Privacy policy
Version:
What this document is
OraGrade helps a teacher prepare answer sheets, mark them and manage the grades. This page says what we collect about you, why, where it is kept, and what your rights are. It was written to be read, not skimmed past.
What we collect when you create an account
Five things, and nothing else:
- Your email address. It is your account name and how we reach you.
- Your password, which we never store as text. We store a one way cryptographic digest of it, so nobody here can read your password, including us.
- The country you choose, which tells us which data protection law applies to you.
- The interface language you signed up in.
- A record of your consent: which document you agreed to, at which version, in which language, and when.
What is stored while you use the service
What you enter to make the service work:
- Your class list as you enter it: each pupil’s number and name.
- Your exams, answer keys and the sheet designs you build.
- The reading of each answer sheet: the answers read and the score.
- A device identifier that sync needs, and aggregate usage counters.
Photos of answer sheets are not uploaded
An answer sheet is read on your device. What reaches our servers is the reading, meaning the answers and the score, and not the photo of the sheet.
The password check at signup
Before accepting a new password we ask the Have I Been Pwned service whether it appears in known breaches. We never send the password itself, only the first five characters of its cryptographic digest, which is not enough to reveal it. If that service is down, signup continues without the check.
Account messages, such as the email confirmation, are delivered through the Resend service. It receives your address and the message content for delivery and nothing more.
Where your data lives
Our servers and our database are in Riyadh, Saudi Arabia. The connection between your browser and us is encrypted, and the connection between our server and the database runs inside a private network that never crosses the public internet.
Each school’s data is isolated from every other school’s inside the database itself: the database refuses to show an account’s data to anyone but its owner, even if a layer above it made a mistake.
Cookies
We use two and no third: one keeps you signed in, one protects forms from forgery. No advertising cookies, no tracking, and no third party analytics.
Your pupils’ data
You are the one who enters pupils’ names, numbers and grades, and they remain in your care. We store them for you so the service works and use them for nothing else. We sell data to nobody and show it to no advertiser.
Your rights
You may ask for a copy of what we hold about you, ask for it to be corrected, or ask for your account and everything in it to be deleted. Write to customerservice@oragrade.com from your registered address and we answer within thirty days.
Your consent is always recorded together with the country you chose and the law that applied there on the day you agreed.
Changes to this policy
Every version of this page carries its date at the top, and your consent is recorded with the version of its day. The live version is what you are reading on this page.
Contact
For any question about your privacy: customerservice@oragrade.com.