Privacy Policy
Last Updated: April 14, 2026
Overview
EduLibra, Inc. (“EduLibra,” “we,” “our,” or “us”) operates a marketplace platform that connects publishers, creators, and authors of educational content (“Publishers”) with the individuals, families, and institutions that access that content (“Subscribers”).
This Privacy Policy explains how we collect, use, disclose, and protect information when you use our services (the “Services”).
We design EduLibra to support learning environments. We collect only what we need to operate the platform, and we do not sell personal data, including student data. We also do not use student work or identifiable student data to train generative artificial intelligence or machine learning models that are made available outside the Services.
Information We Collect
We collect information in a few different ways, depending on how you use EduLibra.
Information You Provide
When you create an account or interact with the Services, we may collect:
- your name;
- your email address;
- account credentials or authentication details;
- information you provide in messages, support requests, or Publisher workflows;
- for Publishers, information needed to operate your Publisher account, including tax identification and payout details (which are typically collected and held by Stripe rather than EduLibra).
Authentication Information
If you sign in using a third-party provider, such as Google or Microsoft, or through school single sign-on, we may receive basic account information, including your name, email address, and account identifier, depending on your settings with that provider.
Usage Information
We collect information about how the Services are used, including:
- content viewed;
- time spent on content;
- interactions with lessons, assignments, or materials;
- device and browser information;
- IP address and general location.
Educational and Assignment Data
Because EduLibra is used in learning environments, we may collect:
- assigned content and progress;
- student work or submissions;
- class, group, or school relationships.
Payment Information
Payments for Publisher Content are generally processed by Stripe through a Stripe Connect relationship. Stripe collects and holds full payment card and related financial information under its own terms and privacy practices. EduLibra does not store full payment card information. We receive limited information about transactions, such as status, amount, and subscription details, as necessary to operate the Services.
How We Use Information
We use information to operate and improve the Services. This includes:
- creating and managing accounts;
- authenticating users;
- providing access to content based on roles, entitlements, and permissions;
- supporting classroom, school, and Publisher workflows;
- facilitating payments through third-party providers such as Stripe;
- improving performance, reliability, and features;
- maintaining the safety, security, and integrity of the Services, including detecting and preventing fraud or abuse;
- communicating with you about the Services.
We do not use personal data for advertising, and we do not sell personal data.
Cookies and Similar Technologies
We use cookies and similar technologies (such as local storage and pixels) to operate and secure the Services, remember your preferences, keep you signed in, understand how the Services are used, and improve performance. Some of these technologies are strictly necessary for the Services to function; others are used for analytics or product improvement.
You can control cookies through your browser settings. We honor Global Privacy Control (“GPC”) signals for users in jurisdictions where recognizing such signals is required. Because EduLibra does not sell personal data or use it for cross-context behavioral advertising, GPC signals primarily affect optional analytics cookies.
We may publish a separate Cookie Policy with additional detail. Where applicable, that policy is incorporated into this Privacy Policy by reference.
How We Share Information
We do not sell personal data. We share information only in limited circumstances:
Service Providers
We work with trusted providers who help operate the Services, including:
- Stripe (payment processing and Stripe Connect for Publisher payouts);
- Google, Microsoft, and similar providers (authentication);
- infrastructure, hosting, logging, and security providers;
- communications and support tooling providers.
A current list of subprocessors may be maintained at a public URL we designate. Where service providers process personal data on our behalf, they are contractually required to do so only for purposes consistent with this Privacy Policy.
Publishers
When you access Publisher Content, the applicable Publisher may receive information reasonably necessary to operate the Publisher-Subscriber relationship, such as the fact that you are a Subscriber, aggregated usage information, and, where relevant to the Service (for example, graded assignments), your work or submissions. Publishers are independently responsible for their handling of personal data under applicable law.
Schools and Institutions
If your account is associated with, or provisioned through, a school, district, or other institution, that institution may have access to information related to your use of the Services, such as account details, assignment activity, and usage within that institutional context. Where EduLibra has entered into an Institutional Agreement (such as a data processing agreement or student data privacy agreement) with an institution, that agreement governs the specific handling of personal data within that institutional relationship.
