Student Privacy

Olto Discovery for Education is a school-controlled science learning environment owned and operated by Velora Biotech LLC. This page explains, in plain language, how we handle student and educator information and the commitments we make to schools, teachers, and families.

The education portal is built so that schools (not individuals) control the workspace. Educators register and are verified before they can create classes; students participate only inside a teacher-managed class. We do not offer public student self-registration, and we do not create public student profiles. Student work stays inside the school workspace unless a teacher explicitly approves sharing.

We collect the minimum information needed to operate the classroom experience: an educator’s name, school-affiliated email, and institution; the classes, assignments, and rubrics a teacher creates; and the student submissions, reflections, and AI-assisted planning produced within a class. We do not require or request more than is necessary for the educational purpose.

The Family Educational Rights and Privacy Act (FERPA) protects the privacy of student education records. Where Olto Discovery for Education processes student records on behalf of a school, we intend to operate as a “school official” with a legitimate educational interest, under the direction and control of the school, and to use student data only for the educational purposes the school authorizes.

We are actively working to align our practices with FERPA and to operate as a “school official” under a school’s direction. FERPA has no formal certification; we do not and cannot claim to be “FERPA-certified.” As we complete pilot deployments we will publish data-handling documentation and a model agreement that schools can review with their counsel.

The Children’s Online Privacy Protection Act (COPPA) governs the online collection of personal information from children under 13. Olto Discovery for Education is designed for educator-directed use: student accounts are teacher-provisioned, there is no public student self-registration, and there are no under-13 public accounts. Where a class includes students under 13, we rely on the school to provide any parental consent required under COPPA’s school-consent framework, acting under the school’s direction, and we intend to collect and use the limited student information solely to provide the educational service the school requests.

We are preparing a COPPA compliance program and do not claim to be COPPA-certified. Student data is not used for advertising or third-party marketing, and student-marketing email is disabled by default.

California’s Student Online Personal Information Protection Act (SOPIPA) and related California student-privacy laws restrict how K-12 student information may be used. Olto Discovery for Education is designed to align with these principles: we do not sell student information, we do not use it to target advertising, and we do not build advertising or commercial profiles of students.

We align our practices with California student-privacy law (SOPIPA) and do not claim any certification. We will make our California-specific commitments available to participating California districts before pilot launch.

The Association of Technology Leaders in Independent Schools (ATLIS) promotes responsible vendor data-privacy practices for schools. We follow ATLIS guidance for responsible vendor data-privacy practices as we build the education portal. We do not claim any ATLIS certification.

Educators and students can use task-scoped AI assistants — with classroom-oriented safeguards and required educator review — for research planning, hypothesis and rubric support, reflection coaching, and similar learning tasks. Every AI assistant is configured to encourage teacher oversight and to refuse dangerous content; higher-risk topics (for example human-subjects work, medical diagnosis or treatment, or hazardous chemistry) are routed for required teacher review before a student protocol can be treated as runnable.

We do not use school or student data to train Olto-owned or public AI models without the school’s explicit permission. AI training on student data is disabled by default. Education AI runs are metered and recorded against the school workspace so that teachers and administrators have an auditable record of how the assistants were used. Prompts submitted for AI processing are sent to our AI inference partner solely to produce the response, and are handled under that partner’s applicable API terms.

Olto Discovery for Education relies on a small set of infrastructure and inference providers acting as data processors on our behalf (for database, authentication, file storage, application hosting, payment processing, and AI inference). A complete, education-specific subprocessor list (naming each provider and its purpose) will be published before pilot launch so that schools can review it during procurement.

We retain student and class data while a class is active and while it is needed to provide the educational service the school has requested. When a school or teacher deletes a class, assignment, or submission, the corresponding records are removed from active systems within a reasonable period; backups may persist until they are overwritten by the normal backup rotation.

Security and audit logs of education activity are retained on a bounded schedule and then purged. A school may request deletion or export of the records associated with its workspace by contacting us using the address below; we will respond within the timeframes required by applicable law.

These commitments apply to all student and educator data in the education portal:

• We do not sell student or educator data.
• We do not use student data for advertising or ad targeting.
• We do not create public student profiles or publish student work without approval.
• Workspaces are school-controlled: schools and teachers govern who participates and what is shared.
• Public sharing is off by default; a teacher must explicitly approve before any student work can be shared.
• AI training on school or student data is off by default and does not occur without the school’s explicit permission.
• Student-marketing email is disabled by default.

Schools, districts, parents, and guardians can reach our privacy team for access, correction, deletion, export, or any other student-privacy request at privacy@oltodiscovery.com. You can also reach us through our contact page. We will route school privacy requests to the appropriate team and respond as required by applicable law.