1. Purpose of this policy
This Privacy Policy explains how Sorsa collects, uses, stores and protects personal information. Sorsa is designed to support learning through digital resources, revision activities, progress tracking and teacher feedback.
2. Personal information we collect
We aim to collect only the information reasonably needed to provide the learning platform. This may include:
- student first name and last name
- student email address
- account login details managed through Supabase authentication
- course or subject access entitlements
- class enrolment records where a student joins a class
- student progress records, including resource completion and timestamps
- written responses submitted by students
- practice test attempts submitted by students
- teacher feedback on student responses and practice tests
- basic technical information needed to operate, secure and troubleshoot the platform
3. Information we avoid collecting
Sorsa is not intended to collect sensitive or unnecessary student information. Unless specifically required in the future, we do not intentionally collect student addresses, phone numbers, medical details, behaviour records, government identifiers, photos, or parent/guardian information.
4. Why we collect personal information
We collect personal information to:
- create and manage student, teacher and administrator accounts
- confirm access to purchased, licensed, trial or teacher-granted resources
- display enrolled subjects and available learning tools
- record progress through resources and revision activities
- allow students to submit written responses
- allow students to complete and submit practice tests
- allow teachers or authorised administrators to provide feedback
- support account recovery, password reset and platform security
- improve the reliability, usability and safety of the platform
5. Who can access personal information
Students can access their own account information, progress, submitted responses, practice tests and teacher feedback. Authorised teachers or platform administrators may access student information where needed to manage access, monitor learning progress, review submitted work and provide feedback.
We do not sell student personal information to advertisers or data brokers.
6. Third-party services
Sorsa uses third-party services to operate securely and reliably. These may include Supabase for authentication, database and access management, and Vercel for hosting and deployment. These services process information only as needed to provide the platform.
7. Data security
We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure. Security measures may include authentication, row-level database security, access controls, limited administrator permissions, secure hosting and password reset protections.
No online platform can guarantee absolute security. We continue to review and improve security as Sorsa develops.
8. Data retention
We aim to keep student information only for as long as reasonably needed to provide learning access, teacher feedback, account support, record keeping and platform security. In the future, we may delete or de-identify inactive account data, expired access records or old learning records where they are no longer required.
9. Access and correction
Students or account holders may request access to personal information held about them or ask for inaccurate information to be corrected. Requests should include enough information for us to identify the relevant account.
10. Data breaches
If we become aware of a data breach involving personal information, we will investigate and take steps to contain the issue. Where legally required, we will notify affected individuals and relevant authorities.
11. Contact
For privacy questions, access requests, correction requests or concerns about personal information, contact the Sorsa owner or administrator using the contact details provided by the platform.