Legal

Privacy Policy

Last updated: March 5, 2026

Overview

TradeProof ("we," "us," or "our") is a gradebook and student management tool designed for Ontario trades teachers. We are committed to protecting the privacy of teachers and their students. This Privacy Policy explains what data we collect, how we use it, and how we protect it.

Our Privacy Model

TradeProof is built on a fundamental principle: student data never touches our servers.

All student personally identifiable information (PII) — including names, student numbers, email addresses, grades, and attendance records — is stored exclusively in the teacher's own Google Spreadsheet within their school board's Google Workspace. This means student data remains under the control of the school board at all times, subject to existing board policies and data governance agreements.

What We Store on Our Servers

Our server-side database stores only the following non-PII information:

  • Teacher account information — your name, email address, and profile picture as provided by Google sign-in
  • Encrypted OAuth tokens — used to access your Google Spreadsheet and Google Classroom on your behalf
  • Application settings — your preferences, course templates, mark set configurations, and other structural data that does not contain student PII
  • AI-generated report card comment banks — template comments that do not contain student-identifying information

What We Access but Do Not Store

To provide our services, we access the following data through Google APIs. This data is read in real time and is never persisted on our servers:

  • Student names, email addresses, and student numbers from Google Classroom rosters
  • Assignment names and grades from Google Classroom
  • Grade and attendance data from your Google Spreadsheet

Google API Usage

TradeProof uses the following Google API scopes:

  • Google Sheets API — to read and write your gradebook spreadsheet
  • Google Classroom API (read-only) — to import courses, rosters, and assignments
  • Google User Info — to identify you during sign-in

We request only the minimum scopes necessary to provide our services. We do not access your Gmail, Google Drive files (other than the specific spreadsheet we create), or any other Google services.

AI Report Card Comments

The AI comment generation feature does not send any student information to external services. Only assignment names and grade ranges are sent to Anthropic's API to generate report card comment templates. No student names, student numbers, grades, or any other identifying information is included in these requests. Anthropic does not use API inputs for model training. The generated comments are stored in our database as reusable templates.

Data Retention

Your account settings and course templates are retained as long as your account is active. Student data in your Google Spreadsheet is governed by your school board's data retention policies — we have no control over and do not manage that data. If you wish to delete your TradeProof account and all associated server-side data, you may contact us and we will remove your records within 30 days.

Data Security

OAuth refresh tokens are encrypted at rest. All communication between your browser and our servers uses HTTPS/TLS encryption. We do not share, sell, or provide access to any data — teacher or student — to third parties, except as required to provide the service (Google APIs, Anthropic API for AI comments).

Children's Privacy

TradeProof is a tool for teachers, not students. Students do not create accounts on TradeProof. Any student data accessed through the platform is managed by the teacher within their school board's Google Workspace and is never stored on our servers.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the "Last updated" date at the top of this page. Continued use of TradeProof after changes constitutes acceptance of the revised policy.

Contact

If you have questions about this Privacy Policy or wish to request deletion of your data, please contact us at [email protected].