Skip to main content

Privacy Policy

Last updated: February 16, 2026

1. Introduction

AdPrax (“we,” “us,” or “our”) operates an AI-native marketing simulation platform for collegiate education. This Privacy Policy describes how we collect, use, disclose, and protect information when you use our website, iOS application, and related services (collectively, the “Platform”).

By using the Platform, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Platform.

2. Information We Collect

Account Information

  • Name, email address, and password
  • Role (student or instructor)
  • Institution name and course enrollment information

Simulation Data

  • Marketing decisions submitted during simulations
  • Simulation results, scores, and performance metrics
  • AI feedback interactions (Socratic tutoring conversations)
  • Boss Check-In session transcripts and grades

Usage Data

  • Pages visited, features used, and time spent on the Platform
  • Device type, operating system, and browser information
  • IP address and approximate location (country/region)
  • Error logs and performance data

Audio Data

  • Voice recordings during Boss Check-In oral exam sessions (processed in real-time for transcription; raw audio is not stored)

3. How We Use Your Information

  • Simulation processing: Running marketing simulations, calculating results, and generating scores
  • AI feedback: Providing personalized Socratic tutoring, adaptive difficulty, and coaching
  • Boss Check-In: Conducting AI-powered oral exams and generating assessment grades
  • Course management: Enabling instructors to manage courses, view student progress, and export grades
  • LMS integration: Syncing grades and roster data with your institution's learning management system
  • Platform improvement: Analyzing usage patterns to improve features, fix bugs, and enhance performance
  • Communications: Sending course-related notifications, round announcements, and platform updates

4. Data Sharing

We share your information only in the following circumstances:

  • Course instructors: Instructors can view simulation decisions, scores, AI feedback, and Boss Check-In results for students enrolled in their courses
  • AI service providers: We send simulation data to third-party AI providers (e.g., Anthropic, OpenAI, Google) to generate feedback and conduct oral exams. This data is processed according to each provider's data processing agreements and is not used to train their models
  • Infrastructure providers: We use Supabase (database and authentication), Vercel (web hosting), and Apple (iOS distribution) to operate the Platform
  • Legal requirements: We may disclose information if required by law, regulation, or legal process

We do not sell your personal information to third parties.

5. Data Retention

  • Active courses: Data is retained for the duration of the course and one academic year after the course ends
  • Account data: Retained until you delete your account or request deletion
  • Instructor requests: Instructors may request deletion of course data after the course concludes
  • Anonymized analytics: Aggregated, de-identified usage data may be retained indefinitely for platform improvement

6. FERPA Compliance

AdPrax is designed to comply with the Family Educational Rights and Privacy Act (FERPA). Student education records created through the Platform are protected as follows:

  • Student simulation data constitutes education records under FERPA
  • Access to student records is limited to the student and their course instructor(s)
  • We act as a “school official” with a legitimate educational interest under FERPA's school official exception
  • We do not disclose student education records to third parties without consent, except as permitted by FERPA
  • Institutions may enter into a data processing agreement with AdPrax for additional FERPA assurances

7. COPPA Compliance

The Platform is designed for collegiate-level students and is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will promptly delete it. If you believe a child under 13 has provided us with personal information, please contact us at the address below.

8. Data Security

We implement industry-standard security measures to protect your information:

  • All data is transmitted over HTTPS/TLS encryption
  • Passwords are hashed and never stored in plain text
  • Database access is controlled by row-level security policies
  • API access is authenticated and rate-limited to prevent abuse
  • Regular security reviews and dependency updates are performed

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

9. Your Rights

You have the right to:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate information
  • Deletion: Request deletion of your account and associated data
  • Portability: Request your simulation data in a portable format
  • Opt-out: Opt out of non-essential communications

To exercise any of these rights, contact us at the address below. We will respond within 30 days.

10. Cookies and Tracking

The Platform uses essential cookies for authentication and session management. We use analytics tools to understand usage patterns and improve the Platform. We do not use cookies for advertising or cross-site tracking.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by posting the updated policy on the Platform and updating the “Last updated” date above. Continued use of the Platform after changes constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: