Privacy Policy

AJES Strategy & Design, LLC ("we," "us," or "our") operates the Riches Redeemed platform at richesredeemed.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your name and email address. Account authentication is handled by Supabase, our infrastructure provider. We do not store passwords directly — authentication credentials are managed by Supabase Auth.

1.2 Student Information

Teachers and parents may enter student information including first name, last name, email address (optional), and parent email address (optional). Students access the platform via a class code and a 4-digit PIN — no student account or login is required.

1.3 Academic Data

We collect and store coursework data including assignment submissions, homework responses, quiz and exam answers, grades, and progress tracking. This data is used solely to deliver the educational service, provide AI-assisted grading, and generate reports and transcripts.

1.4 Payment Information

Payment processing is handled entirely by Stripe. We do not collect, store, or have access to your credit card number, bank account details, or other financial information. We receive only a confirmation of payment, your Stripe customer ID, and the subscription tier purchased. See Stripe's Privacy Policy for details on how they handle payment data.

1.5 Google Classroom Data

If you choose to connect Google Classroom, we request read-only access to your course list and student roster, and write access to push grades. OAuth tokens are encrypted using AES-256-GCM before storage. We access only the specific Google Classroom data needed for roster import and grade synchronization. We do not access email content, Drive files, or any other Google services.

1.6 Automatically Collected Information

We use standard web server logs and may collect IP addresses, browser type, and page visit timestamps for security, rate limiting, and service reliability. We do not use tracking cookies, advertising pixels, or third-party analytics services.

2. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the educational platform
• Process and grade student submissions using AI-assisted grading
• Generate grade reports, report cards, and academic transcripts
• Send weekly parent email digests (if parent email is provided)
• Process payments and manage subscriptions via Stripe
• Synchronize rosters and grades with Google Classroom (if connected)
• Enforce rate limits and prevent abuse
• Respond to support inquiries

3. AI-Assisted Grading

Student submissions (homework answers, quiz responses, exam answers) are sent to Anthropic's Claude AI for automated grading. This includes the student's text responses and the corresponding answer keys. We do not send student names, emails, or other personally identifiable information to the AI service. The AI returns scores and feedback which are stored in our database.

See Anthropic's Privacy Policy for details on how they handle data sent to their API.

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We share data only with:

• Supabase — Database hosting and authentication (your data is stored in their PostgreSQL database)
• Vercel — Application hosting and deployment
• Anthropic (Claude AI) — AI grading of student submissions (text responses only, no PII)
• Stripe — Payment processing (payment details only)
• Resend — Transactional email delivery (parent email digests)
• Google — Classroom roster and grade sync (only if you connect Google Classroom)

We may also disclose information if required by law, court order, or to protect the rights, property, or safety of our users or the public.

5. Data Security

We implement reasonable security measures including:

• Row-Level Security (RLS) on all database tables ensuring users can only access their own data
• AES-256-GCM encryption for stored OAuth tokens
• HTTPS encryption for all data in transit
• Rate limiting on sensitive endpoints (submissions, imports, AI grading)
• No storage of payment card information (handled entirely by Stripe)
• Server-side authentication on all teacher API routes

No method of electronic storage or transmission is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain account and academic data for as long as your account is active or as needed to provide the Service. Course data (grades, submissions, transcripts) is retained to support ongoing academic record-keeping needs.

If you wish to delete your account and all associated data, contact us at the email below. We will delete your data within 30 days of a verified request, except where retention is required by law.

7. Children's Privacy

Riches Redeemed is designed for use by teachers, parents, and students in educational settings. Students under 13 access the platform through a class code provided by their teacher or parent — no personal account is created and no email address is required from the student.

We collect only the minimum student information necessary to deliver the educational service (first name, last name, and optionally an email for older students). Parent or teacher consent is implicit in the teacher/parent creating the student record and providing the class code.

If you believe we have collected information from a child under 13 without appropriate consent, please contact us and we will promptly delete it.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data
• Export your data (grade reports and transcripts are available as PDF downloads)
• Disconnect Google Classroom at any time (tokens are immediately deleted)
• Opt out of parent email digests by removing the parent email from student records

9. Third-Party Links

The Service may contain links to third-party websites (e.g., Stripe for payments, Google for Classroom integration). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

AJES Strategy & Design, LLC
Email: support@richesredeemed.com