← Back to Home

Privacy Policy

Last Updated: June 2026

1. Introduction

NeuralFortify SaaS ("we", "us") is a browser-based learning platform for cybersecurity and AI-security education. We are committed to protecting student data and complying with applicable education-privacy laws, including FERPA, COPPA, GDPR, and CCPA.

2. Information We Collect

We collect only what is needed to run the platform: teacher and administrator names and emails; student names and usernames (students sign in by username — no student email address is required); and learning data such as level progress, scores, assignment submissions, and certificates. This information is provided and managed by authorized school personnel.

3. Legal Basis and Consent

We rely on the consent of schools and teachers, recorded through our Beta Waiver and per-class parental-consent attestation. Schools and teachers remain responsible for obtaining any parental consent required under COPPA/FERPA before adding students.

4. Where Your Data Lives

Student and account data is stored in a managed PostgreSQL database with row-level isolation so each classroom's data is walled off from every other. The website itself is served as static files by our hosting provider. Transactional email (for example, account or notification messages) is delivered through a third-party email provider that processes only the recipient address and message content needed to send the email.

5. Security

Data is encrypted in transit and at rest. Our database and hosting providers maintain independent SOC 2 Type 2 and ISO 27001 certifications. Access to administrative functions is restricted by role, and privileged operations run server-side and never expose secret keys to the browser.

6. Data Sharing & Subprocessors

We do not sell student data. We share data only with the subprocessors required to operate the service: our database provider, our static-hosting provider, and our transactional email provider — each under its respective data-processing agreement.

7. Your Rights

Schools and parents may request access to, correction of, or deletion of student data by contacting us. Deleting a classroom or account removes its associated student data.

For questions: hello@neuralfortifylms.com