Privacy Policy

Effective August 23, 2026

AristAI ("we") provides an accessible video platform to universities and colleges ("your school"). This policy explains what we collect when you use it, why, and who can see it. The short version: your school owns its content and records; we process them to run the service, and we do not sell personal information. Not anyone's, not ever.

What We Collect

  • Account information. Your name, school email address, and role (student, instructor, administrator), created by you at sign-up, by your school, or by your sign-in provider (Google, if your school enables it).
  • Content. Videos your school uploads or records, and the captions, transcripts, chapters and audio descriptions derived from them.
  • Viewing activity. Which recordings you watch and how far, quiz responses where a course uses them, and questions you ask the library assistant. Instructors and school administrators see this the way a gradebook is seen: scoped to their own courses and school.
  • Technical logs. IP address, browser type, and request logs kept for security and reliability.

What We Do With It

  • Run the service: sign-in, playback, search, captions.
  • Generate accessibility artifacts (captions, transcripts, audio description): these can involve sending audio, and where enabled slides, to the AI providers listed below.
  • Show your school its own usage and accessibility coverage.
  • Secure the service: audit trails, abuse and fraud prevention.

We do not sell personal information, we do not use school content or student data to advertise, and we do not train foundation models on your school's content.

FERPA

Where your school is subject to FERPA, video viewing records and quiz responses may be education records. We process them as a school official with a legitimate educational interest, under your school's direction and its agreement with us. Requests to inspect, correct, or delete education records go to your school, which controls them; we act on the school's instructions.

Who Else Touches the Data (Subprocessors)

  • Amazon Web Services: hosting, storage, and sign-in (Amazon Cognito).
  • Vercel: serving the web application.
  • Google: only if you sign in with Google, or where your school's caption review uses Google's AI services.
  • Speech-recognition and AI providers configured by the deployment (for captions, audio description, and library Q&A). Media is sent for processing, not for the provider's own use.

Cookies

One session cookie, set when you sign in, HttpOnly, expiring after 12 hours. No advertising or cross-site tracking cookies. Player preferences (caption style, playback speed) stay in your browser.

Retention and Deletion

Content and viewing records are kept for the retention period your school configures (395 days by default), then deleted. When your school's agreement with us ends, we delete or return its data. You can ask your school to remove your account; disabling it takes effect immediately across the service.

Security

Traffic is encrypted in transit; video segments are encrypted and served only to authenticated viewers; permission changes are written to an append-only audit trail; access inside AristAI is limited to operating the service.

Changes and Contact

If this policy changes materially we will tell your school before the change takes effect, and update the date above. Questions: support@aristai.io.