Privacy Policy

1. Scope and roles

This policy applies to Axtant's website and service. Axtant LLC controls account, billing, security, support, and website data. For student rosters, worksheets, submissions, marks, feedback, and agency calibration records, the agency determines the educational purpose and Axtant processes the data on its instructions.

An agency should direct student or parent privacy requests to its own privacy contact first. Axtant will assist the agency with requests that concern data in the service.

2. Data processed

• Account data, including owner and tutor names, email addresses, authentication identifiers, roles, invitations, and support correspondence.
• Agency data, including legal and display names, subjects, cohorts, policies, assessment source evidence, approved question representations, guides, marked examples, accepted refinements, and tutor overrides.
• Student data, limited to an agency-level roster record, cohort association, photographed work, document observations, answer mappings, marks, feedback, page-quality results, and private release records. An agency may add an optional feedback delivery address for the student, a parent or guardian, or an agency-controlled recipient. The address is used for delivery and is not a login identity. Shared family addresses are permitted.
• Billing data, including Stripe customer, subscription, payment, invoice, usage, refund, and reconciliation identifiers. Axtant does not store full card numbers.
• Regional-pricing location, limited to an approximate country code supplied by Axtant's network provider. Axtant uses it to display AUD or USD pricing and does not retain the visitor's raw network address for this purpose. Stripe independently uses the Checkout visitor's network location to select a supported checkout currency.
• Website measurement, limited to daily aggregate counts for a fixed set of pages and actions, with broad source categories such as email or search. Counts describe events, not unique people. Browser Do Not Track and Global Privacy Control signals disable this measurement. Axtant does not set an analytics cookie or retain a visitor identifier, raw network address, user agent, or browsing history for this measurement.
• Product measurement, limited to daily workspace activity and completed operational milestones such as preparing a material, importing a roster, receiving a submission and releasing feedback. It helps us identify setup difficulties. These private reports exclude student content and do not record individual browsing histories.
• Security and operations data needed to protect accounts, maintain service reliability, investigate misuse, and document material account events. This includes privacy-scrubbed error details, fixed operational alert codes, deployment information, and support-incident status; it excludes student answers, photos, OCR, feedback, request bodies, cookies, and account user context.

3. Purposes and legal bases

Axtant processes data to provide the contracted service, authenticate users, enforce tenant access, detect abuse, bill accurately, send requested notices, support customers, recover from failures, comply with law, and defend legal rights. Depending on location, the basis is performance of a contract, the agency's instructions, legitimate interests in operating a secure service, consent where required, or legal obligation.

Axtant does not sell personal information and does not use customer worksheets, student work, marks, or feedback to train shared models.

Marked examples help Axtant mark a question the way the agency does. They are answers the agency uploads with its marks, and student answers whose marks an agency tutor has confirmed or corrected. Axtant uses each example only to mark answers to the same question for the same agency, including answers already marked when a tutor asks for them to be checked; a suggested change applies only when a tutor accepts it. Examples stay within the agency's workspace, are never used for another agency or to train a model, and can be viewed and removed by the agency. Removing one does not change marks already released.

4. Providers and international processing

Axtant uses Supabase, Render, Mathpix, OpenAI, Stripe, Mailgun, Sentry, Cloudflare, and Apple iCloud Mail for the functions described in the Subprocessor List. The database and authentication project is hosted in Sydney, and native processing runs in Singapore. Cloudflare handles application requests globally and stores private artifacts in R2 buckets with an Oceania location hint. Other providers may process data in Australia, the United States, the European Union, or another region stated in their service configuration and terms.

Axtant limits provider inputs to the data needed for the operation, uses private storage and signed access, disables optional provider-improvement use where supported, deletes temporary provider artifacts when the integration permits, and strips customer content and direct user context from Sentry events.

5. Disclosure

Axtant discloses data to the agency's authorised members, contracted providers, professional advisers under confidentiality, and authorities where legally required. Axtant may disclose data during a corporate transaction subject to appropriate confidentiality and notice where required.

6. Security, retention, and choices

Axtant uses access controls, private storage, encryption in transit, limited operational records, and audit controls. No system is immune from risk. The Security Overview describes implemented protections without claiming a certification.

The Data Retention and Deletion Policy states the active, export, deletion, backup, billing, and fraud-prevention periods. Agency exports include the optional feedback delivery address in readable form for the owner. Deletion removes its encrypted value and matching delivery hash with the student record. Agencies can correct roster and workspace data, revoke access, export available records, and request workspace deletion through privacy@axtant.com. Individual users can manage their separate personal account from Account. Identity verification and agency authority may be required.

7. Children and students

Axtant is sold to tutoring agencies, not directly to children. Agencies must provide notices and obtain parent, guardian, school, or student permissions required for their use. Public upload links reveal only the limited roster and assignment context needed to confirm a submission.

8. Complaints and changes

Privacy questions or complaints may be sent to privacy@axtant.com or by post to Axtant LLC at the address in the Terms. Axtant will investigate and work with the relevant agency. A material policy change will be dated and notified where required.