Privacy Policy

How Baya Data and AI LLC handles personal information, including student education records.

Last updated: September 10, 2026

1. Who we are

Baya Data and AI LLC is a Washington limited liability company based in Bothell, Washington, United States. We operate Smart Learning System, a course-grounded AI learning platform delivered to institutions through their learning management system. Contact: admin@bayadataai.com.

2. Our role

When an institution licenses Smart Learning System, the institution controls the student data processed through the service. We act on the institution's behalf and under its instructions. To the extent we process student education records under the Family Educational Rights and Privacy Act (FERPA, 20 U.S.C. § 1232g; 34 CFR Part 99), we are designated a school official with a legitimate educational interest, acting under the institution's direct control with respect to the use and maintenance of those records.

Students and instructors with questions about their own records should contact their institution first. We will support the institution in responding.

3. Information we process

  • Identity and roster data from the LMS. Name, institutional email address, LMS user identifier, course and section enrollment, and role (student, instructor, teaching assistant). This is supplied by the institution through the LTI 1.3 integration.
  • Course material. Lecture notes, readings, slides, and other content the instructor uploads for the course.
  • Usage and interaction data. Questions asked of the assistant, its responses, study activity such as flashcard review, and progress information.
  • Technical data. Log data such as IP address, browser type, timestamps, and error diagnostics, used to operate and secure the service.
  • Business contact data. If you email us or submit a form, the contact details and message you provide.

4. How we use it

We use this information solely to provide, secure, support, and improve the service for the institution. Specifically: to authenticate users, to ground answers in the correct course material, to show instructors aggregate patterns of where a cohort is struggling, to provide support, and to maintain reliability and security.

5. What we do not do

  • We do not sell student data.
  • We do not use student data for advertising or marketing.
  • We do not build non-educational profiles of students.
  • We do not use institutional student data to train third-party foundation models.

6. Service providers

We use a small number of subprocessors to run the service, including cloud hosting and AI model providers, and Stripe for payment processing. Subprocessors are bound by obligations no less protective than those we owe the institution. A current subprocessor list is available to licensed institutions and to prospective institutional reviewers on request.

7. Retention, return, and deletion

We retain institutional data for as long as the institution's agreement is in effect. Within sixty (60) days after termination, or upon the institution's written request, we delete or return the institution's student data, except where retention is required by law.

8. Security

We maintain administrative, technical, and physical safeguards consistent with our 1EdTech Data Privacy certification, and we will notify the institution without undue delay of any confirmed breach affecting its student data. See our Security Overview.

9. Your rights

Depending on your location and your relationship with us, you may have rights to access, correct, delete, or restrict processing of your personal information. For data processed on behalf of an institution, please direct requests to that institution; we will assist them in fulfilling the request. For data you provide to us directly, such as a contact form message, write to admin@bayadataai.com.

10. Children

Smart Learning System is designed for higher education and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

11. International transfers

We operate from the United States and process data in the United States. If you access the service from outside the United States, you understand that your information will be processed there.

12. Changes

We may update this policy. Material changes affecting licensed institutions will be communicated to those institutions. The "last updated" date above reflects the current version.

13. Contact

Baya Data and AI LLC, Bothell, WA, United States — admin@bayadataai.com