Privacy Policy

1. Who We Are

ClassReads is operated by Ostira, LLC ("we", "us", "our"). ClassReads is a web-based tool that allows teachers to assign reading passages to students, record student readings via video, and assess comprehension through quizzes.

2. Compliance

ClassReads is designed to comply with:

• FERPA (Family Educational Rights and Privacy Act) — We act as a "school official" with a legitimate educational interest. We use student data only to provide the service to the school.
• COPPA (Children's Online Privacy Protection Act) — We do not collect personal information directly from children. Teachers (acting as school officials) enter student first names on behalf of their students. Students do not create accounts.
• Massachusetts Student Privacy Law (M.G.L. c. 71, § 34H) — We do not sell student data or use it for non-educational purposes.

3. What Data We Collect

Data	Who Provides It	Purpose	Retention
Teacher email & password	Teacher	Account authentication	Until account deleted
Classroom name	Teacher	Identify the classroom	Until account deleted
Student first names	Teacher	Identify students within a classroom	Until deleted by teacher
Video recordings of student readings	Student (in classroom)	Allow teacher to review reading performance	Automatically deleted after 48 hours
Quiz answers & scores	Student (in classroom)	Assess reading comprehension	Until deleted by teacher
Reading passage text & quiz questions	Teacher (via AI generation)	Provide reading content	Until deleted by teacher

What we do NOT collect

• Student last names, email addresses, or any student login credentials
• Student device identifiers, IP addresses, or location data
• Cookies or tracking pixels for advertising
• Biometric data (video recordings are standard video files, not processed for facial recognition or biometric analysis)

4. How Students Access ClassReads

Students do not create accounts. Teachers share a classroom link (e.g., classreads.com/classroom?slug=a42) with their students. Students select their name from a list to begin an assignment. No passwords, email addresses, or personal devices are required.

5. Video Recordings

When a student records themselves reading aloud:

• The video is uploaded to secure cloud storage (Cloudflare R2).
• Only the student's teacher can view the recording.
• The recording is automatically deleted after 48 hours. After this period, the video file is permanently removed from our servers and cloud storage.
• Teachers cannot download or share recordings outside of ClassReads.

6. AI-Generated Content

Teachers can generate reading passages using an AI writing assistant. When a teacher requests a story:

• Only the teacher's topic prompt (e.g., "write about dolphins") is sent to the AI service.
• No student names, classroom data, or personal information is included in AI requests.
• The AI provider (xAI) does not receive any student data.
• Generated content is reviewed by the teacher before being assigned to students.

7. How Data Is Stored & Protected

• Encryption in transit: All data between the browser and our servers is encrypted via TLS (HTTPS).
• Server locations: Data is stored on servers in Virginia (USA), Los Angeles (USA), and Helsinki (Finland). Data is replicated across these locations for reliability.
• Access controls: Each teacher can only access their own classroom data. There is no shared access between teachers.
• Passwords: Teacher passwords are hashed using Argon2 (an industry-standard algorithm) and are never stored in plaintext.
• Video storage: Recordings are stored in Cloudflare R2 with time-limited access URLs that expire within hours.

8. Who Can Access Student Data

• The teacher who created the classroom can view all data for their students.
• Ostira, LLC administrators may access data solely for technical support or to maintain the service, subject to the same use restrictions as the school.
• No other teachers, parents, or third parties can access student data through the application.

We do not sell, rent, lease, or share student personal information with any third party for commercial purposes.

9. Third-Party Services

Service	Purpose	Data Shared
Cloudflare	Network security, TLS, content delivery	Network traffic (standard web proxy)
Cloudflare R2	Video recording storage	Video files (auto-deleted after 48h)
xAI (Grok)	AI story generation	Teacher's topic prompt only (no student data)

None of these services receive student names, teacher emails, or any personally identifiable student information.

10. Data Deletion & Teacher Rights

Teachers can delete data at any time through the ClassReads interface:

• Delete individual students — removes the student's name, all their recordings, and quiz responses.
• Delete assignments — removes the assignment and all associated student recordings and responses.
• Delete stories — removes the reading passage and quiz questions.
• Delete account — contact us to permanently delete your account and all associated classroom data.

Schools or districts may request bulk deletion of all data associated with their teachers by contacting us.

11. Data Retention

• Video recordings: Automatically deleted after 48 hours.
• Student names & quiz data: Retained until deleted by the teacher or until the teacher's account is deleted.
• Teacher accounts: Retained until the teacher or school requests deletion.

We do not retain student data beyond what is necessary to provide the service. When data is deleted, it is permanently removed from all servers within 30 days (to allow for replication synchronization).

12. Parental Access

Under FERPA, parents have the right to inspect and review their child's education records. Parents should contact their child's teacher or school to request access to their child's ClassReads data. We will work with the school to fulfill such requests.

13. Changes to This Policy

If we make material changes to this privacy policy, we will notify registered teachers via email and update the effective date at the top of this page.

14. Contact Us