Introduction
Collage AI, Inc. (“Collage AI,” “Company,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, disclose, retain, and safeguard personal information when you access or use our websites, software applications, APIs, and educational technology services, including our artificial intelligence-powered teaching and learning platform (collectively, the “Services”).
Please read this Privacy Policy carefully. By using the Services, you acknowledge that you have read and understood this Privacy Policy.
Scope of This Privacy Policy
This Privacy Policy applies to personal information we collect:
- Directly from you;
- Automatically through your use of the Services;
- From third-party integrations you authorize;
- From service providers and business partners; and
- From educational institutions or organizations that provide you access to the Services.
This Privacy Policy does not apply to third-party websites or services that are not operated by us.
Personal Information We Collect
3.1 Information You Provide to Us
We may collect the following categories of information:
- Full name;
- Email address;
- Username and password;
- Organization or school affiliation;
- Billing and payment information (processed by third-party payment processors);
- Uploaded files, documents, assignments, and educational materials;
- Prompts, instructions, and other user inputs;
- Generated educational outputs;
- Customer support communications; and
- Any other information you choose to provide.
3.2 Information Collected Automatically
When you use the Services, we may automatically collect:
- IP address;
- Device identifiers;
- Browser type and version;
- Operating system;
- Referring URLs;
- Usage logs;
- Clickstream data;
- Session information;
- Crash reports; and
- Cookie and analytics data.
3.3 Information from Third-Party Integrations
If you connect third-party services such as Google Workspace, we may collect only the information necessary to provide the functionality you request.
3.4 Information from Educational Institutions
If you access the Services through a school, university, or other organization, we may receive account and enrollment information from that institution.
How We Use Personal Information
We may use personal information to:
- Create and manage user accounts;
- Provide and operate the Services;
- Generate study guides, quizzes, lesson plans, and other educational materials;
- Authenticate users;
- Process payments and subscriptions;
- Respond to inquiries and support requests;
- Personalize user experiences;
- Monitor and analyze usage;
- Improve and develop the Services and related technologies;
- Detect fraud, abuse, and security incidents;
- Enforce our agreements;
- Comply with legal obligations; and
- Protect our rights and the rights of others.
Artificial Intelligence and Automated Processing
The Services use artificial intelligence, machine learning, and large language models to analyze user content and generate educational materials.
To provide the Services, we may share user inputs and uploaded content with trusted third-party AI providers.
We may also use user content to improve and develop our own services and related technologies, provided such use is conducted in accordance with applicable law and does not involve selling personal information.
Unless expressly disclosed otherwise and where required by law, we do not use user content to train generalized third-party AI models for the benefit of unrelated customers. For minor users, we do not use their inputs or outputs for any AI model training purposes without explicit parental or guardian consent.
AI-generated outputs may contain inaccuracies, omissions, or biased information. Users are responsible for reviewing and validating outputs before relying on them.
Google API Services Data
If you authorize our Services to access Google APIs, including Google Workspace APIs, we use the data solely to provide the specific functionality you request, such as authentication or exporting materials to Google Forms.
Our use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.
We do not use Google Workspace API data to develop, improve, or train generalized artificial intelligence or machine learning models.
Legal Bases for Processing
Where applicable, we process personal information based on:
- Your consent;
- Performance of a contract with you;
- Our legitimate business interests;
- Compliance with legal obligations; and
- Protection of vital interests.
Where we rely on legitimate interests as a legal basis, we have assessed that our interests are not overridden by your fundamental rights and freedoms. You have the right to object to processing based on legitimate interests at any time by contacting info@collage-ai.com.
Data Retention
We retain personal information for as long as reasonably necessary to:
- Provide the Services;
- Maintain business records;
- Resolve disputes;
- Enforce agreements;
- Detect and prevent fraud; and
- Comply with legal obligations.
Retention periods vary depending on the nature of the information and the purposes for which it is used.
Data Security
We implement reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, or disclosure.
No security measure is infallible, and we cannot guarantee absolute security.
Data Breach Notification
In the event of a personal data breach, we will notify affected individuals and relevant regulatory authorities as required by applicable law:
- European Union / EEA: We will notify the relevant supervisory authority within 72 hours of becoming aware of a qualifying breach. We will notify affected individuals without undue delay where the breach is likely to result in a high risk to their rights and freedoms.
