Skip to main content
FERPA Compliant by Architecture

Privacy Policy

Last updated: January 2026 • Compliant with Google API Services User Data Policy

1. Our Core Privacy Commitment: You Own Your Data

At SmartClassScripts, we take educator and student privacy with the utmost seriousness. Our applications (including IEP Insight, ScoreScribe, ReadRise Flashcards, and StudyStacks) are architected specifically to prevent student data from ever leaving your Google account.

100% of student data lives and stays in your private Google Sheets or Google Docs. We never store student records, names, or scores on external databases, and we do not maintain tracking telemetry. We maintain a small database solely for license key verification.

2. FERPA & COPPA Alignment

Because our scripts execute client-side inside the user's authenticated Google Workspace session, student educational records are never transmitted or disclosed to unauthorized parties. This architecture is inherently aligned with the Family Educational Rights and Privacy Act (FERPA, 34 CFR Part 99) and the Children's Online Privacy Protection Act (COPPA).

3. Google Workspace Permissions & Scopes

Our add-ons strictly adhere to Google's principle of least privilege. We only request the exact OAuth scopes necessary to provide core utility:

  • Current Document Only: Scopes like https://www.googleapis.com/auth/spreadsheets.currentonly limit the script's access solely to the active spreadsheet file you opened it in (never your broader Google Drive).
  • User Interface: Displays sidebars, dialogs, and menu items within your workspace.

4. No Generative AI Training on Student Records

Unlike tools that send educational evaluation data or IEP notes to third-party Large Language Model APIs (such as OpenAI or Anthropic), SmartClassScripts does not transmit student information to AI providers. All narrative generation is computed using deterministic, rule-based algorithms executing within Google's Apps Script container.

5. Google API Limited Use Requirements

SmartClassScripts' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Add-on Specific Privacy Policies

For detailed privacy policies and Google OAuth permission disclosures for each individual tool, please refer to the application pages below:

7. Contact Us

If you or your school district IT department have questions about our security model or require a signed Data Privacy Agreement (DPA), please reach out via our or on our Discord community.