CurricuMind Grader — Privacy Policy
CurricuMind Grader is a Chrome extension for instructors. It helps create rubrics and draft AI-assisted feedback while reducing student personally identifiable information (PII) exposure.
Summary
- Student essays are scrubbed on your device (local NER / redaction) by default before any grading request is sent.
- By default, scrubbed submission text and instructor materials (assignment instructions, rubrics, grading options) are sent to the CurricuMind grading API. If you unredact placeholders or leave terms on the assignment preserve list, those plain-text values are included in the approved submission and sent to the API (and then to Anthropic).
- The mapping from placeholders (e.g.
[PERSON_1]) back to real names stays on your device and is not sent to the API. It is saved in Chrome storage with your in-progress grading so you can resume later, and you can delete it at any time. - We do not sell student or instructor data. We do not use student work to train models, and we do not opt CurricuMind’s Anthropic organization into Anthropic programs that share prompts or responses for model training or product improvement.
- We do not inject content scripts into LMS pages (e.g. Canvas) and do not read browsing history.
Data processed on your device
- Uploaded student files and pasted text
- PII detection / redaction (regex + on-device model bundled in the extension)
- Instructor review of redactions (including optional unredact) and preserve-list terms from the assignment
- Re-identification of AI output for instructor editing
- Assignment setup in Chrome storage (rubric, options, prompt preferences)
- A saved roster of your in-progress grading in Chrome storage, so work survives closing the side panel or restarting Chrome. Per assignment this includes file names, any student identifier you enter, the original and scrubbed submission text, the placeholder-to-name map, and AI score/feedback drafts. It stays on your device, is scoped to your signed-in account, and is only transmitted as part of grading requests you approve. Signing out deletes every saved roster; Settings → Clear student info deletes the current assignment's roster.
- Your credit balance is not stored in the extension. The side panel reads it from your CurricuMind account when it needs to display it
Data sent to CurricuMind services
When you approve a submission and run grading or rubric creation, the extension sends requests to the CurricuMind grading API (currently hosted on Microsoft Azure Container Apps). That API calls Anthropic’s API to generate rubric/score/feedback drafts. The published extension connects only to that hosted Azure API. The grading API handles submission content as request/response only — it does not retain student essays or feedback drafts, and it is not a gradebook archive.
Transmitted content may include:
- Approved student submission text (scrubbed by default; may include instructor-unredacted values and preserve-list terms in plain text)
- Assignment instructions and grading instructions (instructor-authored)
- Rubric JSON and scoring options you configure
Your CurricuMind account
Separately from grading content, we keep an account record for you in CurricuMind's database:
- Your user id and email address from our sign-in provider
- Your credit balance, plus a ledger of charges and refunds so billing is accurate and a failed grading run can be refunded. Each entry records the amount, the time, and which kind of request it covered — not student names or submission text
- Instructor-authored material you save: assignment titles and instructions, rubrics, grading options, model and annotation preferences, and any AI-proof redesign sessions
- Whether your account has administrator access
Student submissions and grades are not stored in this database; they stay on your device as described above. Account data persists until you ask us to delete your account.
Third parties
- Microsoft Azure — hosts the grading API and the public privacy / product web app
- Anthropic — large language model provider used by the grading API (subprocessor for model inference)
Their processing is also governed by their respective terms and privacy policies. For the Anthropic API organization CurricuMind uses for grading:
- We have executed Anthropic’s Business Associate Agreement (BAA) and enabled HIPAA readiness on the Anthropic organization that processes grading API requests. Eligible Messages API features used for grading (including prompt caching and structured outputs) run under that configuration.
- Under Anthropic’s retention defaults for a HIPAA-ready API organization, Inputs, Outputs, and other data from API requests are retained for up to 30 days and may be accessed by Anthropic for safety and security purposes, then deleted (subject to Anthropic’s documented exceptions, such as longer retention for flagged abuse content or legal requirements).
- We keep Anthropic user feedback sharing off, so thumbs-up/down style reports that would send the full prompt and response to Anthropic are not enabled for this organization.
- We do not join Anthropic programs that voluntarily share organization session or prompt data for model training or product development.
- Features that are unnecessary for grading and not used on the grading path (for example Batch API, Files API, code execution, web fetch, and managed agents) are left disabled or unused so approved submission text is not sent to those products.
Instructors and institutions should confirm their own policies before using AI tools with student work. Anthropic’s BAA covers Anthropic’s Eligible Services only; it does not replace any agreement you may need with CurricuMind or Microsoft Azure.
Student privacy, FERPA, and HIPAA
CurricuMind Grader is built for instructors and is intended to reduce unnecessary exposure of student PII. On-device scrubbing and limiting Anthropic organization sharing (no user-feedback or training opt-ins) are privacy-by-design measures; they do not by themselves make every use FERPA- or HIPAA-compliant.
Whether student submissions and feedback drafts are education records under FERPA, and whether use of this tool is permitted, depends on your institution’s policies and agreements. CurricuMind does not claim to be “FERPA certified.”
If your use involves protected health information (PHI) under HIPAA, you remain responsible for determining whether CurricuMind and its subprocessors are appropriate for that use, including any Business Associate arrangements required with CurricuMind and with Microsoft for Azure hosting. CurricuMind does not claim to be “HIPAA certified.” Do not paste PHI into Anthropic Console, Workbench, or support tickets.
Chrome permissions we request
| Permission | Why |
|---|---|
storage | Save assignment setup, prompt preferences, and your in-progress grading roster (including submission text) on your device |
sidePanel | Instructor UI |
offscreen | Run local PII model / WASM off the side panel |
Host access to api.curricumind.com | Send approved grading/rubric requests |
Host access to app.curricumind.com | Keep the side panel signed in with your CurricuMind session |
Host access to clerk.curricumind.com | Refresh your sign-in token |
Retention
- Extension storage: instructor setup until you clear it or uninstall
- Student submissions: saved in Chrome storage on your device as part of the in-progress grading roster, and kept until you sign out, clear student info in Settings, or uninstall. Signed-in identity and session tokens are held only for the browser session and cleared when Chrome closes.
- CurricuMind grading API: designed to be stateless (request/response); do not treat it as a gradebook archive
- Anthropic API (grading path): Inputs and Outputs are retained by Anthropic for up to 30 days under the HIPAA-ready organization defaults, then deleted, as described under Third parties. Anthropic’s Console/Workbench interfaces are separate from this API path and are not used to process live student submissions for the product.
Your choices
- You control when text is sent (approve before grade)
- You choose whether to unredact placeholders or keep preserve-list terms in the approved submission; the extension confirms before sending plain-text values that are not redacted
- You can delete saved student work at any time: Settings → Clear student info removes the current assignment's roster, and signing out removes every saved roster for your account
- Uninstalling the extension removes its local storage
Contact
Questions about this policy: adam.hendrickson@curricumind.com
Changes
We may update this policy as the product evolves. Material changes will update the “Last updated” date above.