign in with Canvas"): your profile name, your courses, your assignments with their descriptions, due dates and attached files, your own submissions and grades, and Canvas pages and video captions that your assignments link to.
Google Classroom (with Google sign-in): the email address of the Google account you connect, your courses, your coursework, and your own submissions and grades. Files in Google Drive that are attached to your classwork are read only if you tick the box that allows it. See Google user data.
A Veracross or Canvas calendar feed (a link you paste): the assignment titles and due dates in the feed.

Proctor never posts or sends messages on any school platform, and never submits anything unless you turn on Submit from Proctor and press Submit for that assignment (see below). The tokens and feed links you give us are stored encrypted. When an assignment links a YouTube video or a Google Doc that anyone with the link can open, our server may read the video's public title or the document's public text, without your credentials, to help with the work.

The one thing Proctor can write: a Canvas submission you confirm. If you turn on Submit from Proctor for a Canvas connection and press Submit on the review screen for an assignment, Proctor uses your Canvas access to send Canvas that one submission: the text you reviewed (for a text entry), the file you reviewed with its name and size (for a file upload, through Canvas's own upload steps, which may store the file with Canvas's storage provider), or the link you entered (for a website link). It is sent only to your school's Canvas. Proctor also reads the assignment from Canvas just before, to check it can still take a submission. We keep a record of each attempt with the homework: when, the type, the file name, size and a fingerprint (hash) of what was sent, and Canvas's answer (such as its submission id, status, attempt number and whether it was late) or its error. We record when you turned Submit from Proctor on or off, which version of the risk explanation you agreed to, and the account that agreed. The record is deleted with the homework or your account.

Information collected automatically

One cookie keeps you signed in. It expires after 30 days without use (180 days at most). We use no advertising, analytics or tracking cookies, and our pages load no third-party scripts, fonts, pixels or embeds.
Signed-in devices: a short description of each device (like "Chrome on macOS") and when it was last used, which you can see and sign out in Settings › Account.
IP address: used to limit repeated log-in attempts, sign-ups and school searches, so nobody can guess passwords or flood the Service. It is kept with those attempts for about an hour and is never stored with your account.
AI usage: how much each AI step used and cost, so we can show your spending and enforce spending caps.
Error logs: our server records errors and warnings, not every page you visit. Logs never include passwords, cookies or tokens.
Browser storage: the portal saves display preferences (like your color theme and table layout) and your flashcard progress in your browser. They stay on your device.

If you use "Is your school on Proctor?" on our home page, the school name you type is sent from our server to Instructure's public directory of Canvas schools. We don't link that search to you.

3. How we use it

We use information only to:

create and secure your account and keep you signed in;
run your school: have the AI teachers work on the homework you add or import, ask you questions, and show and export the results;
import and keep in sync the homework from school accounts you connect;
to send a Canvas submission you confirmed, and to show you its record;
enforce spending caps and usage limits;
keep the Service safe: prevent abuse, investigate problems and fix bugs;
answer your messages and tell you about important changes to the Service or these documents;
comply with the law.

We do not sell or rent personal information. We do not show ads, use your information for targeted or cross-site advertising, or share it with advertisers or data brokers. We do not build profiles of students for anything other than running Proctor for them. We do not use your homework or files to train AI models.

Proctor is run by one person, who can access the servers. We don't look at your homework, files or school data except when you ask us to help with a problem, when it's needed to investigate abuse, a security issue or a bug, or when the law requires it.

We share information only with these service providers, and only so they can run parts of the Service for us:

Render hosts the Service. All of Proctor's data (accounts, homework, files and connections) is stored on Render's servers in the United States.
Anthropic provides Claude, the AI that does the work. See Homework and AI for exactly what is sent.
Canvas (Instructure), Google and your school's calendar feed, only if you connect them: our server sends them read requests on your behalf (and, only for a Canvas submission you confirm with Submit from Proctor, sends Canvas that submission), and asks them to end Proctor's access when you disconnect or delete your account.

We may also share information if the law requires it (for example, a valid court order), to protect the safety, rights or security of our users, the public or Proctor, or as part of a merger, acquisition or sale of the Service. In a sale, the new owner would have to keep this policy's promises for the information it receives, and we would tell you before your information became subject to a different policy. Google user data is only transferred in such a sale with your prior consent.

5. Homework and AI

When your school is live (not the demo school), we send Anthropic's Claude what it needs to do each step: the assignment's text and instructions, the files attached to it (including files imported from your school account), your answers to the teachers' questions, your class names, and work settings like grade level and citation style. We don't send your email address or password, and we don't add your name. If your homework or files contain your name or other personal details, those are sent as part of the homework.

Under Anthropic's commercial terms, Anthropic may not train its models on this content.
Anthropic says it deletes API inputs and outputs within 30 days, except that it may keep them longer (up to 2 years) when its systems flag a possible violation of its Usage Policy, or when the law requires it.
If you turn on web research in Settings, Claude may search the web. The searches are written by the AI from your assignment's topic and run by Anthropic.
The demo school uses simulated teachers. Nothing from it is sent to any AI.

The teachers in Proctor are AI, not people. AI output can be wrong; our Terms explain your responsibilities.

