Privacy Policy

1. Introduction

StudentHub (“we”, “our”, or “us”) is committed to protecting your privacy and handling personal data responsibly and transparently. This Privacy Policy explains how we collect, use, process, store, and protect personal information when you use the StudentHub service (“Service”).

2. Data Controller & Processor Roles

Individual Users: When you independently create an account, StudentHub acts as the data controller for your personal information.

Institutional Use: When StudentHub is used pursuant to an agreement with an educational institution, the institution acts as the Data Controller and StudentHub acts as a Data Processor, processing personal data solely on behalf of and under the direct control of the institution.

A Data Processing Addendum (DPA) is available upon request for institutional partners.

3. Information We Collect

Account Information

• Email address
• Authentication-related metadata

LMS Data (e.g., Canvas)

• Course names
• Assignment titles
• Due dates
• Academic metadata required for dashboard functionality

StudentHub does not modify LMS data and does not submit or alter records within institutional systems.

Technical & Usage Data

• IP address (security & fraud prevention)
• Browser & device type
• Usage analytics limited to service improvement

4. FERPA Compliance

StudentHub is committed to compliance with the Family Educational Rights and Privacy Act (FERPA).

• When used by an institution, StudentHub may qualify as a “school official” with legitimate educational interest.
• StudentHub operates under the direct control of the educational institution in accordance with institutional agreements.
• StudentHub uses education records solely for providing the contracted educational service.
• StudentHub does not re-disclose student education records except as authorized by the institution or required by law.

5. GDPR Compliance

For users in the European Economic Area (EEA), United Kingdom, or Switzerland, processing is conducted in accordance with the General Data Protection Regulation (GDPR).

Legal Bases

• Performance of a contract
• User consent (e.g., LMS connection)
• Legitimate interests (security, fraud prevention)
• Legal obligations

Your Rights

• Right of access
• Right to rectification
• Right to erasure
• Right to data portability
• Right to restrict processing
• Right to object
• Right to withdraw consent

You also have the right to lodge a complaint with your local data protection supervisory authority.

6. Data Security

• Encrypted transmission via HTTPS
• Encrypted storage of LMS tokens
• Access controls and least-privilege internal access
• Regular monitoring for security vulnerabilities

In the event of a data breach affecting personal data, StudentHub will notify affected users or institutions without undue delay and in accordance with applicable law.

7. Data Retention

Personal data is retained only as long as necessary to provide the Service or comply with legal obligations.

• Account data: retained while account is active
• LMS tokens: deleted upon disconnection
• Deleted accounts: permanently removed within 30 days

8. International Transfers

Where personal data is transferred internationally, StudentHub implements appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent legal mechanisms where required.

9. Data Sharing

StudentHub does not sell personal data.

Limited sharing may occur with trusted service providers (e.g., hosting, email infrastructure) under strict confidentiality and data protection obligations.

10. Age Restrictions

StudentHub is intended for users aged 13 or older. Users under 13 may only use the Service through an authorized educational institution with appropriate parental consent mechanisms in place.

11. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be reflected by updating the “Last updated” date.

12. Contact

For privacy-related questions or data rights requests: