Privacy Notice

How EduLens handles data for higher education institutions, faculty, and students.

Version 1.1 · Effective January 2026

Scope

Zobel Solutions LLC (“Zobel Solutions,” “we,” “our,” or “us”) operates the EduLens platform (“EduLens” or the “Service”), an educational software service for higher education. This Privacy Notice explains what data EduLens processes, why it is processed, and the choices available to users and institutions.

This notice applies to EduLens web and mobile applications and related services used by participating institutions and their authorized users (students, faculty, and administrators).

Important: EduLens is provided to institutions under contract. Student and faculty data is processed solely at the direction of the educational institution for legitimate educational purposes.

Data We Process

EduLens processes data necessary to provide educational functionality, including:

Account & Identity

  • Account identifiers (e.g., name, email, institution-provided identifiers where available)
  • Authentication data from campus SSO (institution-managed, no passwords stored)

Academic Context

  • Institution and course context (e.g., course enrollments/roles, course metadata)
  • LMS integration data where configured by the institution

User-Provided Content

  • Reflections and learning interactions
  • AI chat conversations and messages
  • Faculty-created content (assignments, prompts, feedback)

Automatically Collected

  • Session identifiers and authentication events
  • IP address and User-Agent (for security and troubleshooting)
We do not use third-party advertising cookies, marketing tracking pixels, or analytics SDKs. We do not sell personal data.

How We Use Data

We use the information we collect exclusively for the following purposes:

  • Provide and operate the EduLens service for educational purposes
  • Support authorized workflows for students, faculty, and administrators
  • Power AI-assisted learning features when enabled by the institution
  • Maintain security, prevent abuse, and troubleshoot service issues
  • Generate audit logs and compliance records
  • Improve product quality and reliability (without selling personal data)
We do not use student data for advertising, marketing, or building user profiles for commercial purposes. We do not sell, rent, or trade personal data to any third party.

Cookies and Tracking

EduLens uses first-party cookies required for application security and functionality, including authentication session cookies and a CSRF token cookie. EduLens does not use third-party advertising cookies or marketing tracking pixels.

AI Features

When AI features are enabled by an institution, user-provided content may be processed by a configured third-party AI provider to generate responses or assistance.

  1. 1EduLens does not train or fine-tune AI models on institutional data.
  2. 2AI provider handling (including retention and processing location) is governed by the provider’s contractual terms and the institution’s selected configuration.
  3. 3Institutions may configure BYOK (Bring Your Own Key) or gateway options where applicable.
  4. 4AI interactions are logged for institutional review and transparency.

Sharing and Subprocessors

EduLens shares personal data only as necessary to operate the service or as required by law. We use the following third-party service providers:

ProviderPurposeData AccessedLocation
Render.comApplication hostingAll application data (encrypted)United States
Neon (PostgreSQL)Database hostingAll stored data (encrypted at rest)United States
VercelFrontend hosting & CDNStatic assets, edge routingUnited States
AI Provider (configurable)AI-assisted learning featuresUser-submitted prompts (when enabled)Per institution config

We do not share personal data with advertising networks or data brokers. All subprocessors are contractually bound to protect user data.

Security

We implement the following technical and organizational safeguards:

Encryption in Transit
TLS on all connections
Role-Based Access
Scoped permissions per user role
Campus SSO
Institution-managed authentication
Audit Logging
Structured logs for security events
Secret Encryption
App-layer encryption for LMS/SSO keys
Security Headers
HSTS, CSP, X-Frame-Options
CSRF Protection
Token-based cross-site request forgery defense
US Data Residency
All data stored in the United States

Retention and Deletion

EduLens retains personal data only as long as necessary to provide the service and meet contractual and legal requirements. Institutions may request export and deletion of institutional data in accordance with applicable agreements and documented procedures (subject to legal holds where applicable).

Data TypeDefault RetentionNotes
Course data & reflectionsDuration of course + grace periodConfigurable by institution
AI chat conversationsDuration of course enrollmentFaculty-visible per course policy
Audit & security logs7 yearsFERPA compliance requirement
Account informationActive enrollment + 1 yearOperational necessity
SSO/LMS credentialsWhile institution is activeEncrypted at rest

FERPA Compliance

EduLens processes student education records as a “school official” under FERPA, operating under the direct control of the educational agency with a legitimate educational interest in the data.

  1. 1Student data is accessible only to authorized personnel within the institution (faculty for their courses, administrators for their institution).
  2. 2Each institution’s data is isolated through multi-tenant architecture.
  3. 3Access to student PII is logged for audit and compliance purposes.
  4. 4Students may request access to their own records through their institution.

Changes to This Notice

If we make material changes to how we handle personal data, we will notify affected institutions at least 30 days before the changes take effect. The version number and effective date at the top of this page indicate the current version.

Contact

For questions about this Privacy Notice or to exercise your rights:

Privacy inquiries: support@zobelsolutions.com
Security disclosures: security@zobelsolutions.com
Mail: Zobel Solutions LLC, Rochester, New York

EduLens

A FERPA-compliant, privacy-first platform for higher education. AI-powered learning support, real-time class sessions, and actionable insights. Built by Zobel Solutions LLC in Rochester, New York.

Contact

Privacy & support:
support@zobelsolutions.com

Security disclosures:
security@zobelsolutions.com

© 2026 Zobel Solutions LLC. All rights reserved.