Legal and Safety
We may disclose information if required to comply with law, respond to lawful requests, enforce our agreements, protect our rights or the rights of others, or protect the safety of users or the public. Where we receive a request that we believe is overbroad or improper, we may push back, seek to narrow it, or notify affected users, consistent with law.
Corporate Transactions
If EduLibra is involved in a merger, acquisition, financing, corporate reorganization, or sale of all or substantially all of its assets, personal data may be transferred as part of that transaction, subject to the protections in this Privacy Policy and applicable law.
Children’s Privacy
EduLibra may be used by students, including minors.
- Users under 13 may use the Services only through a parent, legal guardian, school, district, teacher, or other authorized educational organization.
- Users age 13 through 17 may use the Services only with the involvement of a parent, legal guardian, school, district, or other authorized institution.
- We do not knowingly allow children under 13 to create independent accounts.
What We Collect from Children
For users under 13, we limit collection to information reasonably necessary to provide the Services, such as account and authentication details, assignment and progress information, and interactions with educational content. We do not condition participation on the collection of more information than is reasonably necessary.
How Consent Works
Depending on the context, consent for a child’s use of the Services may be obtained by a parent or guardian directly, or by a school, district, or other authorized institution acting on behalf of parents where permitted by law. Where EduLibra has entered into an Institutional Agreement with a school or district, that agreement may designate EduLibra as authorized to obtain parental consent on behalf of the institution under COPPA for the limited purposes described in that agreement. Absent such an agreement, EduLibra relies on the consent framework provided by the Publisher, institution, or parent or guardian, as applicable.
Parental Review and Deletion
Parents and legal guardians of users under 13 may review the personal information we have collected from their child, request that we delete it, and refuse to permit further collection or use of their child’s information, by contacting privacy@edulibra.com. Where a child’s account is managed by a school or district, such requests may need to be coordinated with that institution. We may need to verify identity before acting on a request.
What We Do Not Do
We do not:
- sell student data;
- use student data for advertising or cross-context behavioral advertising;
- use student work or identifiable student data to train generative AI or machine learning models made available outside the Services.
Artificial Intelligence and Machine Learning
EduLibra does not use student work, student submissions, or personally identifiable student data to train generative artificial intelligence or machine learning models that are made available to third parties outside the Services.
We may use User Content and Service-generated data for internal operational purposes, including search, recommendations, abuse and fraud detection, security, analytics, and de-identified or aggregated product improvement. De-identified or aggregated information is not combined with identifiers to re-identify individuals.
EduLibra may offer AI-assisted features within the Services, such as tools that help Publishers create or format content, help educators review assignments, or help Subscribers interact with Publisher Content. Where these features process your content or data, we describe the feature and relevant data uses in the applicable product documentation, and users or institutions may configure or disable those features to the extent the Services permit.
Data Retention
We retain information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and maintain system security and integrity. The following table describes our general retention approach. Actual retention periods may vary based on the specific circumstances, applicable law, and institutional agreements.
Category | General retention approach |
|---|---|
Account records | Retained for the life of the account, plus a reasonable period after closure for legal, security, and operational purposes. |
Transaction records | Retained as required by tax, accounting, and financial-reporting laws (typically up to 7 years). |
Educational and assignment data | Retained as directed by the relevant Publisher or institution, and as needed to support student access persistence and portfolios; institutional agreements may set specific retention and deletion terms. |
Usage and log data | Retained for a limited period for security, abuse detection, debugging, and analytics, typically not longer than necessary for those purposes. |
Support communications | Retained as needed to provide continuity of support and resolve disputes. |
Backups | Retained for a limited period under standard backup rotation; deleted content may persist temporarily in backups before expiring. |
Account Deletion and Data Control
You may request deletion of your account by:
- using account settings, where available; or
- contacting privacy@edulibra.com or support@edulibra.com.
