1. Introduction
Dolly ("we," "our," or "us") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, share, and protect personal information when you use the Dolly platform.
This policy applies to:
- Teachers using Dolly to manage classes and assignments
- Students using Dolly for their coursework
- Parents/guardians of students under 18
- Visitors to our website
2. Information We Collect
When Creating an Account:
- Name (first and last)
- Email address
- Password (encrypted)
- Role (teacher or student)
- Age (for students, to determine appropriate consent flow)
- Teacher display name (for teachers)
When Using the Service:
- Educational content (assignments, submissions, grades, feedback)
- Communications within the platform
- Usage data (how you interact with the Service)
Technical Information:
- IP address
- Browser type and version
- Device type and operating system
- Pages visited and features used
3. How We Use Your Information
To Provide the Service:
- Create and manage your account
- Enable class and assignment management
- Facilitate communication between teachers and students
- Generate grades and feedback
- Provide AI-powered educational assistance
What We Will NOT Do:
- Send marketing emails to students
- Use student data for advertising
- Share data with third-party advertisers
4. How We Share Your Information
We will never sell student data or teacher data to third parties.
We Share Data Only:
- Within your classes (teacher and enrolled students)
- With your school administrators (if applicable)
- With trusted service providers (under strict data protection agreements)
- When required by law
5. Student Privacy Protections
FERPA Compliance (US)
For US educational institutions, we act as a "school official" with legitimate educational interests and comply with the Family Educational Rights and Privacy Act (FERPA).
COPPA Compliance (US Children Under 13)
We comply with the Children's Online Privacy Protection Act (COPPA). Parents have the right to review, delete, or refuse further collection of their child's information.
To exercise parental rights, contact: parents@godolly.ai
GDPR and UK GDPR Compliance
For users in the EU and UK, you have the following rights:
- Right to Access: Request a copy of your personal data
- Right to Rectification: Correct inaccurate data
- Right to Erasure: Request deletion of your data
- Right to Data Portability: Receive your data in a portable format
- Right to Object: Object to certain data processing
- Right to Lodge a Complaint: File a complaint with a supervisory authority
6. Data Security
We use industry-standard security measures to protect your data, including:
- Encryption of data in transit and at rest
- Regular security audits and assessments
- Access controls and authentication
- Employee training on data protection
7. Data Retention
We retain your data only as long as necessary to provide the Service and comply with legal obligations. When you delete your account, we will delete or anonymize your data within a reasonable timeframe, except where we are required by law to retain it.
8. Your Choices
- Access, update, or delete your account information through your account settings
- Control cookie preferences through your browser settings
- Opt out of optional communications
- Request a copy of your data
- Request deletion of your account
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. Continued use after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy or want to exercise your rights:
Email: privacy@godolly.ai
Data Protection Officer: dpo@godolly.ai
Parental Rights Requests: parents@godolly.ai