Legal
Privacy Policy
Last updated 13 August 2026
What we collect when you use the Alephbeis website or the Learning Portal, what we do with it, and what a school can require of us.
The service is operated by Alephbeis LLC, 82 Kingsfield Dr, Lakewood NJ 08701. It covers this website and the Learning Portal.
Student data belongs to the school
A school that licenses the Learning Portal enters information about its students. That information belongs to the school, not to us. We hold and process it only to provide the service the school asked for, and only on the school’s instructions.
- FERPA. We act as a school official with a legitimate educational interest under 34 CFR § 99.31(a)(1). We do not use student records for any purpose other than delivering the service, and we do not disclose them except as this policy says or as the school directs.
- COPPA. The program serves children from Pre-K, so most students are under 13. We collect their information at the school’s direction and rely on the school to provide consent on parents’ behalf, which COPPA permits for a service used solely for educational purposes. We do not knowingly collect information directly from a child.
- No advertising, ever. We do not use student information to serve advertising, we do not build profiles for any non-educational purpose, and we do not sell it.
- No student information is sent to an AI service. We use AI to help write and index our own curriculum and guide material. Student names, class assignments and assessment results are never part of what is sent.
A parent seeking access to, correction of, or deletion of their child’s records should ask the school; the school can act on those records directly, and we will help it do so.
What we collect
Information the school gives us. Staff names and contact details, student names, class and grade assignments, and the assessment results the program produces. Nothing about a student is gathered by us — it is entered by the school or generated by work the student does in the program.
Information you give us. What you type into a contact or order form: your name, school, email, phone, and whatever you choose to write.
Information collected automatically. Standard web logs — pages requested, date and time, referring address, IP address, browser and version. We use these to keep the service running and to find faults. We do not use them to identify individual visitors.
Cookies. We use cookies for two things: keeping you signed in during a session, and remembering you between visits. We do not use advertising cookies and we do not track you across other websites. Cloudflare Turnstile, which protects our public forms from automated abuse, sets its own cookie for that purpose.
Who else processes it
We use a small number of providers to run the service. Each is bound to use the information only to provide their service to us.
| Provider | What it does | What it touches |
|---|---|---|
| Amazon Web Services | Hosting, file storage, and email delivery through Amazon SES | Application data and files; email addresses for messages we send |
| Stripe | Payment processing | Billing contact and payment details — card details go to Stripe, never to us |
| Cloudflare | Bot protection on public forms | IP address and request metadata |
| Laravel Nightwatch | Application error and performance monitoring | Technical request data; may incidentally include identifiers present in an error |
| Groq | Generating and adjudicating our own curriculum and guide text | Curriculum and article content only — no student or personal information |
| OpenAI | Producing search embeddings for that same material | Curriculum and article content only — no student or personal information |
We do not sell information to anyone, and we do not share it with third parties for their own purposes.
How we use it
To provide and support the service; to answer what you ask us; to bill a school for what it licensed; and to keep the service secure and working.
We also study aggregate, de-identified results to improve the curriculum — for example, which skills a given level tends to find hardest. This never identifies a school, a class or a child, and we do not publish or share results attributable to any of them.
How long we keep it
We keep a school’s data while its account is active and for as long as needed to provide the service.
On termination, a school may require deletion of its student data, and we will delete it. Absent instructions we retain it for 90 days so an account can be restored, then delete it. We may keep aggregate, de-identified results, which cannot be traced to a school or a student, indefinitely.
Security
We protect information with encryption in transit, access controls limiting staff access to those who need it, and infrastructure held to our providers’ security programs. No system is perfectly secure, and we do not claim otherwise.
If a breach affects a school’s data, we will notify that school without undue delay and no later than 72 hours after we confirm it, with what we know, what we are doing, and what the school may need to do.
Your choices
Ask us at [email protected] to see, correct or delete information about you. Staff and school administrators can change much of it directly in the portal. We answer within 30 days, usually far sooner. Requests about a student’s records should come through the school.
Data processing agreements
We will sign a school’s or district’s data processing agreement, including the SDPC National Data Privacy Agreement. Ask at [email protected].
Changes to this policy
If we change this policy materially we will post the new version here with a new date and, where it affects student data, tell licensed schools directly before it takes effect.
Contact
Alephbeis LLC
82 Kingsfield Dr, Lakewood NJ 08701
[email protected]
·
440-488-4222