Privacy Policy

Last updated: 9/9/2025

This Privacy Policy describes how ThoughtAmp, operated by Diversify Core, LLC(“we,” “us,” or “our”), collects, uses, and protects information when you use our platform. We practice data minimization. As personally identifiable information (PII), we retain only the user’s email address for authentication and course enrollment mapping.

1. Information We Collect

Email address (account authentication and enrollment mapping)
Conversation content (student–AI and instructor–AI chats) and related prompts
Usage metadata (timestamps, prompt usage, event logs, device/browser info)

2. How We Use Information

Provide and secure the platform, authenticate users, and support course operations
Enable instructors and authorized staff to review conversations for courses they teach/administer
Improve, debug, and analyze the functionality and security of ThoughtAmp
Process chat content with third-party AI providers to generate responses/insights; we send chat text and internal pseudonymous IDs only—never student emails or names
Store data with trusted providers (e.g., Supabase, Netlify) under encryption and access controls
Use, license, or share de-identified or aggregated data for research, analytics, product development, and commercial purposes

3. What We Do Not Do

We do not sell personal information to third-party marketers
We do not transmit student emails or names to AI model providers
We do not track you across other websites or apps

4. Education Records; Institutional Control

Institutions control education records. We act as a “school official” with a legitimate educational interest under an Institutional Agreement. We handle records only to provide, secure, and improve the service, and as required by law. Institutions may request exports or deletion of records consistent with policy and contract.

5. De-identified and Aggregated Data

We may use, share, license, or sell data that has been de-identified and/or aggregated such that it is not reasonably capable of being linked to an identifiable individual. We will not attempt to re-identify de-identified data and require recipients not to attempt re-identification.

6. Third-Party Providers and AI Processing

We use third-party providers for hosting, storage, analytics, and AI processing. When processing chat content with AI, we transmit only pseudonymous IDs and chat text. Providers are contractually limited to using data solely to provide services to us, not for advertising or unrelated purposes. A list of key subprocessors is available upon request.

7. Access by Instructors and ThoughtAmp Personnel

Instructors and authorized staff may access full conversation histories for courses they teach or administer. ThoughtAmp personnel may access records only as necessary to operate, secure, or support the service; such access is limited, role-based, and logged.

8. Data Retention and Deletion

We retain identifiable records for the duration of the institutional relationship or as required by agreement or law, after which we delete or de-identify them. Institutions or users may request earlier deletion where permitted by law and contract. We aim to fulfill verified deletion requests promptly.

9. Security

We implement technical and organizational measures designed to protect information, including TLS in transit, encryption at rest where supported, least-privilege access, Row-Level Security (RLS) in Postgres, and logging. No system is 100% secure. You use ThoughtAmp at your own risk, and we encourage strong credential hygiene and institutional SSO.

10. Children and Student Users

ThoughtAmp is intended for use in educational settings. Where minors are involved, institutions are responsible for obtaining any required consents and for configuring accounts and data access consistent with applicable law (e.g., FERPA, COPPA as applicable).

11. Your Choices and Rights

You may request access to or deletion of your data (subject to institutional policies and legal requirements) by contacting david@thoughtamp.com. Where applicable law grants additional rights, we will honor verified requests consistent with that law and our role as a school official/service provider.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on the site. Your continued use of ThoughtAmp after changes take effect constitutes acceptance of the revised Policy.