Privacy Policy

Information we process

Account information includes your email address, optional teacher name, authentication identifiers and account activity. Teaching data includes saved answer-sheet designs, exam details, answer keys, marks, uploaded sheet images, student IDs, selected answers, review corrections and scores. A sheet may also contain handwritten names or other details you choose to include.

Payment records can include the credit pack, amount, currency, transaction identifiers and payment status. Service providers may process technical information such as IP addresses, request logs and security events to operate and protect the service. Avoid adding sensitive information that is not needed for grading.

Why we use it

We use this information to authenticate accounts, save designs and exams, recognize marks, detect identity conflicts, calculate and review scores, export results, maintain credit balances, handle purchases and provide support. We also use limited operational information to prevent abuse, investigate failures and comply with legal obligations.

We do not sell student information or use answer sheets for targeted advertising. We do not use uploaded student work to train general-purpose AI models. Automated recognition assists teachers; teachers remain responsible for final grades.

Service providers and access

Supabase supports account authentication and the application database. Our processing service recognizes sheet images. Production image storage can use Cloudflare R2; local development uses local storage. Stripe handles checkout when payments are enabled. Hosting, email and infrastructure providers process information needed to deliver their services.

Information may be processed outside your province or country depending on the production providers and their configured regions, and may be subject to local lawful access requirements. We do not promise Canadian-only storage. Schools should confirm that the service and provider arrangements meet their requirements before uploading student records.

Workspace access is restricted to the authenticated account through access controls. We may access information when needed for support, security, legal compliance or service operation. We may disclose information when legally required or as part of a business transfer with appropriate protections and notice where required.

Camera and file uploads

Camera access starts only after you choose to start it and grant browser permission. Live frames are checked in your browser; captured sheet images are uploaded for processing. We do not upload a continuous camera recording. Stop releases the camera. Optional voice prompts use your device’s speech services; Nuvo Grade does not need microphone access for scanning.

Multi-page PDFs are rendered into page images in your browser; each submitted page is processed as a sheet. The original PDF is not uploaded as a document by this workflow. Selected files may remain in memory while the batch is open so failed sheets can be retried.

Optional website analytics

When configured, Google Analytics 4 helps us understand visits to public pages only after you opt in. It may process page views, browser and device information, analytics cookie identifiers and connection information under Google’s privacy practices. We do not send student IDs, answers, scores, account email addresses, teacher workspace activity or sign-in URLs to Analytics. Advertising signals are disabled. Google may process analytics information outside Canada. You can decline or withdraw consent through Cookie settings without affecting grading features.

Storage and retention

Source and processed scan images are scheduled for removal once they are more than seven days old and the processing job has finished. Cleanup runs periodically and failed deletions are retried. Image-based previews and reprocessing are unavailable after removal. Detected answers, scores, exam records and account records may remain beyond image expiry so you can use your workspace.

Deleting an exam hides it from your workspace and blocks its grading access; some processing, credit and audit records remain internally. Account deletion and broader data-removal requests are handled through hello@nuvohubs.com. Legal, financial, security and backup records may need to be retained after a request. We will explain applicable limits when responding; deleting an exam is not a promise of immediate erasure from all systems.

Saved settings, camera preferences and unfinished review drafts may be stored on your device. Local drafts clear after a successful save; other local data can remain until you remove it or clear site storage. On a shared device, sign out and remove local drafts and settings when you finish. Clearing browser storage can permanently remove unsaved corrections.

Your choices and requests

You can update your name and password in Account settings, download scores as CSV and manage exams in your workspace. Contact hello@nuvohubs.com to request access, correction, account closure or deletion, or to raise a privacy concern. We may verify your identity before acting.

Students or guardians should normally contact the teacher or institution responsible for the exam. We can assist the account holder with an authorized request. We use reasonable safeguards, but no service can guarantee absolute security. If our practices materially change, we will update this policy and provide notice where appropriate.