Privacy Policy

Our Commitment to Privacy

ProvenanceAI was founded on the belief that transparency isn't optional—it's foundational. This extends to how we handle your data.

This Privacy Policy explains how Exact Rush Multimedia Publishing ("we," "us," or "ProvenanceAI") collects, uses, and protects information when you use the ProvenanceAI platform at provenanceai.app.

1. Information We Collect

1.1 Educational Records (Students and Instructors)

When you use ProvenanceAI for coursework, we collect:

1.2 Technical Information

We automatically collect:

• Browser type and version
• Device information
• IP address and location (city/country level)
• Log data (access times, pages viewed, errors)
• ProvenanceAI browser extension activity (when installed)

1.3 AI Interaction Data

When you use ProvenanceAI's AI analysis features:

• Text submitted for analysis
• AI model responses
• Anonymized patterns for system improvement

2. How We Use Your Information

2.1 Primary Educational Purposes

We use student educational records to:

• Track the provenance of academic work
• Calculate Human Distance, Leverage Distance, and Well-Being metrics
• Provide feedback to students and instructors
• Verify academic integrity through process visibility
• Generate analytics for institutional reporting

2.2 Service Improvement

We use aggregated, de-identified data to improve algorithms, identify usage patterns, and conduct educational research (with institutional approval).

3. AI Analysis and Third-Party Services

3.1 Large Language Model Processing

ProvenanceAI uses AI services from OpenAI, Google (Gemini), and Anthropic (Claude). Personally identifiable information (PII) is removed or tokenized before processing whenever feasible. Our agreements explicitly prohibit using student submissions to train their public models.

3.2 Other Third-Party Services

We use Vercel and AWS for hosting (US regions). All third-party services are bound by Data Processing Agreements requiring FERPA compliance.

5. Data Retention

Student educational records are retained for the duration of the academic term or according to institutional policy (typically 1-7 years). Aggregated, de-identified research data may be retained indefinitely as it cannot be re-identified.

6. Data Security

We implement industry-standard security measures including TLS 1.3 encryption in transit, AES-256 encryption at rest, and regular security audits. If we detect a breach affecting student records, we notify affected institutions within 72 hours.