Privacy Policy
Effective date: July 27, 2026 · Last updated: October 11, 2026
This Privacy Policy explains how Novastone AI LLC ("Novastone," "we," "us," or "our") collects, uses, and protects information when you use the LessonPlanningForTeachers service at lessonplanningforteachers.com (the "Service"). LessonPlanningForTeachers is a set of AI drafting tools for K-12 educators: a quiz builder, grading assistance, family and colleague email drafting, and classroom management coaching, plus a saved style profile that teaches the tools how you write and a library of anything you choose to keep.
1. Information We Collect
1.1 Account Information
- Email address (used for sign-in, account recovery, and essential service notices)
- Password, if you set one (stored only as a cryptographic hash by our authentication provider; we never see or store your actual password)
- If you sign in with Google or Microsoft: your name, email address, and basic profile identifier as returned by that provider
- For passwordless sign-in: a short-lived record that maps our one-time sign-in link to an authentication token, single-use and expiring after one hour.
1.2 Saved Style Profile, Presets, and Library
The tools work better when they know how you teach and how you write. Anything you choose to save in Style and context (your teaching context and samples of your grading, classroom, email, and quiz writing) is stored with your account, and per-tool presets you save are stored the same way. Everything in this section passes through the automated privacy filter described in Section 3 before it is stored, so stored samples contain labels instead of names. Your name, role, school, and phone in the "About you" section are account information: they are used to sign your drafts and are never sent to the model.
You can also save artifacts to your library: a quiz, a grading draft, an email draft, or a classroom plan, each with a name, a folder, and tags you choose. Saved items are stored with your account so they follow you across devices. Library copies are always the label form: grading and email drafts saved to the library contain labels like Student 1, never your students' names, and the save dialog says so in plain language. Deleting a saved item deletes it for good.
1.3 Support Messages
If you use the support form, your email address and message are delivered to the founder by email so he can answer. Support messages are not stored in a database or ticket system.
1.4 Technical Information
Like most web services, our hosting and infrastructure providers may temporarily process standard technical data such as IP addresses, browser type, and request logs for security, abuse prevention, and operational purposes. We do not use this data for advertising or profiling.
2. Information We Do NOT Collect
The Service is designed so that the following never touches our database:
- Generated artifacts you do not save. Quizzes, grading drafts, email drafts, and classroom plans return to your browser. They are written to our database only when you choose to save them to your library, and library copies are the label form, never reconciled names. Work in progress lives in your browser's local storage so a refresh does not cost it.
- Student names or identifiers in your content. Before anything you type is sent to the model, an automated filter swaps every person's name for a label (Student 1, Adult 1) and removes emails, phone numbers, ID numbers, and addresses. The name-to-label key lives only in your browser tab and is never transmitted or stored.
- Student education records. We do not request, require, or store student identifiers, education records, IEP details, or any student personally identifiable information. The Service is designed to function fully without any student data.
- Payment information. The Service is currently free, and we do not collect payment details. If paid plans are ever introduced, this policy and the Terms of Service will be updated before any payment information is collected.
- Advertising profiles built from your work. Nothing you type, generate, or save is sold or used for advertising. We do share limited website usage data with our advertising measurement and product analytics providers, as described in Section 6. Session recordings mask everything you type, and the name swap lists are excluded from recordings entirely.
3. How Generation Works
When you ask a tool to write something, your input (for example a topic, pasted source material, student work, a rubric, a message you received, or a classroom situation) first passes through our automated privacy filter, which swaps names for labels and removes contact details and IDs. The scrubbed input is then sent over an encrypted connection to our large language model provider solely to generate the response. Under our configuration and their API terms, inputs are not used to train models and are not retained by the provider beyond transient processing and short-lived abuse-prevention logs.
The generated result comes back to your browser. We do not store it unless you choose to save it to your library. Grading drafts and email drafts show your own names on screen because your browser swaps the labels back using the name key that never left the tab; the model itself only ever saw labels. Library copies are the label form, so a saved draft on our servers never holds a student's name.
4. How We Use Information
We use the limited information we hold only to:
- Authenticate you and maintain your account
- Save and sync the style profile, presets, and library items you choose to save
- Send essential service communications (security and account notices, material changes to these policies)
- Prevent fraud, abuse, and security incidents
- Measure the performance of our own advertising (Section 6)
- Analyze and improve the Service (usage analytics and session recordings, Section 6)
- Comply with legal obligations
We do not sell personal information. We do not rent personal information. We do not build advertising or behavioral profiles of teachers or students, and your content is never used for advertising.
5. Student Privacy: FERPA, COPPA, and State Laws
5.1 FERPA
The Family Educational Rights and Privacy Act (20 U.S.C. § 1232g) governs how schools share education records with vendors. The Service is designed so that schools and teachers can use it without disclosing any FERPA-protected records to us: we do not request, receive, or store education records or student personally identifiable information. If a user nevertheless types student-identifying information, the automated filter swaps names for labels and removes contact details and IDs before that input is used, as described in Section 3. Districts may request our standard Data Processing Addendum at legal@lessonplanningforteachers.com.