- United States: We will provide notice to affected individuals and, where required, state regulators in accordance with applicable state breach notification laws.
- Israel: We will notify the Israeli Privacy Protection Authority and affected individuals in accordance with the Protection of Privacy Law where a breach involves sensitive personal data.
International Data Transfers
We are based in the United States, and personal information may be transferred to and processed in the United States and other countries where our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction.
Your Privacy Rights
Depending on your location, you may have rights to:
- Access personal information;
- Correct inaccurate information;
- Delete personal information;
- Restrict processing;
- Object to processing;
- Receive a portable copy of information;
- Withdraw consent; and
- Lodge a complaint with a supervisory authority.
To exercise these rights, contact us at info@collage-ai.com.
U.S. State Privacy Rights
Residents of certain U.S. states, including California, Colorado, Connecticut, Virginia, and others, may have additional rights regarding their personal information. We will not discriminate against users for exercising privacy rights.
Children’s Privacy
15.1 United States — COPPA
We do not knowingly collect personal information from children under 13 without verifiable parental consent as required by the Children’s Online Privacy Protection Act (COPPA), 15 U.S.C. §§ 6501–6506. If we learn that personal information has been collected from a child under 13 without verifiable parental consent, we will delete such information promptly. Parents or guardians who believe their child’s data has been collected without proper consent should contact us at info@collage-ai.com.
15.2 European Union / EEA — GDPR Article 8
Where a user is under 16 years of age (or such lower age as may be applicable under national law of the relevant EU member state, which may be as low as 13), we will process personal data only with the consent of, or authorization by, the holder of parental responsibility over that user. If you believe your child’s data has been collected without proper consent, please contact info@collage-ai.com.
15.3 Israel — Minors Under 18
Under Israeli law, individuals under the age of 18 are minors. Where we are aware that a user is a minor under 18, we will seek the consent of a parent or legal guardian before processing their personal information, except where processing is strictly necessary to provide the Services pursuant to a school or institutional agreement. We do not use the personal information or content of minor users in Israel for AI model training purposes.
15.4 School and Institutional Access
Where the Services are accessed through a school or educational institution acting in loco parentis, we rely on that institution’s representation that it has obtained all necessary parental consents and authorizations required by applicable law.
Educational Records
Where Collage AI processes student education records on behalf of a school or educational institution, it does so as a “school official” with a “legitimate educational interest,” as those terms are used under the Family Educational Rights and Privacy Act (FERPA), 20 U.S.C. § 1232g. In such capacity, we:
- use student education records only for the purposes authorized by the applicable institution;
- do not re-disclose education records to third parties except as necessary to provide the Services and as permitted by FERPA and the applicable institutional agreement, including disclosures to authorized service providers and subprocessors subject to appropriate contractual and data protection obligations;
- maintain administrative, technical, and physical safeguards consistent with applicable law;
- notify the applicable institution of any breach or unauthorized disclosure of student records as soon as practicable; and
- make education records available to the applicable institution upon request within a reasonable time.
In the event of a conflict between this Privacy Policy and an institutional agreement regarding student data, the institutional agreement shall control.
Israeli Residents
If you are located in Israel, the following additional provisions apply:
(a) International Transfers. We may transfer personal information to countries outside Israel, including where our service providers and infrastructure providers are located. Where required by applicable Israeli law, we implement appropriate safeguards for such transfers in accordance with the Israeli Protection of Privacy Law and applicable regulations.
(b) Minors. Where our Services are provided to students through a school, university, or other educational institution, personal information may be processed on behalf of and pursuant to our agreement with that institution. Where consent of a parent or legal guardian is required under applicable law, we will obtain or rely on the institution to obtain such consent, as appropriate.
(c) Your Rights. Israeli residents may have rights to access and correct personal information about them in accordance with the Israeli Protection of Privacy Law. Requests may be submitted to info@collage-ai.com
Changes to This Privacy Policy
We may update this Privacy Policy periodically. The revised policy will be posted with an updated “Last Updated” date.
Where required by applicable law, we will notify you of material changes by email or by a prominent notice within the Services prior to the change becoming effective.