Privacy Policy
[Registered legal entity name] operates Better-learn. This describes what the service stores, why it stores it, and who else sees it.
What is collected
- Account — your GitHub numeric id and login, and your name and email where your GitHub profile makes them available. Sign-in is through GitHub; no password is ever collected or stored.
- Classroom data — organizations, classrooms, assignments and their grading configuration, enrolments, and invite links.
- Grading data — the full name of each student repository, commit identifiers, run status, duration, score, and the output of the test command. Test output is truncated before storage.
- Billing — plan, entitlement period, and payment references returned by the payment provider. Card details are handled entirely by the payment provider and never reach our servers.
- Operational logs — request and job outcomes used to diagnose failures. Credentials are stripped before anything is written or forwarded.
Why
To run grading and show its results to the people entitled to see them, to enforce plan limits, to take payment, and to keep the service working. It is not used for advertising, and it is not sold.
Who can see what
- A student sees their own repository and their own runs.
- A teacher of a classroom sees the roster for its assignments: each enrolled student's name and GitHub login, their repository, run status, scores and grading output.
- Nobody outside an organization sees that organization's data.
Processors
The service runs on infrastructure operated by third parties and shares with them only what is needed: application hosting; a managed PostgreSQL database; GitHub, for repository creation, access and check runs; a sandbox provider, which receives repository contents in order to run the tests; a payment provider, for checkout and subscriptions; and, when enabled by a teacher, a model provider that receives failing test output in order to explain it. Assistive explanations are optional and can be left off per assignment.
Retention
Classroom and grading data is retained while the organization exists. Deleting a classroom or an organization removes its assignments, repositories records and runs. Repositories created on GitHub are not deleted by that action — they belong to your GitHub organization and are yours to remove.
Your rights
You can ask for a copy of the personal data held about you, ask for it to be corrected, or ask for your account and its data to be deleted. Write to [support@yourdomain]. Where a teacher holds data about students, that teacher is responsible for it and we act on their instructions.
Security
Sessions use signed, HTTP-only cookies. Webhook traffic is verified by signature. Credentials used for grading are passed to the sandbox in a way that student-supplied commands cannot read, and each sandbox is destroyed after its run. No system is perfectly secure; report anything you find to the address above.
Children
The service is used through GitHub accounts and is intended for use by institutions and their students under the institution's own policies. It is not directed at children below the age at which GitHub permits an account.
Contact
[Registered legal entity name], [Registered address, city, state, PIN], India. [support@yourdomain].