5.2 COPPA
The Service is directed to educators, not children. Only adults may create accounts, students never log in, and children never interact with the AI system. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us at privacy@lessonplanningforteachers.com and we will delete it.
5.3 State student privacy laws
Our practices align with state student privacy statutes modeled on SOPIPA (including California SOPIPA, New York Education Law § 2-d, and similar laws): no sale of student data, no targeted advertising, no non-educational profiling, and no retention of student information. Because stored content contains labels instead of student names, most obligations these laws impose on vendors are satisfied by architecture rather than by policy alone.
6. Third-Party Service Providers (Subprocessors)
We work with a small number of service providers in the categories below. Each receives only the data its role requires, under contract, and nothing more.
| Service category | Data they handle |
|---|---|
| Authentication and database hosting | Account email, hashed credentials, saved style profile and presets (name-scrubbed), passwordless sign-in link records |
| AI model inference | Scrubbed tool inputs (labels, no names), processed transiently; not used for model training |
| Application hosting | Standard technical request data |
| Email delivery | Sign-in links and support messages sent by email |
| Optional sign-in providers | Basic profile information you authorize during sign-in |
| Advertising measurement | Page visits and sign-up events on our website, with standard cookie and device identifiers |
| Product analytics and session replay | Page views, clicks, and screen recordings of product use; every input is masked and the name swap lists are excluded |
Schools and districts can request the current named subprocessor list as part of a Data Processing Addendum at legal@lessonplanningforteachers.com.
We may also disclose information if required by law, regulation, or valid legal process, or to protect the rights, safety, and security of the Service and its users.
7. Cookies
We use strictly necessary cookies (the authentication session cookies that keep you signed in) plus the two measurement tools below.
An advertising measurement pixel, provided by a social media advertising platform. The pixel sets its own cookies and processes page-visit and account-signup events on our website. We use it to measure our own advertising. It does not receive your drafts, notes, student work, or anything you type into the tools. You can block it with any standard tracker blocker or through the platform’s ad preferences, and the Service works exactly the same without it.
A product analytics and session replay tool. It records pages visited, features used, and recordings of product use so we can analyze and improve the Service. Recordings mask everything you type, the name swap lists are excluded from recordings entirely, and no draft content is ever captured. These events travel through a domain we operate, and you can block them with any standard tracker blocker; the Service works exactly the same without it.
8. Data Retention
| Data | Retention |
|---|---|
| Generated quizzes, grading drafts, emails, and classroom plans | Never stored unless you save them to your library. Unsaved work exists only in your browser. |
| Saved library items (name-scrubbed) | Until you delete the item or your account. |
| Saved style profile and presets (name-scrubbed) | Until you change them or delete your account. |
| Account information (email, hashed password) | Until you delete your account. |
| Passwordless sign-in link records | Single-use; expire after one hour and are marked used when consumed. |
| Support messages | Held in the founder’s email inbox so he can answer; no database copy exists. |
| Analytics events and session recordings | Held by our analytics provider under our retention settings; recordings roll off automatically after a short retention period. Email us to delete your analytics profile sooner. |
9. Your Rights and Choices
Depending on your jurisdiction (including under GDPR, UK GDPR, CCPA/CPRA, and similar laws), you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. Because we hold so little data, most requests are simple:
- Access or export: email us and we will provide your account record within 30 days.
- Correction: update your saved style profile in the app, or contact us to correct account information.
- Deletion: email privacy@lessonplanningforteachers.com to delete your account. Deletion removes your email, credentials, saved style profile and presets, and your saved library. Anything you did not save was never stored.
We do not sell personal information, and we have not sold personal information in the preceding 12 months. The measurement tools described in Section 7 share limited usage data with our advertising and analytics providers; you can opt out of both at any time with a standard tracker blocker, and your drafts are never part of ad targeting.
10. Security
We use encryption in transit (TLS), hashed credential storage, row-level security on our database, and least-privilege access controls. Our primary security control, however, is architectural: names are scrubbed from content before it is sent, unsaved work is never stored, and you can delete anything you have saved at any time. No method of transmission or storage is 100% secure, but we have minimized what exists to attack.
11. International Users
The Service is operated from the United States and is intended for US educators. If you access it from elsewhere, you understand that your limited account information will be processed in the United States.
12. Changes to This Policy
If we make material changes, we will notify you by email or a prominent notice in the Service at least 14 days before the change takes effect. We will never retroactively weaken the privacy commitments that applied to content you saved before a policy change.
13. Contact
Novastone AI LLC
Email: privacy@lessonplanningforteachers.com
Website: lessonplanningforteachers.com
For district procurement and Data Processing Addendum requests: legal@lessonplanningforteachers.com