Privacy Policy

When your school uploads handbooks, policies, and contracts, your school remains the owner and controller of that data. Rulora.io acts as a service provider (processor) that performs a legitimate educational function under your direction. Under FERPA, we operate as a "school official" and use school data only to provide the service to you.

Account information: your name, email, role, and profile picture provided through Google sign-in. We never receive or store your Google password.

School documents & content: the handbooks, board policies, collective bargaining agreements, and similar documents you upload, along with the questions you ask and the answers generated.

Usage data: basic operational logs used to keep the service reliable and secure.

We use your information solely to provide and improve the Rulora.io service for your school — indexing your documents, generating cited answers, and maintaining security. We do not sell your data, use it for advertising, or use your school's documents to train third-party models for unrelated purposes.

Rulora.io is an administrator tool. It is not directed to students and does not knowingly collect information directly from children. To the extent any education record is contained in a document you upload, we treat it as confidential school data, use it only to serve your school, and do not re-disclose it except as directed by you or required by law.

To generate answers, relevant excerpts from your documents are processed by our AI model provider strictly to produce your response. We use reputable infrastructure and AI providers under agreements that restrict use of the data to providing the service. We do not permit these providers to use your content to train general-purpose models.

We protect data in transit using industry-standard TLS/HTTPS encryption, enforce role-based access controls so staff only see what your principal shares with them, and authenticate access through Google sign-in. No method of transmission or storage is perfectly secure, but we work to protect your information using commercially reasonable safeguards.

We retain your documents and account data for as long as your school uses Rulora.io. You can delete any document from your Library at any time, which removes it and its indexed content from active use. On request, we will delete your school's data when you stop using the service.

Your school may access, export, correct, or delete its data. You may export any cited answer as a PDF and request a copy of your school's data by contacting us. Individuals with rights under FERPA or applicable state law should direct requests through their school, which controls the underlying records.

Student-data-privacy requirements vary by state (for example, SOPIPA-style statutes). We honor the requirements applicable to the state in which your district operates. For state-specific questions, consult your district counsel.

We may update this policy to reflect changes to our practices or the law; we will revise the "Last updated" date above. Questions? Contact Rulora.io at support@rulora.io.