6. Google user data

Proctor's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

What we access: your Google account's email address (to show which account is connected), your Google Classroom courses, and your own coursework, submissions and grades, all read-only (scopes classroom.courses.readonly and classroom.coursework.me.readonly). Only if you opt in: files in Google Drive attached to your classwork, read-only (drive.readonly).
How we use it: only to provide Proctor's features you can see: importing your Classroom homework into your Proctor school, keeping it up to date, and having the AI teachers do the work you ask for.
Who receives it: Render (hosting) and Anthropic (to do that homework), only as needed to provide those features; otherwise only for security, to comply with the law, or in a merger, acquisition or sale with your prior consent.
What we never do with it: sell it, use or transfer it for advertising, use it to decide credit-worthiness or for lending, or use it to develop, improve or train generalized AI or machine-learning models. Proctor never submits anything to Google Classroom.
Human access: no person reads it unless you ask us to for specific data, it is needed for security (such as investigating abuse or a bug), the law requires it, or it is aggregated and anonymized for internal operations.
Stopping access: disconnect Google Classroom in Settings › Connections (we revoke Proctor's access), or remove Proctor in your Google Account's security settings.

7. Children and teens

Proctor is not for children under 13, and we don't knowingly collect personal information from them. Everyone must confirm they are 13 or older to create an account. If we learn that an account belongs to a child under 13, we will delete the account and its data. If you are a parent or guardian and think your child under 13 has an account, email proctoroffical@gmail.com and we will delete it.

Teens 13 to 17 need a parent's or guardian's permission to use Proctor. A parent or guardian of a teen can ask us what information we hold about their teen, or ask us to delete it; we may ask for reasonable proof that the request is genuine.

8. Your choices and rights

We give these rights to everyone who uses Proctor, wherever you live, whether or not a law requires it:

See and download: everything in your school is visible in the portal, and each finished assignment can be downloaded (Word, Markdown, or printed to PDF). For a complete copy of your account data in a machine-readable format, email us.
Correct: change your name, settings and homework in the portal, or email us to correct anything else.
Delete: delete single assignments in the portal, or your whole account in Settings › Account › Delete account. If you can't sign in, email us.
Disconnect: remove a school connection at any time in Settings › Connections.
Sign out devices: in Settings › Account.

Email requests to proctoroffical@gmail.com. We answer within 45 days. To protect your account, we may ask you to write from the email address on the account or confirm other details. Someone you authorize, such as a parent, may make a request for you with proof of that permission. We will never treat you differently for using these rights.

California residents. In the past 12 months we collected the categories described in section 2: identifiers (email address, name, IP address for security), account log-in details, education information (homework, grades and coursework from school accounts you connect), device and usage information (device type, session times, AI usage), and the content you give us. They come from you, your device and the school accounts you connect, and are used for the purposes in section 3. We disclosed them only to the service providers in section 4. We do not sell or share personal information (including of anyone under 16) for cross-context behavioral advertising, and we use account log-in details only to provide the Service. We don't share personal information with others for their direct marketing. If you are under 18, you can delete anything you added to Proctor yourself, or ask us to.

9. How long we keep it

Information	How long
Your account, school, homework, files and connections	Until you delete them or your account. We don't delete inactive accounts automatically today; if we start, we'll email you first.
A deleted assignment	Its work, reviews and files are deleted right away. Its title can remain in your school's activity history and spending record until you delete your account.
Records of Canvas submissions sent from Proctor	With the homework: deleted with it or your account.
Whether Submit from Proctor is on, and the risk explanation you agreed to	With the Canvas connection: deleted when you disconnect it or delete your account.
Your school's activity history	The newest 5,000 entries.
Signed-in sessions	Until you log out, 30 days without use, or 180 days at most.
Log-in and sign-up attempts (with IP address)	About one hour.
Total AI spending on Proctor's shared AI for your email address	Kept after you delete your account (just the email address and a dollar amount), so deleting and signing up again can't reset the AI spending cap.
Server error logs	Up to 30 days.
Disk backups	Render takes a daily snapshot of the disk and keeps each one for about 7 days, so deleted data is gone from backups within about a week.
Homework sent to Anthropic	Deleted by Anthropic within 30 days, longer only in the cases in section 5.

Deleting your account removes your account, sessions, school, homework, uploaded and imported files, and school connections. Before it does, Proctor asks Google and Canvas to end the access you gave it. If you connected Canvas with an access token you made yourself, you can also delete that token in Canvas (Account › Settings). Nothing on Canvas, Google Classroom or Veracross is changed.

10. Security

All traffic to Proctor is encrypted with HTTPS.
Passwords are stored only as salted scrypt hashes, and session tokens only as hashes.
School tokens, calendar feed links and API keys are encrypted at rest (AES-256-GCM).
Repeated log-in attempts are slowed down and blocked. School connections are read-only, except the one Canvas submission you confirm with Submit from Proctor.
Our pages run only our own code: a strict Content Security Policy blocks third-party scripts.

No service can promise perfect security. If a breach affects your personal information, we will notify you and the authorities as the law requires. Please use a password you don't use anywhere else, and log out on shared computers. There is no password-reset email yet: if you forget your password, email us from your account's address and we'll help.

11. Where it's stored

Proctor is hosted by Render in the United States, and is meant for users in the United States. If you use it from another country, your information is transferred to, stored and processed in the United States. Anthropic also processes homework in the United States and possibly other countries.

12. Do Not Track and Global Privacy Control

Proctor doesn't track you across other websites and has no ads or third-party trackers, so there is nothing for a browser's "Do Not Track" setting to turn off; we treat every visitor as if it were on. We honor Global Privacy Control (GPC) signals as a request not to sell or share your personal information. Since we never sell or share it, the signal changes nothing about how we handle your data.

13. Changes to this policy

When we change this policy, we will post the new version here with a new "Last updated" date. If a change is significant, we will tell you by email or with a notice in the Service before it takes effect, and where the law requires it we will ask for your consent before using information we already have in a new way.

14. Contact us

Proctor
Email: proctoroffical@gmail.com

The short version