We will respond within a reasonable period. Important notes:
- if your account is managed by a school or organization, deletion may require coordination with that institution;
- some information may be retained for legal, security, or operational reasons;
- student work or educational records may persist as part of school-managed environments.
Your Rights
Depending on where you live, you may have rights regarding your personal data. You may contact us at privacy@edulibra.com to exercise any of the rights described below. We may need to verify your identity before responding, and we may decline or limit a request where permitted by law.
General Rights
Subject to applicable law, you may have the right to:
- access personal data we hold about you;
- correct inaccurate personal data;
- request deletion of personal data;
- restrict or object to certain uses;
- receive a copy of your personal data in a portable format;
- withdraw consent where we rely on consent as a legal basis.
California (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, “CCPA”). These include the right to know the categories of personal information we have collected, the sources, the business or commercial purposes for collection, and the categories of third parties with whom we share personal information; the right to correct, delete, and access your personal information; the right to opt out of the sale or sharing of personal information (we do not sell or share personal information as those terms are defined under the CCPA); and the right to limit the use and disclosure of sensitive personal information.
Categories of personal information we collect may include identifiers (such as name, email, and account identifiers), commercial information (such as subscription records), internet or network activity information, geolocation data (general, from IP), professional or education-related information (such as assignments and progress), and inferences drawn from the foregoing. We collect this information from you, from third-party authentication providers, from Publishers and institutions where applicable, and automatically through your use of the Services. We use and disclose this information for the business purposes described in “How We Use Information” and “How We Share Information.”
We do not knowingly sell or share personal information of consumers under 16 years of age. We honor Global Privacy Control signals as a valid request to opt out of sale or sharing where applicable.
You may designate an authorized agent to make requests on your behalf. You have the right not to receive discriminatory treatment for exercising your rights.
Other U.S. State Privacy Laws
If you are a resident of Virginia, Colorado, Connecticut, Texas, Oregon, Montana, or another U.S. state with a comprehensive consumer privacy law, you may have rights similar to those described above, including rights to access, correct, delete, and port your personal data, and to opt out of targeted advertising, sale of personal data, or certain profiling activities. We do not engage in targeted advertising, sell personal data, or use personal data for profiling in furtherance of decisions producing legal or similarly significant effects.
You may have the right to appeal a decision we make regarding your privacy request by replying to our response or contacting privacy@edulibra.com.
Student Privacy Rights
Where applicable, parents, guardians, eligible students, schools, and institutions have rights under FERPA, COPPA, and state student-privacy laws such as California SOPIPA and AB 1584, New York Education Law Section 2-d, Illinois SOPPA, and comparable statutes. These rights may include the right to review and correct education records, restrict certain disclosures, and receive notices about data handling. For school-managed accounts, these rights are typically exercised through the school or institution.
Do Not Sell or Share Personal Information
EduLibra does not sell personal data, including student data, and does not share personal data for cross-context behavioral advertising, as those terms are defined under the CCPA and comparable state laws. We honor Global Privacy Control signals where applicable as a valid request to opt out of sale or sharing.
International Users and Data Transfers
EduLibra is based in the United States, and the Services are primarily operated from the United States. If you access the Services from outside the United States, your personal data will be transferred to, stored in, and processed in the United States. U.S. privacy laws may differ from those of your country of residence. By using the Services, you acknowledge this transfer and processing, where permitted by applicable law.
Security
We use reasonable administrative, technical, and organizational measures designed to protect personal data. No system is completely secure, and we cannot guarantee absolute security.
Breach Notification
If we determine that a security incident has resulted in unauthorized access to or acquisition of personal data, we will notify affected individuals, institutions, and regulators as required by applicable law, including state student-privacy laws that impose specific notification timelines. Where an Institutional Agreement specifies a shorter notification timeline for affected institutions, that timeline will govern the notice to that institution.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the “Last Updated” date. If we make material changes, we will provide additional notice through the Services or by other reasonable means.
Contact
EduLibra, Inc.
455 Market St Ste 1940 PMB 703322
San Francisco, CA 94105-2448